Security Tool - vir

[Marti86nek]

Už jsem na to taky přišla, že jsem si to nepřečetla celý.

[stell]

ok,zmaz to podla navodu,a vlozis sem este log combofix u,,ale uz len zajtra sa pozriem na log ,,
dobru noc

PROSIM CITAJTE POZORNE NAVODY!!!,

Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix -
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Suhlasit instalacio Konzoly pre zotavenie (Recovery console)


- ComboFix je třeba spustit pod účtem s právy administrátora.
- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano;

A este raz >ANO<

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího modreho okna

- Po dokončení skenování, trvajícího maximálně 10-15 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah do svého threadu na forum
- Před použitím ComboFixu je treba vypnout všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary. NAVOD: http://www.bleepingcomputer.com/forums/topic114351.html
Mohou zasahovat do činnosti ComboFixu, což může způsobit, že nebude fungovat korektně.
V případě detekce antiviru u ComboFixu se jedná o falešný poplach.

[Marti86nek]

Tak tady to je, snad je to všechno v pořádku. Ještě jednou Ti moc děkuju za ochotu a zároveň se moc omlouvám za svou nechápavost a hlavně pomalost. Dobrou noc.

ComboFix 09-11-08.02 - eee 08.11.2009 22:25.1.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1015.516 [GMT 1:00]
Spuštěný z: c:\documents and settings\eee\Dokumenty\Stažené soubory\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 091108-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\S-1-5-21-1454471165-1417001333-299502267-1003
c:\windows\system32\ieuinit.inf

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-10-08 do 2009-11-08 )))))))))))))))))))))))))))))))
.

2009-11-08 20:25 . 2009-09-10 13:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-08 20:25 . 2009-11-08 20:51 -------- d-----w- d:\program files\Malwarebytes' Anti-Malware
2009-11-08 20:25 . 2009-09-10 13:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-08 20:10 . 2009-11-08 20:10 -------- d-----w- C:\_OTM
2009-11-08 19:51 . 2009-11-08 19:51 -------- d-----w- d:\program files\trend micro
2009-11-08 19:51 . 2009-11-08 19:51 -------- d-----w- C:\rsit
2009-11-08 17:39 . 2009-11-08 17:39 -------- d-----w- d:\program files\Crawler
2009-10-29 16:51 . 2009-10-29 16:51 -------- d-----w- d:\program files\McAfee Security Scan
2009-10-10 08:11 . 2009-10-10 08:11 -------- d-s---w- c:\documents and settings\eee\UserData

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-08 21:19 . 2008-05-07 21:59 62336 ----a-w- c:\windows\system32\perfc005.dat
2009-11-08 21:19 . 2008-05-07 21:59 379806 ----a-w- c:\windows\system32\perfh005.dat
2009-10-17 12:48 . 2008-09-16 13:58 -------- d-----w- d:\program files\Microsoft Works
2009-10-08 18:28 . 2008-09-16 13:55 -------- d-----w- c:\program files\Common Files\Adobe
2009-10-08 18:20 . 2009-10-08 18:20 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-09-11 14:19 . 2008-05-07 21:57 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 21:05 . 2008-05-07 21:57 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-26 08:02 . 2008-05-07 21:59 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-17 16:10 . 2009-06-29 20:37 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-06-29 20:38 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-06-29 20:38 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-06-29 20:38 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-06-29 20:38 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-06-29 20:38 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-06-29 20:38 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-06-29 20:38 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-06-29 20:38 97480 ----a-w- c:\windows\system32\AvastSS.scr
2008-09-16 14:12 . 2008-09-17 02:57 33 ---ha-w- d:\program files\oemver.txt
2008-05-07 08:34 . 2008-09-16 14:07 15523560 ----a-w- d:\program files\U1 Setup.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="d:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-12-19 131072]
"AsusTray"="d:\program files\EeePC\ACPI\AsTray.exe" [2008-07-23 98304]
"AsusACPIServer"="d:\program files\EeePC\ACPI\AsAcpiSvr.exe" [2008-07-23 479232]
"AsusEPCMonitor"="d:\program files\EeePC\ACPI\AsEPCMon.exe" [2008-05-20 94208]
"SunJavaUpdateSched"="d:\program files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-24 132496]
"ETDWare"="d:\program files\Elantech\ETDCtrl.exe" [2008-09-03 335872]
"ETDWareDetect"="d:\program files\Elantech\ETDDect.exe" [2008-08-22 204800]
"avast!"="d:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"Adobe Reader Speed Launcher"="d:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"Malwarebytes Anti-Malware (reboot)"="d:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2008-07-31 16806912]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
AutoRun OSCleaner.lnk - d:\program files\ASUS\Asus OS Cleaner\AsOSCleaner.exe [2008-9-17 118784]
Bluetooth.lnk - d:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-7-30 604776]
McAfee Security Scan.lnk - d:\program files\McAfee Security Scan\1.0.150\SSScheduler.exe [2009-7-28 199184]
SuperHybridEngine.exe.lnk - d:\program files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe [2008-9-16 303104]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"d:\\program files\\Windows Live\\Messenger\\msnmsgr.exe"=
"d:\\program files\\Windows Live\\Messenger\\livecall.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [29.6.2009 21:38 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [29.6.2009 21:38 20560]
R3 AsusACPI;ASUS ACPI Driver;c:\windows\system32\drivers\ASUSACPI.SYS [16.9.2008 14:48 11264]
R3 Ktp;Elantech Smart-Pad;c:\windows\system32\drivers\ETD.sys [10.9.2008 1:31 26112]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1e51x86.sys [16.9.2008 3:53 36864]
R3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [16.9.2008 14:48 625024]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - MBR
*NewlyCreated* - PROCEXP113
*Deregistered* - mbr
*Deregistered* - PROCEXP113
.
Obsah adresáře 'Naplánované úlohy'

2009-08-20 c:\windows\Tasks\AppleSoftwareUpdate.job
- d:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://eeepc.asus.com/global
IE: Crawler Search - tbr:iemenu
IE: Odeslat do zařízení &Bluetooth... - d:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - d:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - d:\progra~1\Crawler\Toolbar\ctbr.dll
FF - ProfilePath - c:\documents and settings\eee\Data aplikací\Mozilla\Firefox\Profiles\9cywjxyi.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx? ... 60347&qkw=
FF - prefs.js: network.proxy.type - 2
FF - plugin: c:\program files\Windows Media Player\npdrmv2.dll
FF - plugin: c:\program files\Windows Media Player\npdsplay.dll
FF - plugin: c:\program files\Windows Media Player\npwmsdrm.dll
FF - plugin: d:\program files\Opera\program\plugins\np_gp.dll

---- NASTAVENÍ FIREFOXU ----
d:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
d:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-08 22:32
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2009-11-08 22:35
ComboFix-quarantined-files.txt 2009-11-08 21:35

Před spuštěním: 1 111 629 824
Po spuštění: 1 078 984 704

WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

- - End Of File - - F3C7B0DA817CEE0E4C182AC6EFDC3644

[stell]

Odinstaluj ComboFix - Start -> Spustit - ComboFix /Uninstall -> OK

Start-spustit-napis cleanmgr ok>>dalsie moznosti-obnova systemu-vycistit,,ok,,ok

Stáhni, nainstaluj program CCleaner - http://www.ccleaner.com/download/downloadpage.aspx?f=2
- PravyKlik na kos-spustit ccleaner ->>>Cakas>>na cistenie,,
PravyKlik na kos-otvorit ccleaner-záložka Windows a stiskni Analyzovat a poté Spustit Cleaner
- Klikni na záložku Aplikace a stiskni Analyzovat a poté Spustit Cleaner
- Klikni na Registry, stiskni Hledej problémy, po dokončení skenování klikni na Opravit vybrané problémy,
-zvol Ano pro vytvoření zálohy, ulož nabídnutý soubor a klikni na Opravit všechny problémy,

Nevidim Firewall,,a hotovo,,tot vse,,

[Marti86nek]

Ahojky,
tak jsem snad udělala vše tak, jak jsi výše popsal. Teď už je celý problém vyřešen???

[stell]

podla mna ano,

[Marti86nek]

Tak Ti ještě jednou strašně moc děkuju, hlavně za trpělivost, nevím, co bych jinak dělala.

[stell]

nemas zaco,

[polo1]

čau, mm stejn problém jsem v nouzovm režimu a OTM mi vytvořil tohle, OTM by OldTimer - Version 3.1.2.0 log created on 11282009_101933
můžete pomoci dik

[stell]

zdravim
nabuduce odporucam ti vytvorit si vlastnu temu vo fore,nikdy nemozno pouzit rovnaky postup,nakolko niekedy mazeme aj legalne veci,,ak su nepotrebne a kazdy pocitac ma inu softwerovu a HW>konfiguraciu,,ale ked si uz tu tak ti pomozem,,co s tebou,
vloz sem log OTMOVEIT,co si zmazal,a novy log z RSIT..
Stiahnes>>RSIT >>logy vloz sem,

[navojka]

Zdravim, mam take problem se security tool.. jsem uz v nouzovem rezimu, rsit i otm mam stazene a spustene.. muzu poprosit o radu jak dal? dekuji moc!!!

[stell]

zdravim
No co uz stebou,,
vloz sem log z RSIT..

[navojka]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Návojovic at 2009-11-30 14:11:13
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 74 GB (80%) free of 93 GB
Total RAM: 895 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:11:13, on 30.11.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Návojovic\Plocha\OTM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows NT\RSIT.exe
C:\Program Files\trend micro\Návojovic.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: CentrumczToolbar BHO - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O3 - Toolbar: Centrum.cz Toolbar - {D5D47440-0750-463D-BAEF-A47D02414806} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [61461119] C:\DOCUME~1\ALLUSE~1\DATAAP~1\61461119\61461119.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.5.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

--
End of file - 5161 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A}]
CentrumczToolbar BHO - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2009-10-22 1171760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806} - Centrum.cz Toolbar - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2009-10-22 1171760]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-02-23 106496]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2006-03-08 344064]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-05-04 16206848]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"SMSERIAL"=C:\WINDOWS\sm56hlpr.exe [2006-01-20 544768]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2005-10-17 987136]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"ConnectionCenter"=C:\Program Files\Citrix\ICA Client\concentr.exe [2009-09-12 103768]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-03 1848648]
"61461119"=C:\DOCUME~1\ALLUSE~1\DATAAP~1\61461119\61461119.exe [2009-11-30 1210429]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-17 1667584]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-03-08 61440]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-11-30 13:53:56 ----D---- C:\Program Files\trend micro
2009-11-30 13:52:13 ----A---- C:\WINDOWS\ntbtlog.txt
2009-11-30 13:38:57 ----D---- C:\rsit
2009-11-30 09:15:12 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\AVG8
2009-11-30 02:37:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\61461119
2009-11-24 15:09:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\CanonIJ
2009-11-24 10:47:11 ----HD---- C:\Documents and Settings\All Users\Data aplikací\CanonIJScan
2009-11-24 10:46:57 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\Canon
2009-11-22 21:23:00 ----HD---- C:\Documents and Settings\All Users\Data aplikací\CanonIJSolutionMenu
2009-11-22 21:22:59 ----HD---- C:\Documents and Settings\All Users\Data aplikací\CanonIJMyPrinter
2009-11-22 21:22:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\CanonIJPLM
2009-11-22 21:16:41 ----D---- C:\Program Files\Common Files\CANON
2009-11-22 21:13:47 ----HD---- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
2009-11-22 21:13:37 ----A---- C:\WINDOWS\system32\CNMLM9H.DLL
2009-11-22 21:13:35 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2009-11-22 21:13:23 ----A---- C:\WINDOWS\system32\CNC240O.DLL
2009-11-22 21:13:23 ----A---- C:\WINDOWS\system32\CNC240L.DLL
2009-11-22 21:13:23 ----A---- C:\WINDOWS\system32\CNC240I.DLL
2009-11-22 21:13:22 ----A---- C:\WINDOWS\system32\CNC240C.DLL
2009-11-22 21:13:12 ----HD---- C:\Program Files\CanonBJ
2009-11-22 21:11:08 ----D---- C:\Program Files\Canon
2009-11-22 16:32:37 ----A---- C:\WINDOWS\ODBC.INI
2009-11-22 16:31:05 ----D---- C:\Program Files\Common Files\Designer
2009-11-22 16:29:38 ----D---- C:\WINDOWS\ShellNew
2009-11-22 16:29:06 ----D---- C:\Program Files\Microsoft Office
2009-11-21 18:17:57 ----SHD---- C:\WINDOWS\CSC
2009-11-20 21:05:43 ----D---- C:\Program Files\IrfanView
2009-11-20 08:46:49 ----D---- C:\Program Files\Citrix
2009-11-20 08:43:03 ----D---- C:\WINDOWS\system32\appmgmt
2009-11-20 08:38:12 ----D---- C:\WINDOWS\SxsCaPendDel
2009-11-20 08:23:14 ----A---- C:\Program Files\CitrixOfflinePlugin.exe
2009-11-20 00:18:00 ----D---- C:\Program Files\Common Files\Adobe
2009-11-20 00:18:00 ----D---- C:\Program Files\Adobe
2009-11-20 00:12:32 ----D---- C:\WINDOWS\WBEM
2009-11-20 00:12:11 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-11-20 00:10:46 ----HDC---- C:\WINDOWS\ie8
2009-11-20 00:10:46 ----D---- C:\WINDOWS\system32\cs-CZ
2009-11-20 00:10:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\CentrumczToolbar
2009-11-20 00:10:26 ----D---- C:\Program Files\CentrumczToolbar
2009-11-20 00:09:40 ----HD---- C:\WINDOWS\msdownld.tmp
2009-11-20 00:08:05 ----A---- C:\Program Files\AdbeRdr920_cs_CZ.exe
2009-11-20 00:03:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2009-11-20 00:03:45 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\Adobe
2009-11-20 00:02:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2009-11-19 23:54:23 ----A---- C:\Program Files\CitrixOnlinePluginWeb.exe
2009-11-19 23:52:17 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\Citrix
2009-11-19 23:44:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Citrix
2009-11-19 23:43:10 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\ICAClient
2009-11-19 23:42:28 ----SHD---- C:\RECYCLER
2009-11-19 23:41:07 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\Download Manager
2009-11-19 23:37:28 ----A---- C:\WINDOWS\system32\h323log.txt
2009-11-19 23:36:51 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\skypePM
2009-11-19 23:35:46 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\Skype
2009-11-19 23:35:27 ----A---- C:\WINDOWS\system32\irmon.dll
2009-11-19 23:35:26 ----A---- C:\WINDOWS\system32\wshirda.dll
2009-11-19 23:35:26 ----A---- C:\WINDOWS\system32\irftp.exe
2009-11-19 23:34:51 ----A---- C:\WINDOWS\system32\usbui.dll
2009-11-19 23:34:04 ----D---- C:\Program Files\Common Files\Skype
2009-11-19 23:34:01 ----RD---- C:\Program Files\Skype
2009-11-19 23:33:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2009-11-19 23:33:36 ----A---- C:\WINDOWS\imsins.BAK
2009-11-19 23:33:34 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-19 23:33:33 ----SHD---- C:\WINDOWS\Installer
2009-11-19 23:33:33 ----D---- C:\Program Files\Common Files\ODBC
2009-11-19 23:33:33 ----A---- C:\WINDOWS\ODBCINST.INI
2009-11-19 23:33:28 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-11-19 23:33:27 ----RD---- C:\Program Files
2009-11-19 23:33:27 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-11-19 23:33:27 ----D---- C:\Program Files\Common Files
2009-11-19 23:33:24 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-11-19 23:33:24 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-11-19 23:33:24 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-11-19 23:33:22 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-11-19 23:33:22 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-11-19 23:33:22 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-11-19 23:33:22 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-11-19 23:33:22 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-11-19 23:33:21 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-11-19 23:33:21 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-11-19 23:33:21 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-11-19 23:33:21 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-11-19 23:33:21 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-11-19 23:33:21 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-11-19 23:33:21 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-11-19 23:33:19 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-11-19 23:33:19 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-11-19 23:33:19 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-11-19 23:33:19 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-11-19 23:33:19 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-11-19 23:33:19 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-11-19 23:33:19 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-11-19 23:33:17 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-11-19 23:33:17 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-11-19 23:33:17 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-11-19 23:33:17 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-11-19 23:33:17 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdycl.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdsl.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdro.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdpl.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdhu.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\kbdcr.dll
2009-11-19 23:33:13 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2009-11-19 23:33:12 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-11-19 23:33:12 ----A---- C:\WINDOWS\system32\irclass.dll
2009-11-19 23:33:12 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-11-19 23:33:12 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-11-19 23:33:11 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-11-19 23:33:09 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-11-19 23:33:09 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-11-19 23:33:09 ----A---- C:\WINDOWS\system32\batt.dll
2009-11-19 23:33:08 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-11-19 23:33:05 ----A---- C:\WINDOWS\system32\storprop.dll
2009-11-19 23:32:56 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2009-11-19 23:32:53 ----RA---- C:\WINDOWS\SET8.tmp
2009-11-19 23:32:50 ----RA---- C:\WINDOWS\SET4.tmp
2009-11-19 23:32:48 ----RA---- C:\WINDOWS\SET3.tmp
2009-11-19 23:32:40 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-19 23:32:40 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-19 23:32:34 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2009-11-19 23:32:08 ----A---- C:\WINDOWS\setuplog.txt
2009-11-19 23:32:05 ----D---- C:\Documents and Settings
2009-11-19 23:32:04 ----SHD---- C:\System Volume Information
2009-11-19 23:31:47 ----A---- C:\Program Files\SkypeSetup.exe
2009-11-19 23:31:14 ----SH---- C:\boot.ini
2009-11-19 23:31:10 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\Macromedia
2009-11-19 23:24:30 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-11-19 23:24:30 ----RSD---- C:\WINDOWS\Fonts
2009-11-19 23:24:30 ----RD---- C:\WINDOWS\Web
2009-11-19 23:24:30 ----HD---- C:\WINDOWS\inf
2009-11-19 23:24:30 ----D---- C:\WINDOWS\WinSxS
2009-11-19 23:24:30 ----D---- C:\WINDOWS\twain_32
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Temp
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\wins
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\wbem
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\usmt
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\spool
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\ShellExt
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\Setup
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\ras
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\oobe
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\npp
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\mui
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\inetsrv
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\IME
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\icsxml
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\ias
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\export
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\drivers
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\dhcp
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\config
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\3com_dmi
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\3076
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\2052
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1054
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1042
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1041
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1037
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1033
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1031
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1029
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1028
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32\1025
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system32
2009-11-19 23:24:30 ----D---- C:\WINDOWS\system
2009-11-19 23:24:30 ----D---- C:\WINDOWS\security
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Resources
2009-11-19 23:24:30 ----D---- C:\WINDOWS\repair
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Provisioning
2009-11-19 23:24:30 ----D---- C:\WINDOWS\pchealth
2009-11-19 23:24:30 ----D---- C:\WINDOWS\PeerNet
2009-11-19 23:24:30 ----D---- C:\WINDOWS\mui
2009-11-19 23:24:30 ----D---- C:\WINDOWS\msapps
2009-11-19 23:24:30 ----D---- C:\WINDOWS\msagent
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Media
2009-11-19 23:24:30 ----D---- C:\WINDOWS\java
2009-11-19 23:24:30 ----D---- C:\WINDOWS\ime
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Help
2009-11-19 23:24:30 ----D---- C:\WINDOWS\ehome
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Driver Cache
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Debug
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Cursors
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Connection Wizard
2009-11-19 23:24:30 ----D---- C:\WINDOWS\Config
2009-11-19 23:24:30 ----D---- C:\WINDOWS\AppPatch
2009-11-19 23:24:30 ----D---- C:\WINDOWS\addins
2009-11-19 23:24:30 ----D---- C:\WINDOWS
2009-11-19 23:09:18 ----D---- C:\Program Files\Wireless Console 2
2009-11-19 23:09:18 ----A---- C:\WINDOWS\system32\wcourier.exe
2009-11-19 23:09:18 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-11-19 23:05:15 ----A---- C:\ASWL2K.ini
2009-11-19 23:05:09 ----D---- C:\WINDOWS\system32\Lang
2009-11-19 23:00:19 ----A---- C:\WINDOWS\system32\snymsico.dll
2009-11-19 22:59:06 ----A---- C:\WINDOWS\system32\ASUSW32N50.dll
2009-11-19 22:59:04 ----D---- C:\Program Files\ASUS
2009-11-19 22:57:56 ----RA---- C:\WINDOWS\system32\SynVFW.dll
2009-11-19 22:57:56 ----RA---- C:\WINDOWS\system32\SynUSD.dll
2009-11-19 22:57:56 ----RA---- C:\WINDOWS\system32\SynSvc_.exe
2009-11-19 22:57:56 ----RA---- C:\WINDOWS\Syn112X.exe
2009-11-19 22:57:56 ----RA---- C:\WINDOWS\StkUnist.exe
2009-11-19 22:57:50 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-11-19 22:57:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallShield
2009-11-19 22:56:57 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-11-19 22:56:49 ----D---- C:\WINDOWS\OPTIONS
2009-11-19 22:56:12 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll
2009-11-19 22:56:12 ----R---- C:\WINDOWS\system32\ChCfg.exe
2009-11-19 22:55:55 ----RA---- C:\WINDOWS\system32\sm56co.dll
2009-11-19 22:55:54 ----D---- C:\WINDOWS\Motorola
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56spn.dll
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56jpn.dll
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56itl.dll
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56cht.dll
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56chs.dll
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56hlpr.exe
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56ger.dll
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56fra.dll
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56eng.dll
2009-11-19 22:55:53 ----RA---- C:\WINDOWS\sm56brz.dll
2009-11-19 22:55:35 ----D---- C:\WINDOWS\system32\RTCOM
2009-11-19 22:55:32 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-11-19 22:55:02 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-11-19 22:55:00 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-11-19 22:54:58 ----R---- C:\WINDOWS\SoundMan.exe
2009-11-19 22:54:57 ----R---- C:\WINDOWS\RtlUpd.exe
2009-11-19 22:54:53 ----R---- C:\WINDOWS\RTLCPL.exe
2009-11-19 22:54:43 ----R---- C:\WINDOWS\RTHDCPL.exe
2009-11-19 22:54:42 ----R---- C:\WINDOWS\MicCal.exe
2009-11-19 22:54:39 ----R---- C:\WINDOWS\alcwzrd.exe
2009-11-19 22:54:38 ----R---- C:\WINDOWS\Alcmtr.exe
2009-11-19 22:54:38 ----D---- C:\Program Files\Realtek
2009-11-19 22:53:40 ----D---- C:\Program Files\Common Files\ATI Technologies
2009-11-19 22:53:29 ----R---- C:\WINDOWS\RtlExUpd.dll
2009-11-19 22:53:04 ----RA---- C:\WINDOWS\system32\atiiiexx.dll
2009-11-19 22:52:48 ----D---- C:\Program Files\ATI Technologies
2009-11-19 22:52:07 ----D---- C:\WINDOWS\ATK0100
2009-11-19 22:51:19 ----HD---- C:\Program Files\InstallShield Installation Information
2009-11-19 22:51:11 ----D---- C:\Program Files\Common Files\InstallShield
2009-11-19 22:48:57 ----D---- C:\Documents and Settings\Návojovic\Data aplikací\Identities
2009-11-19 22:48:56 ----HD---- C:\Program Files\Uninstall Information
2009-11-19 22:48:49 ----SD---- C:\Documents and Settings\Návojovic\Data aplikací\Microsoft
2009-11-19 22:48:49 ----ASH---- C:\Documents and Settings\Návojovic\Data aplikací\desktop.ini
2009-11-19 22:47:55 ----D---- C:\WINDOWS\SoftwareDistribution
2009-11-19 22:47:54 ----D---- C:\WINDOWS\Prefetch
2009-11-19 22:47:53 ----SD---- C:\WINDOWS\system32\Microsoft
2009-11-19 22:47:53 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-19 22:44:01 ----D---- C:\WINDOWS\system32\xircom
2009-11-19 22:44:01 ----D---- C:\Program Files\xerox
2009-11-19 22:44:01 ----D---- C:\Program Files\microsoft frontpage
2009-11-19 22:43:41 ----A---- C:\WINDOWS\control.ini
2009-11-19 22:43:41 ----A---- C:\AUTOEXEC.BAT
2009-11-19 22:43:25 ----A---- C:\WINDOWS\OEWABLog.txt
2009-11-19 22:43:21 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-11-19 22:42:29 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-19 22:42:29 ----RD---- C:\WINDOWS\Offline Web Pages
2009-11-19 22:42:29 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-11-19 22:42:22 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-11-19 22:42:18 ----HD---- C:\Program Files\WindowsUpdate
2009-11-19 22:42:14 ----D---- C:\Program Files\Online Services
2009-11-19 22:41:55 ----D---- C:\WINDOWS\system32\DirectX
2009-11-19 22:41:29 ----A---- C:\WINDOWS\system32\atrace.dll
2009-11-19 22:41:26 ----A---- C:\WINDOWS\system32\desktop.ini
2009-11-19 22:41:26 ----A---- C:\WINDOWS\desktop.ini
2009-11-19 22:41:18 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-11-19 22:41:16 ----D---- C:\Program Files\Common Files\Services
2009-11-19 22:41:16 ----A---- C:\WINDOWS\system32\acctres.dll
2009-11-19 22:41:13 ----SD---- C:\WINDOWS\Tasks
2009-11-19 22:41:13 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-11-19 22:41:12 ----D---- C:\Program Files\Common Files\MSSoap
2009-11-19 22:41:06 ----D---- C:\WINDOWS\srchasst
2009-11-19 22:41:05 ----D---- C:\WINDOWS\system32\Macromed
2009-11-19 22:41:01 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-11-19 22:41:01 ----A---- C:\WINDOWS\system32\wups.dll
2009-11-19 22:41:01 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-11-19 22:41:01 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-11-19 22:41:01 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-11-19 22:41:01 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-11-19 22:41:00 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-11-19 22:41:00 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-11-19 22:41:00 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-11-19 22:41:00 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-11-19 22:41:00 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-11-19 22:41:00 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-11-19 22:41:00 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-11-19 22:40:54 ----D---- C:\Program Files\Movie Maker
2009-11-19 22:40:49 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-11-19 22:40:49 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-11-19 22:40:49 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-11-19 22:40:49 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-11-19 22:40:43 ----D---- C:\WINDOWS\system32\Restore
2009-11-19 22:40:43 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-11-19 22:40:43 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-11-19 22:40:43 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-11-19 22:40:43 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-11-19 22:40:42 ----A---- C:\WINDOWS\system32\srclient.dll
2009-11-19 22:40:42 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-11-19 22:40:42 ----A---- C:\WINDOWS\system32\ils.dll
2009-11-19 22:40:41 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-11-19 22:40:41 ----A---- C:\WINDOWS\system32\msconf.dll
2009-11-19 22:40:41 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-11-19 22:40:41 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-11-19 22:40:38 ----D---- C:\Program Files\NetMeeting
2009-11-19 22:40:38 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-11-19 22:40:38 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-11-19 22:40:36 ----A---- C:\WINDOWS\system32\inetres.dll
2009-11-19 22:40:36 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-11-19 22:40:33 ----D---- C:\Program Files\Outlook Express
2009-11-19 22:40:33 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-11-19 22:40:33 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-11-19 22:40:33 ----A---- C:\WINDOWS\system32\mstask.dll
2009-11-19 22:40:32 ----A---- C:\WINDOWS\system32\isign32.dll
2009-11-19 22:40:32 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-11-19 22:40:32 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-11-19 22:40:32 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-11-19 22:40:25 ----D---- C:\Program Files\Common Files\System
2009-11-19 22:40:19 ----D---- C:\Program Files\Internet Explorer
2009-11-19 22:39:41 ----D---- C:\Program Files\ComPlus Applications
2009-11-19 22:39:39 ----A---- C:\WINDOWS\vbaddin.ini
2009-11-19 22:39:39 ----A---- C:\WINDOWS\vb.ini
2009-11-19 22:39:35 ----D---- C:\WINDOWS\Registration
2009-11-19 22:39:27 ----D---- C:\Program Files\Windows Media Player
2009-11-19 22:39:20 ----D---- C:\Program Files\Messenger
2009-11-19 22:39:16 ----D---- C:\Program Files\MSN Gaming Zone
2009-11-19 22:39:16 ----A---- C:\WINDOWS\system32\write.exe
2009-11-19 22:39:06 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-11-19 22:39:06 ----A---- C:\WINDOWS\system32\hticons.dll
2009-11-19 22:39:05 ----A---- C:\WINDOWS\system32\winchat.exe
2009-11-19 22:39:05 ----A---- C:\WINDOWS\system32\avwav.dll
2009-11-19 22:39:05 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-11-19 22:39:05 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-11-19 22:38:57 ----A---- C:\WINDOWS\system32\charmap.exe
2009-11-19 22:38:57 ----A---- C:\WINDOWS\system32\getuname.dll
2009-11-19 22:38:57 ----A---- C:\WINDOWS\system32\calc.exe
2009-11-19 22:38:56 ----A---- C:\WINDOWS\system32\winmine.exe
2009-11-19 22:38:56 ----A---- C:\WINDOWS\system32\sol.exe
2009-11-19 22:38:56 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\tskill.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\tscon.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\shadow.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\reset.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\regini.exe
2009-11-19 22:38:55 ----A---- C:\WINDOWS\system32\freecell.exe
2009-11-19 22:38:54 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-11-19 22:38:54 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-11-19 22:38:54 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-11-19 22:38:54 ----A---- C:\WINDOWS\system32\msg.exe
2009-11-19 22:38:54 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-11-19 22:38:54 ----A---- C:\WINDOWS\system32\logoff.exe
2009-11-19 22:38:54 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-11-19 22:38:53 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-11-19 22:38:53 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-11-19 22:38:53 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-11-19 22:38:53 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-11-19 22:38:53 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-11-19 22:38:53 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-11-19 22:38:52 ----A---- C:\WINDOWS\system32\stclient.dll
2009-11-19 22:38:52 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-11-19 22:38:47 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-11-19 22:38:46 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-11-19 22:38:45 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-11-19 22:38:45 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-11-19 22:38:45 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-11-19 22:38:44 ----D---- C:\Program Files\Windows NT
2009-11-19 22:38:44 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-11-19 22:38:44 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-11-19 22:38:43 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-11-19 22:38:43 ----A---- C:\WINDOWS\system32\spider.exe
2009-11-19 22:38:42 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-11-19 22:38:42 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-11-19 22:38:42 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-11-19 22:38:42 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-11-19 22:38:42 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-11-19 22:38:42 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-11-19 22:38:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-11-19 22:38:41 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-11-19 22:38:41 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-11-19 22:38:41 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-11-19 22:38:41 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-11-19 22:38:41 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-11-19 22:38:41 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-11-19 22:38:41 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-11-19 22:38:40 ----D---- C:\WINDOWS\system32\MsDtc
2009-11-19 22:38:40 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-11-19 22:38:40 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-11-19 22:38:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-11-19 22:38:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-11-19 22:38:39 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-11-19 22:38:39 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-11-19 22:38:39 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-11-19 22:38:39 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-11-19 22:38:38 ----D---- C:\WINDOWS\system32\Com
2009-11-19 22:38:38 ----A---- C:\WINDOWS\system32\colbact.dll
2009-11-19 22:38:38 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-11-19 22:38:38 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-11-19 22:38:37 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-11-19 22:38:37 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-11-19 22:38:36 ----A---- C:\WINDOWS\system32\comuid.dll
2009-11-19 22:38:36 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-11-19 22:38:36 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-11-19 22:38:28 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-11-19 22:38:28 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-11-19 22:38:28 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-11-19 22:38:25 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-11-22 16:32:23 ----A---- C:\WINDOWS\win.ini
2009-11-19 23:33:26 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R3 BCM43XX;ASUS 802.11 ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-02-11 371712]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-07-12 51328]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-01-18 80512]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-03 17024]
S1 ctxusbm;Citrix USB Monitor Driver; C:\WINDOWS\system32\DRIVERS\ctxusbm.sys [2009-09-08 65584]
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
S2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424]
S3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-03-08 1506816]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-05-04 4271616]
S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-03 67584]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-01-20 862340]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 SynMini;USB2.0 1.3M WebCam; C:\WINDOWS\System32\Drivers\SynMini.sys [2006-07-03 1056512]
S3 SynScan;USB2.0 1.3M WebCam Still Image; C:\WINDOWS\System32\Drivers\SynScan.sys [2006-06-30 8064]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-03-08 405504]
S2 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2008-01-22 103808]
S2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]

-----------------EOF-----------------

[stell]

spust OTMOVEIT3<do laveho okna podla navodu vloz zeleny text a klik.MOVEIT>log po restarte vloz sem

Kód: Vybrat vše

:processes
explorer.exe

:files
C:\DOCUME~1\ALLUSE~1\DATAAP~1\61461119
C:\Documents and Settings\All Users\Data aplikací\61461119

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"61461119"=-

:commands
[purity]
[emptytemp]
[resethosts]
[start explorer]
[Reboot]

http://download.bleepingcomputer.com/ma ... -setup.exe
Stiahnes>>Malwarebytes' Anti-Malware
sprav komplet skan,,log vloz sem,

[navojka]

restart probehl, vypada to ze vse ok..
ehm.. jen jsem nepochopila co mam zkopcit a vlozit sem...?