Prosim o preventvivni kontrolu logu

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Uživatelský avatar
mijaja
Tvůrce článků
Level 6.5
Level 6.5
Příspěvky: 4136
Registrován: září 05
Bydliště: Zlín
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod mijaja » 20 říj 2006 09:32

Ten log je dlouhý proto, že jsi nečetl návod!!! Kdybys použil Ccleaner, jak je tam psáno, víc než půlka logu (soubory z Tempu, Temporary IF a další zbytečnosti) by šla do někam. Takže tady máš výsledek:



HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run s hodnotou RTBatteryMeter = C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run s hodnotou Windows connection manager = sysdll32.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices s hodnotou Windows connection manager = sysdll32.exe

HKLM\Software\microsoft\downloadmanager - toto asi nenajdeš, ale zkus to - istbar Spyware/Adware

Thu Oct 19 18:05:25 2006 => Total Objects Scanned: 22767
Thu Oct 19 18:05:25 2006 => Total Critical Objects: 1
Thu Oct 19 18:05:25 2006 => Total Disinfected Objects: 0
Thu Oct 19 18:05:25 2006 => Total Objects Renamed: 0
Thu Oct 19 18:05:25 2006 => Total Deleted Objects: 0
Thu Oct 19 18:05:25 2006 => Total Errors: 21
Thu Oct 19 18:05:25 2006 => Time Elapsed: 00:02:23
Thu Oct 19 18:05:25 2006 => Virus Database Date: 10/19/2006
Thu Oct 19 18:05:25 2006 => Virus Database Count: 232911

Thu Oct 19 18:05:25 2006 => Scan Completed.

Ty soubory fyzicky neexistují a hlášky o nich jsou jen osamocené klíče v registrech. Takže si spusť regedit, najdi ty klíče a vymaž je. Pozor! Mažeš jen řádek v PRAVÉM okně s odpovídající hodnotou!
Otevři v levém okně klíč:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
v pravém okně najdi řádek, kde bude RFPIcon.exe nebo i celé toto - RTBatteryMeter = C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe a smaž jej

Stejně postupuj i u těch zbývajících.

Reklama
Uživatelský avatar
Rewqa
Moderátor
Master Level 9
Master Level 9
Příspěvky: 8114
Registrován: říjen 06
Bydliště: Praha
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod Rewqa » 20 říj 2006 19:18

diky moc..hned to du udelat a sorry za moji nepozornost :oops:

Uživatelský avatar
Rewqa
Moderátor
Master Level 9
Master Level 9
Příspěvky: 8114
Registrován: říjen 06
Bydliště: Praha
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod Rewqa » 20 říj 2006 19:28

ja sem asi uplnej curak..vzdycky kdyz to vsechno odmazu a zavru a jdu tam znova tak to tam zase je :mad: :cry:

Uživatelský avatar
mijaja
Tvůrce článků
Level 6.5
Level 6.5
Příspěvky: 4136
Registrován: září 05
Bydliště: Zlín
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod mijaja » 20 říj 2006 20:08

No ještě si nechystej stoličku a provaz. Zkus nejdříve vypnout Obnovu systému, potom vymaž ty registry a přejeď komp nějakým čističem registrů - Ccleanerem, RegScrubem, Regcleanerem. A potom restartuj.

Uživatelský avatar
Rewqa
Moderátor
Master Level 9
Master Level 9
Příspěvky: 8114
Registrován: říjen 06
Bydliště: Praha
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod Rewqa » 20 říj 2006 20:23

Nerad to rikam,ale nevidim rozdil :cry: ..a v tech registrech je to zase

Uživatelský avatar
mijaja
Tvůrce článků
Level 6.5
Level 6.5
Příspěvky: 4136
Registrován: září 05
Bydliště: Zlín
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod mijaja » 20 říj 2006 20:36

A máš tu Obnovu vypnutou? Vím, že se ti do toho nechtělo a bojíš se, aby se něco nestalo:

tak si nejsem jistej jestli je bezpecny vypinat obnovu systemu :-( ..nerad bych si ten komp posral este vic nez je..


Ale bez toho to nepůjde. Mimochodem, když jsme se dostali až tak daleko v preventivní kontrole, je ten komp pořád ještě pomalý? Myslím si, že tyhle záznamy v registrech by už vůbec neměly být ničemu na obtíž.

Asi je tam provázanost v těch registrech trochu vyšší. Vyzkoušej v regeditu funkci Hledat, do okénka napiš jméno toho šmejda a dej hledat, potom F3 - hledat další. A co najde, tak hned mazat. Uvidíme, kolikrát se tam objeví.
Mimoto bys mohl vyzkoušet Rootkit Revealer - jestli ty soubory nejsou skryté za nějakým rootkitem. Zkus i BlackLightBetu. A napiš, jestli něco našli.

Uživatelský avatar
Rewqa
Moderátor
Master Level 9
Master Level 9
Příspěvky: 8114
Registrován: říjen 06
Bydliště: Praha
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod Rewqa » 20 říj 2006 20:38

Obnova je vypnuta..furt je pomalej,proto to taky furt resim

Uživatelský avatar
Rewqa
Moderátor
Master Level 9
Master Level 9
Příspěvky: 8114
Registrován: říjen 06
Bydliště: Praha
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod Rewqa » 20 říj 2006 21:48

Blacklight nic nenasel..ted testuju v RootikRevealeru..tam to neco naslo ale zatim jenom naky registry

Uživatelský avatar
Rewqa
Moderátor
Master Level 9
Master Level 9
Příspěvky: 8114
Registrován: říjen 06
Bydliště: Praha
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod Rewqa » 20 říj 2006 22:40

tak tady po testu Rootkitu

HKLM\S-1-5-21-1844237615-1454471165-839522115-1003\Software\WinRAR\General\Toolbar\Layout\Band0 19.10.2006 19:28 56 bytes Data mismatch between Windows API and raw hive data.
HKLM\S-1-5-21-1844237615-1454471165-839522115-1003\Software\WinRAR\General\Toolbar\Layout\Band1 19.10.2006 19:28 56 bytes Data mismatch between Windows API and raw hive data.
HKLM\S-1-5-21-1844237615-1454471165-839522115-1003\Software\WinRAR\General\Toolbar\Layout\Band2 19.10.2006 19:28 56 bytes Data mismatch between Windows API and raw hive data.
HKLM\S-1-5-21-1844237615-1454471165-839522115-1003\Software\WinRAR\Interface\MainWin\Placement 19.10.2006 19:28 44 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\SecuROM\!CAUTION! NEVER DELETE OR CHANGE ANY KEY* 16.2.2006 20:44 0 bytes Key name contains embedded nulls (*)
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg 17.7.2006 13:12 0 bytes Access is denied.
C:\Documents and Settings\Nobody\Cookies\nobody@hit.gemius[1].txt 20.10.2006 20:22 189 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Cookies\nobody@hit.gemius[2].txt 20.10.2006 21:52 189 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Cookies\nobody@pc-help[1].txt 20.10.2006 21:48 203 bytes Visible in Windows API, MFT, but not in directory index.
C:\Documents and Settings\Nobody\Cookies\nobody@pc-help[2].txt 20.10.2006 22:36 204 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile00131.tmp 20.10.2006 22:03 5.04 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile05120.tmp 20.10.2006 21:41 5.77 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile06071.tmp 20.10.2006 21:16 5.04 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile14794.tmp 20.10.2006 21:45 5.04 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile16112.tmp 20.10.2006 21:39 5.04 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile22529.tmp 20.10.2006 21:54 5.04 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile24000.tmp 20.10.2006 20:59 4.69 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile24924.tmp 20.10.2006 22:06 4.97 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile27466.tmp 20.10.2006 21:21 5.34 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile29952.tmp 20.10.2006 22:00 5.77 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile30828.tmp 20.10.2006 22:06 5.04 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp\ICQTempFile31017.tmp 20.10.2006 21:46 5.04 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\TmpICQMagic_{05736BBE-C20F-4F10-A6DE-4DB1E3564B0E}14259.html 20.10.2006 22:28 978 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\TmpICQMagic_{05736BBE-C20F-4F10-A6DE-4DB1E3564B0E}16522.html 20.10.2006 22:37 978 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temp\TmpICQMagic_{05736BBE-C20F-4F10-A6DE-4DB1E3564B0E}26367.html 20.10.2006 21:57 978 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\TmpICQMagic_{05736BBE-C20F-4F10-A6DE-4DB1E3564B0E}29906.html 20.10.2006 19:45 978 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\TmpICQMagic_{EC202595-1DFD-4301-A1EA-13C1E331B505}10003.html 20.10.2006 22:25 983 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\TmpICQMagic_{EC202595-1DFD-4301-A1EA-13C1E331B505}28350.html 20.10.2006 20:47 983 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\TmpICQMagic_{EC202595-1DFD-4301-A1EA-13C1E331B505}9073.html 20.10.2006 21:50 983 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF4799.tmp 20.10.2006 21:16 16.00 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF47A4.tmp 20.10.2006 21:16 512 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF47AD.tmp 20.10.2006 21:16 16.00 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF47B6.tmp 20.10.2006 21:16 512 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF47BF.tmp 20.10.2006 21:16 16.00 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF47CA.tmp 20.10.2006 21:44 48.00 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF47D3.tmp 20.10.2006 21:16 16.00 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF47DC.tmp 20.10.2006 21:44 480.00 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF871B.tmp 20.10.2006 22:06 16.00 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF8725.tmp 20.10.2006 22:06 512 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF872E.tmp 20.10.2006 22:06 16.00 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF8738.tmp 20.10.2006 22:06 512 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF8741.tmp 20.10.2006 22:06 16.00 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF874B.tmp 20.10.2006 22:21 32.00 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF8754.tmp 20.10.2006 22:06 16.00 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temp\~DF875E.tmp 20.10.2006 22:17 48.00 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\468x60praceczv2[1].gif 20.10.2006 21:16 14.63 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\adsWrapper[1].js 19.10.2006 22:04 6.44 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\aol[47].swf 20.10.2006 21:32 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\aol[48].swf 20.10.2006 21:46 15.85 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\aol[49].swf 20.10.2006 21:50 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\aol[50].swf 20.10.2006 22:00 11.55 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\aol[51].swf 20.10.2006 22:02 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\aol[52].swf 20.10.2006 22:17 13.24 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\aol[53].swf 20.10.2006 22:21 13.24 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\aol[54].swf 20.10.2006 22:27 19.16 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CA2JM7M1.swf 20.10.2006 21:24 19.31 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CAC9QB85.swf 20.10.2006 22:08 19.31 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CAGLIXBW.swf 20.10.2006 21:28 14.54 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CAGT0PSJ.swf 20.10.2006 21:43 18.88 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CAJ683JP.swf 20.10.2006 22:25 24.09 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CALW8BHL.swf 20.10.2006 21:35 24.09 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CAO5GL47.swf 20.10.2006 21:48 20.26 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CAP42PLB.swf 20.10.2006 22:31 21.35 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CATSUP5R.htm 20.10.2006 22:36 412 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\CAYV8LY3.swf 20.10.2006 21:20 24.09 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq120x90[2].aspx 20.10.2006 21:39 590 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[53].aspx 20.10.2006 21:40 2.68 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[54].aspx 20.10.2006 21:45 541 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[55].aspx 20.10.2006 21:52 897 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[56].aspx 20.10.2006 21:56 597 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[57].aspx 20.10.2006 21:59 2.68 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[58].aspx 20.10.2006 22:06 541 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[59].aspx 20.10.2006 22:08 571 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[60].aspx 20.10.2006 22:12 2.48 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[61].aspx 20.10.2006 22:14 607 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\icq468x60[62].aspx 20.10.2006 22:37 2.68 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\viewtopic[11].htm 20.10.2006 22:36 82.60 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\CPMFWPEF\viewtopic[5].htm 20.10.2006 21:54 82.60 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\aol[51].swf 20.10.2006 21:27 13.24 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\aol[52].swf 20.10.2006 21:31 29.86 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\aol[53].swf 20.10.2006 21:54 13.24 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\aol[54].swf 20.10.2006 22:01 20.26 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\aol[55].swf 20.10.2006 22:13 13.04 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\aol[56].swf 20.10.2006 22:16 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\aol[57].swf 20.10.2006 22:24 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\aol[58].swf 20.10.2006 22:26 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\bb4[1].js 20.10.2006 21:15 4.18 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CA1CYPTB.swf 20.10.2006 21:26 18.88 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CAKDEFSX.swf 20.10.2006 21:39 24.09 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CAL8W3PH.swf 20.10.2006 22:35 21.35 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CALC6LTB.swf 20.10.2006 21:57 20.26 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CANAUHR3.swf 20.10.2006 22:10 11.55 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CAO5UBCX.swf 20.10.2006 21:38 14.78 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CAOXOLWB.swf 20.10.2006 21:55 11.55 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CAQNQNMT.swf 20.10.2006 21:45 11.55 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CARAW7RX.swf 20.10.2006 22:03 20.26 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CASL4HKF.htm 20.10.2006 20:52 432 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\CAWLA3KD.swf 20.10.2006 21:51 18.88 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq120x90[8].aspx 20.10.2006 21:28 590 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[47].aspx 20.10.2006 21:20 563 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[48].aspx 20.10.2006 21:24 571 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[49].aspx 20.10.2006 21:35 563 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[50].aspx 20.10.2006 21:42 553 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[51].aspx 20.10.2006 21:48 597 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[52].aspx 20.10.2006 21:53 2.48 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[53].aspx 20.10.2006 22:10 541 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[54].aspx 20.10.2006 22:20 2.48 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[55].aspx 20.10.2006 22:25 563 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[56].aspx 20.10.2006 22:31 530 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\icq468x60[57].aspx 20.10.2006 22:34 553 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\OY80AB3D\viewtopic[10].htm 20.10.2006 20:52 79.76 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\468x60praceczv2[1].gif 19.10.2006 21:29 14.63 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\adsWrapper[1].js 20.10.2006 22:06 6.44 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[57].swf 20.10.2006 21:18 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[58].swf 20.10.2006 21:23 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[59].swf 20.10.2006 21:30 19.16 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[60].swf 20.10.2006 21:34 15.85 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[61].swf 20.10.2006 21:41 19.16 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[62].swf 20.10.2006 21:49 11.55 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[63].swf 20.10.2006 22:07 11.55 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[64].swf 20.10.2006 22:15 29.86 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[65].swf 20.10.2006 22:19 29.86 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[66].swf 20.10.2006 22:28 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\aol[67].swf 20.10.2006 22:33 11.55 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\bb4[1].js 20.10.2006 22:23 4.18 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\CA0LGPK7.swf 20.10.2006 21:47 14.78 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\CA10U5HF.swf 20.10.2006 22:13 18.88 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\CA5CMTT7.swf 20.10.2006 21:52 18.07 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\CAE3M7Y5.htm 20.10.2006 22:29 425 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\CALKUDXJ.swf 20.10.2006 22:25 12.64 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\CAMBY3EP.swf 20.10.2006 21:28 19.16 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\CATWGFDD.swf 20.10.2006 22:32 20.26 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[45].aspx 20.10.2006 21:17 530 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[46].aspx 20.10.2006 21:26 553 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[47].aspx 20.10.2006 21:38 2.68 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[48].aspx 20.10.2006 21:39 563 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[49].aspx 20.10.2006 21:51 553 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[50].aspx 20.10.2006 21:55 541 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[51].aspx 20.10.2006 21:57 597 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[52].aspx 20.10.2006 22:03 597 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\icq468x60[53].aspx 20.10.2006 22:35 530 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\posting[8].htm 20.10.2006 21:48 58.50 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\PQ9AK3V5\viewtopic[17].htm 20.10.2006 22:29 82.60 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\adsEnd[1].js 20.10.2006 22:06 1.57 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\adsEnd[2].js 19.10.2006 22:04 1.57 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[63].swf 20.10.2006 21:22 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[64].swf 20.10.2006 21:25 11.55 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[65].swf 20.10.2006 21:29 13.24 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[66].swf 20.10.2006 21:33 13.24 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[67].swf 20.10.2006 21:37 15.85 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[68].swf 20.10.2006 21:44 15.85 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[69].swf 20.10.2006 21:51 14.93 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[70].swf 20.10.2006 21:54 13.24 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[71].swf 20.10.2006 22:02 14.54 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[72].swf 20.10.2006 22:09 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[73].swf 20.10.2006 22:18 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\aol[74].swf 20.10.2006 22:22 17.36 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\bb4[1].js 20.10.2006 20:24 4.18 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CA1C8VTX.htm 20.10.2006 21:59 302 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CA6VMZU1.swf 20.10.2006 22:14 19.16 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CA7EYDRN.swf 20.10.2006 22:06 11.55 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CA81EF4P.swf 20.10.2006 22:37 14.78 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CAE74NDI.swf 20.10.2006 21:40 14.78 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CAEVCTUV.swf 20.10.2006 22:34 18.88 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CAKHADPM.swf 20.10.2006 21:59 14.78 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CAKP8DOJ.swf 20.10.2006 21:39 14.54 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CANMIDZF.htm 20.10.2006 22:37 302 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CATWGJDX.swf 20.10.2006 21:56 20.26 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\CAU7UZA1.swf 20.10.2006 21:17 21.35 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\icq120x90[4].aspx 20.10.2006 22:25 598 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\icq468x60[40].aspx 20.10.2006 21:16 2.48 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\icq468x60[41].aspx 20.10.2006 21:28 607 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\icq468x60[42].aspx 20.10.2006 21:47 2.68 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\icq468x60[43].aspx 20.10.2006 22:13 553 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\icq468x60[44].aspx 20.10.2006 22:30 2.48 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\icq468x60[45].aspx 20.10.2006 22:32 597 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\redot[6].gif 20.10.2006 21:52 43 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5\WT2389IF\viewtopic[5].htm 20.10.2006 21:48 79.76 KB Hidden from Windows API.
C:\Documents and Settings\Nobody\Recent\01 Alizée - J'en ai marre.lnk 20.10.2006 22:31 1.14 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Recent\02 Cascada - How do you do.lnk 20.10.2006 22:23 961 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Recent\04 Ruido sintetico.lnk 20.10.2006 22:27 833 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Recent\04_Planeta_prasat_(aneb_Jak_svet_prichazi_o_rezniky).lnk 20.10.2006 20:31 1.13 KB Visible in Windows API, MFT, but not in directory index.
C:\Documents and Settings\Nobody\Recent\07 Alizée - Veni Vedi Vici.lnk 20.10.2006 22:31 1.07 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Recent\08 Alizée - Abracadabra.lnk 20.10.2006 22:30 1.05 KB Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Recent\09-Parkán _ Má 19.10.2006 21:05 894 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Recent\10.Neresh.lnk 20.10.2006 20:08 976 bytes Visible in Windows API, MFT, but not in directory index.
C:\Documents and Settings\Nobody\Recent\11_Hownotsuts.lnk 20.10.2006 22:21 961 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Recent\15_Tvou_vlhkou_studanku_chci_(aneb_The_Lesbian_Anthem).lnk 20.10.2006 20:32 1.14 KB Visible in Windows API, MFT, but not in directory index.
C:\Documents and Settings\Nobody\Recent\19 D.E.V.I.L. (toolbox).lnk 20.10.2006 22:28 858 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Recent\Alizée - Gourmandises [2001][CD+3Vids+Cov].lnk 20.10.2006 22:31 748 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Recent\Alizée - Mes Courants Electriques [2003][CD+3Vids+Cov].lnk 20.10.2006 22:31 808 bytes Visible in directory index, but not Windows API or MFT.
C:\Documents and Settings\Nobody\Recent\Bob Sinclair feat. Steve Edwards - World, Hold On Children Of The Sky.lnk 20.10.2006 19:45 962 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Nobody\Recent\Everytime We Touch 2006.lnk 20.10.2006 22:23 658 bytes Hidden from Windows API.
C:\Documents and Settings\Nobody\Recent\Finest Club Sounds by DJnoGGer.lnk 19.10.2006 20:58 609 bytes Visible in Windows API, directory index, but not in MFT.
C:\Documents and Settings\Nobody\Recent\FinestClubsoundsVOL3mixXedbyDJnoGGeR.lnk 19.10.2006 20:58 960 bytes Visible in Windows API, directory index, but not in MFT.
C:\Documents and Settings\Nobody\Recent\nenazvuhodna_prasecina.lnk 20.10.2006 20:34 720 bytes Visible in Windows API, MFT, but not in directory index.
C:\Documents and Settings\Nobody\Recent\VIDEO_TS (2).lnk 20.10.2006 19:51 279 bytes Visible in Windows API, MFT, but not in directory index.
C:\Documents and Settings\Nobody\Recent\Who's Afraid Of.lnk 20.10.2006 22:28 594 bytes Hidden from Windows API.

Uživatelský avatar
mijaja
Tvůrce článků
Level 6.5
Level 6.5
Příspěvky: 4136
Registrován: září 05
Bydliště: Zlín
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod mijaja » 21 říj 2006 10:15

Tenhle záznam se mi nelíbí:

HKLM\SOFTWARE\SecuROM\!CAUTION! NEVER DELETE OR CHANGE ANY KEY* 16.2.2006 20:44 0 bytes Key name contains embedded nulls (*) - má to něco společného s ochranama proti kopírování. - zkus na to AriesRemover

Jinak v systému není nic, všechno je jen v dokumentech:

Vyprázdni složky:
C:\Documents and Settings\Nobody\Data aplikací\ICQLite\Bartcache\297784227\Temp
C:\Documents and Settings\Nobody\Cookies
C:\Documents and Settings\Nobody\Local Settings\Temp
C:\Documents and Settings\Nobody\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Nobody\Recent

Uživatelský avatar
Rewqa
Moderátor
Master Level 9
Master Level 9
Příspěvky: 8114
Registrován: říjen 06
Bydliště: Praha
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod Rewqa » 21 říj 2006 11:29

oki udelam to...vcera sem nainstaloval spyware terminator..naslo to hafo veci tak sem to procistil..je to o moc lepsi ale stale to neni ono...zkusim ten ariesremover...jo a to v tech dokumentech mam smazat natvrdo pres pruzkumnika a nebo pomoci nakyho softu?...hele ale ten securom se mi zda v poradku..nerek bych ze je to neco skodlivyho

Uživatelský avatar
mijaja
Tvůrce článků
Level 6.5
Level 6.5
Příspěvky: 4136
Registrován: září 05
Bydliště: Zlín
Pohlaví: Muž
Stav:
Offline
Kontakt:

Příspěvekod mijaja » 21 říj 2006 11:31

To už je nejlépe nechat na Ccleaneru. A vyčisti všechno, i registry.


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 17 hostů