Kontrola logu prosím Vyřešeno

[Radinoo]

ComboFix 09-06-15.06 - Radek Kahák 16.06.2009 10:19.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1530 [GMT 2:00]
Spuštěný z: c:\documents and settings\Radek Kahák\Plocha\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((( Soubory vytvořené od 2009-05-16 do 2009-06-16 )))))))))))))))))))))))))))))))
.

2009-06-15 22:40 . 2009-06-15 22:40 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-06-15 22:40 . 2009-06-15 22:40 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-06-15 22:40 . 2009-06-15 22:40 327688 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-06-15 22:40 . 2009-06-15 22:40 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-15 22:40 . 2009-06-15 22:41 -------- d-----w- c:\windows\system32\drivers\Avg
2009-06-15 22:40 . 2009-06-15 22:40 -------- d-----w- c:\program files\AVG
2009-06-15 22:34 . 2009-06-15 22:34 0 ----a-w- c:\windows\ativpsrm.bin
2009-06-15 22:29 . 2009-06-15 22:29 -------- d-----w- c:\program files\Alwil Software
2009-06-15 19:46 . 2009-06-15 19:46 -------- d-----w- c:\program files\OpenOffice.org 3
2009-06-15 17:02 . 2009-06-15 17:02 -------- d-----w- c:\program files\Trend Micro
2009-06-15 16:15 . 2009-06-15 16:15 -------- d-----w- c:\program files\Microsoft Silverlight
2009-06-10 16:26 . 2008-04-13 18:47 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2009-06-10 16:26 . 2008-04-13 18:47 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2009-06-10 16:25 . 2006-11-06 05:00 198656 ----a-w- c:\windows\system32\CNMLM8O.DLL
2009-06-10 16:25 . 2009-06-10 16:25 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information
2009-06-10 16:25 . 2009-06-10 16:25 -------- d--h--w- c:\program files\CanonBJ
2009-06-10 16:24 . 2009-06-10 16:27 -------- d-----w- c:\program files\Canon
2009-06-10 07:10 . 2009-04-30 21:16 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-10 07:10 . 2009-04-30 21:16 1985024 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-06-10 07:10 . 2009-04-30 21:16 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-06-10 07:10 . 2009-04-30 21:16 11064832 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-06-10 06:54 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-06-10 06:54 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-06-09 16:17 . 2009-06-09 16:19 -------- d-----w- c:\program files\ICQ6.5
2009-06-08 20:34 . 2009-06-08 20:34 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-06-08 20:33 . 2009-06-08 20:33 -------- d-----w- c:\program files\Common Files\Skype
2009-06-08 20:33 . 2009-06-08 20:33 -------- d-----r- c:\program files\Skype
2009-06-08 18:17 . 2009-06-08 18:17 -------- d-----w- C:\ATI
2009-06-07 22:15 . 2009-06-07 22:15 -------- d-----w- c:\program files\CCleaner
2009-06-07 19:37 . 2009-06-07 19:38 -------- d--h--w- c:\program files\Zero G Registry
2009-06-07 10:56 . 2009-06-07 10:56 -------- d-----w- c:\program files\Common Files\Java
2009-06-07 10:56 . 2009-06-07 10:56 -------- d-----w- c:\program files\NOS
2009-06-07 10:54 . 2008-04-13 18:45 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2009-06-07 07:49 . 2009-06-13 15:06 -------- d-----w- c:\program files\Windows Media Connect 2
2009-06-07 07:48 . 2009-06-07 07:48 -------- d-----w- c:\windows\system32\drivers\UMDF
2009-06-07 07:48 . 2009-06-07 07:48 -------- d-----w- c:\windows\system32\LogFiles
2009-06-07 07:39 . 2009-06-07 07:39 737280 ----a-w- c:\windows\iun6002.exe
2009-06-07 07:39 . 2009-06-07 07:39 -------- d-----w- c:\program files\Codec Pack - All In 1
2009-06-07 07:21 . 2009-06-07 07:21 -------- d-----w- C:\ProgramData
2009-06-06 23:32 . 2009-06-06 23:32 -------- d-----w- c:\program files\Electronic Arts
2009-06-06 23:32 . 2009-06-06 23:32 -------- d-----w- c:\program files\Microsoft WSE
2009-06-06 23:32 . 2008-09-04 18:17 447752 ----a-r- c:\windows\system32\vp6vfw.dll
2009-06-06 23:32 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-06-06 23:32 . 2009-06-06 23:32 -------- d-----w- c:\windows\Logs
2009-06-06 23:09 . 2009-06-06 23:09 -------- d-----w- c:\program files\Common Files\ATI Technologies
2009-06-06 23:08 . 2009-02-25 13:15 593920 ------w- c:\windows\system32\ati2sgag.exe
2009-06-06 23:08 . 2009-02-25 21:09 307200 ----a-w- c:\windows\system32\atiiiexx.dll
2009-06-06 23:08 . 2009-02-25 21:42 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2009-06-06 23:08 . 2009-02-25 20:58 887724 ----a-w- c:\windows\system32\ativva6x.dat
2009-06-06 23:08 . 2007-06-07 02:25 3107788 ----a-r- c:\windows\system32\ativva5x.dat
2009-06-06 23:08 . 2009-01-26 17:55 182995 ----a-w- c:\windows\system32\atiicdxx.dat
2009-06-06 23:08 . 2007-06-07 02:25 3107788 ----a-r- c:\windows\system32\ativvaxx.dat
2009-06-06 23:01 . 2009-06-06 23:01 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-06-06 22:59 . 2006-08-18 08:28 208896 ------w- c:\windows\system32\nvuide.exe
2009-06-06 22:58 . 2009-06-06 22:58 -------- d-----w- c:\program files\Realtek
2009-06-06 22:58 . 2006-09-11 22:34 499712 ------r- c:\windows\RtlExUpd.dll
2009-06-06 22:50 . 2009-06-09 16:18 -------- d-----w- c:\program files\Google
2009-06-06 22:25 . 2009-06-08 18:21 -------- d-----w- c:\program files\ATI Technologies
2009-06-06 22:17 . 2009-06-06 22:17 -------- d-----w- c:\windows\system32\URTTEMP
2009-06-06 22:04 . 2009-06-06 22:04 -------- d-----w- C:\fd0cd73ad58dfb3eef80fda256a2
2009-06-06 21:57 . 2009-06-06 21:57 -------- d-----w- c:\program files\MSBuild
2009-06-06 21:55 . 2009-06-06 22:07 -------- d-----w- c:\windows\system32\XPSViewer
2009-06-06 21:54 . 2009-06-06 21:54 -------- d-----w- c:\program files\Reference Assemblies
2009-06-06 21:54 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-06-06 21:31 . 2009-06-06 21:31 -------- d-----w- C:\Poker

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-15 10:13 . 2006-03-02 12:00 83832 ----a-w- c:\windows\system32\perfc005.dat
2009-06-15 10:13 . 2006-03-02 12:00 440590 ----a-w- c:\windows\system32\perfh005.dat
2009-06-09 16:17 . 2009-06-06 19:09 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-07 13:20 . 2009-06-07 13:20 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-06-07 13:20 . 2009-06-07 10:56 -------- d-----w- c:\program files\Java
2009-06-07 10:49 . 2009-06-06 19:20 -------- d-----w- c:\program files\Common Files\Adobe
2009-06-06 20:08 . 2009-06-06 18:58 76487 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-06 20:08 . 2009-06-06 18:58 2684 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-06-06 19:39 . 2009-06-06 18:58 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-06-06 19:37 . 2009-06-06 19:37 -------- d-----w- c:\program files\A4Tech
2009-06-06 19:35 . 2009-06-06 19:35 -------- d-----w- c:\program files\KYE
2009-06-06 19:26 . 2009-06-06 19:06 -------- d-----w- c:\program files\Common Files\InstallShield
2009-06-06 19:20 . 2009-06-06 19:20 -------- d-----w- c:\program files\NVIDIA Corporation
2009-06-06 19:17 . 2009-06-06 19:09 -------- d-----w- c:\program files\GIGABYTE
2009-06-06 19:07 . 2009-06-06 19:07 -------- d-----w- c:\program files\DIFX
2009-06-06 18:59 . 2009-06-06 18:59 -------- d-----w- c:\program files\microsoft frontpage
2009-06-06 18:57 . 2009-06-06 18:57 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-05-13 05:05 . 2006-03-02 12:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-07 15:33 . 2006-03-02 12:00 346624 ----a-w- c:\windows\system32\localspl.dll
2009-04-19 19:52 . 2006-03-02 12:00 1847168 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:54 . 2006-03-02 12:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-06-15_18.52.24 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-06 23:19 . 2007-11-06 23:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90kor.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 47104 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90jpn.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90ita.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 41984 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90cht.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 41472 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90chs.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 60416 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90fra.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esp.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esn.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90enu.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 60928 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90deu.dll
+ 2007-11-06 20:51 . 2007-11-06 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
+ 2007-11-06 20:51 . 2007-11-06 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
+ 2009-06-16 06:29 . 2009-06-16 06:29 16384 c:\windows\Temp\Perflib_Perfdata_7a0.dat
+ 2009-06-15 19:46 . 2009-06-15 19:46 34816 c:\windows\assembly\GAC\cli_cppuhelper\1.0.15.0__ce2cb7e279207b9e\cli_cppuhelper.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 12288 c:\windows\assembly\GAC\cli_basetypes\1.0.12.0__ce2cb7e279207b9e\cli_basetypes.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 3584 c:\windows\assembly\GAC\policy.1.0.cli_uretypes\1.1.0.0__ce2cb7e279207b9e\policy.1.0.cli_uretypes.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 3072 c:\windows\assembly\GAC\policy.1.0.cli_ure\15.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_ure.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 3584 c:\windows\assembly\GAC\policy.1.0.cli_oootypes\1.1.0.0__ce2cb7e279207b9e\policy.1.0.cli_oootypes.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 3584 c:\windows\assembly\GAC\policy.1.0.cli_cppuhelper\15.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_cppuhelper.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 3584 c:\windows\assembly\GAC\policy.1.0.cli_basetypes\12.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_basetypes.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 8192 c:\windows\assembly\GAC\cli_ure\1.0.15.0__ce2cb7e279207b9e\cli_ure.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll
+ 2009-06-06 20:48 . 2009-06-15 22:34 210488 c:\windows\system32\FNTCACHE.DAT
+ 2009-06-15 19:46 . 2009-06-15 19:46 110592 c:\windows\assembly\GAC\cli_uretypes\1.0.1.0__ce2cb7e279207b9e\cli_uretypes.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 823296 c:\windows\assembly\GAC\cli_oootypes\1.0.1.0__ce2cb7e279207b9e\cli_oootypes.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 1162744 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 1156600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
+ 2009-06-15 19:46 . 2009-06-15 19:46 7434240 c:\windows\Installer\{564D0000-547B-4ED8-8070-85286CC8C9BF}\soffice.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2009-06-02 11:37 1004800 ----a-w- c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-06 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EasyTuneV"="c:\program files\Gigabyte\ET5\ETcall.exe" [2007-01-04 24576]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2006-12-26 196608]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-25 61440]
"Easy-PrintToolBox"="c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2006-10-17 398944]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-06-15 1948440]
"SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2006-05-16 2879488]
"CHotkey"="mHotkey.exe" - c:\windows\mHotkey.exe [2006-12-08 547840]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2006-10-30 16269312]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Radek Kah k\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-1-15 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-06-15 22:40 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0aswBoot.exe /A:* /L:Czech /KBD:2

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"d:\\SteamApps\\common\\football manager 2009\\fm.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [16.6.2009 0:40 327688]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [16.6.2009 0:40 108552]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [16.6.2009 0:40 908568]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [16.6.2009 0:40 298776]
S2 gupdate1c9e8785c7aa73e;Služba Google Update (gupdate1c9e8785c7aa73e);c:\program files\Google\Update\GoogleUpdate.exe [8.6.2009 22:33 133104]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [7.6.2009 12:56 33176]

--- Ostatní služby/ovladače v paměti ---

*Deregistered* - MarkFun_NT

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'

2009-06-16 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-08 20:33]

2009-06-16 c:\windows\Tasks\User_Feed_Synchronization-{88FA17CE-0BCA-4A5B-A277-F32843C01EB0}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Office Excel - d:\office11\EXCEL.EXE/3000
LSP: %SYSTEMROOT%\system32\nvappfilter.dll
Trusted Zone: mojebanka.cz\www
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-16 10:20
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\=*‘|0ß•]
"DisplayName"=""
"DeviceDesc"=""
"ProviderName"=""
"MFG"="????¦"
"ReinstallString"="c:\\WINDOWS\\System32\\ReinstallBackups\\=???\\DriverFiles\\.INF"
"DeviceInstanceIds"=multi:"\0c\00"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(752)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(808)
c:\windows\system32\nvappfilter.dll

- - - - - - - > 'explorer.exe'(4820)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2009-06-16 10:21
ComboFix-quarantined-files.txt 2009-06-16 08:21
ComboFix2.txt 2009-06-15 22:24
ComboFix3.txt 2009-06-15 18:52

Před spuštěním: Volných bajtů: 195 253 854 208
Po spuštění: Volných bajtů: 195 418 083 328

233 --- E O F --- 2009-06-15 15:50

[Reklama]

[Damned]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

File::
c:\windows\ativpsrm.bin

DirLook::
c:\windows\system32\URTTEMP




Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

[Radinoo]

ComboFix 09-06-15.07 - Radek Kahák 16.06.2009 18:18.4 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1537 [GMT 2:00]
Spuštěný z: c:\documents and settings\Radek Kahák\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Radek Kahák\Plocha\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
* Vytvořen nový Bod Obnovení

FILE ::
"c:\windows\ativpsrm.bin"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\ativpsrm.bin

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-05-16 do 2009-06-16 )))))))))))))))))))))))))))))))
.

2009-06-15 17:02 . 2009-06-15 17:02 -------- d-----w- c:\program files\Trend Micro
2009-06-15 16:15 . 2009-06-15 16:15 -------- d-----w- c:\program files\Microsoft Silverlight
2009-06-10 16:26 . 2008-04-13 18:47 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2009-06-10 16:26 . 2008-04-13 18:47 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2009-06-10 16:25 . 2006-11-06 05:00 198656 ----a-w- c:\windows\system32\CNMLM8O.DLL
2009-06-10 16:25 . 2009-06-10 16:25 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information
2009-06-10 16:25 . 2009-06-10 16:25 -------- d--h--w- c:\program files\CanonBJ
2009-06-10 16:24 . 2009-06-10 16:27 -------- d-----w- c:\program files\Canon
2009-06-10 07:10 . 2009-04-30 21:16 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-10 07:10 . 2009-04-30 21:16 1985024 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-06-10 07:10 . 2009-04-30 21:16 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-06-10 07:10 . 2009-04-30 21:16 11064832 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-06-10 06:54 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-06-10 06:54 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-06-09 16:17 . 2009-06-09 16:19 -------- d-----w- c:\program files\ICQ6.5
2009-06-08 20:34 . 2009-06-08 20:34 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-06-08 20:33 . 2009-06-08 20:33 -------- d-----w- c:\program files\Common Files\Skype
2009-06-08 20:33 . 2009-06-08 20:33 -------- d-----r- c:\program files\Skype
2009-06-08 18:17 . 2009-06-08 18:17 -------- d-----w- C:\ATI
2009-06-07 22:15 . 2009-06-07 22:15 -------- d-----w- c:\program files\CCleaner
2009-06-07 19:37 . 2009-06-07 19:38 -------- d--h--w- c:\program files\Zero G Registry
2009-06-07 10:56 . 2009-06-07 10:56 -------- d-----w- c:\program files\Common Files\Java
2009-06-07 10:56 . 2009-06-07 10:56 -------- d-----w- c:\program files\NOS
2009-06-07 10:54 . 2008-04-13 18:45 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2009-06-07 07:49 . 2009-06-13 15:06 -------- d-----w- c:\program files\Windows Media Connect 2
2009-06-07 07:48 . 2009-06-07 07:48 -------- d-----w- c:\windows\system32\drivers\UMDF
2009-06-07 07:48 . 2009-06-07 07:48 -------- d-----w- c:\windows\system32\LogFiles
2009-06-07 07:39 . 2009-06-07 07:39 737280 ----a-w- c:\windows\iun6002.exe
2009-06-07 07:39 . 2009-06-07 07:39 -------- d-----w- c:\program files\Codec Pack - All In 1
2009-06-07 07:21 . 2009-06-07 07:21 -------- d-----w- C:\ProgramData
2009-06-06 23:32 . 2009-06-06 23:32 -------- d-----w- c:\program files\Electronic Arts
2009-06-06 23:32 . 2009-06-06 23:32 -------- d-----w- c:\program files\Microsoft WSE
2009-06-06 23:32 . 2008-09-04 18:17 447752 ----a-r- c:\windows\system32\vp6vfw.dll
2009-06-06 23:32 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-06-06 23:32 . 2009-06-06 23:32 -------- d-----w- c:\windows\Logs
2009-06-06 23:09 . 2009-06-06 23:09 -------- d-----w- c:\program files\Common Files\ATI Technologies
2009-06-06 23:08 . 2009-02-25 13:15 593920 ------w- c:\windows\system32\ati2sgag.exe
2009-06-06 23:08 . 2009-02-25 21:09 307200 ----a-w- c:\windows\system32\atiiiexx.dll
2009-06-06 23:08 . 2009-02-25 21:42 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2009-06-06 23:08 . 2009-02-25 20:58 887724 ----a-w- c:\windows\system32\ativva6x.dat
2009-06-06 23:08 . 2007-06-07 02:25 3107788 ----a-r- c:\windows\system32\ativva5x.dat
2009-06-06 23:08 . 2009-01-26 17:55 182995 ----a-w- c:\windows\system32\atiicdxx.dat
2009-06-06 23:08 . 2007-06-07 02:25 3107788 ----a-r- c:\windows\system32\ativvaxx.dat
2009-06-06 23:01 . 2009-06-06 23:01 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-06-06 22:59 . 2006-08-18 08:28 208896 ------w- c:\windows\system32\nvuide.exe
2009-06-06 22:58 . 2009-06-06 22:58 -------- d-----w- c:\program files\Realtek
2009-06-06 22:58 . 2006-09-11 22:34 499712 ------r- c:\windows\RtlExUpd.dll
2009-06-06 22:50 . 2009-06-09 16:18 -------- d-----w- c:\program files\Google
2009-06-06 22:25 . 2009-06-08 18:21 -------- d-----w- c:\program files\ATI Technologies
2009-06-06 22:17 . 2009-06-06 22:17 -------- d-----w- c:\windows\system32\URTTEMP
2009-06-06 22:04 . 2009-06-06 22:04 -------- d-----w- C:\fd0cd73ad58dfb3eef80fda256a2
2009-06-06 21:57 . 2009-06-06 21:57 -------- d-----w- c:\program files\MSBuild
2009-06-06 21:55 . 2009-06-06 22:07 -------- d-----w- c:\windows\system32\XPSViewer
2009-06-06 21:54 . 2009-06-06 21:54 -------- d-----w- c:\program files\Reference Assemblies
2009-06-06 21:54 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-06-06 21:31 . 2009-06-06 21:31 -------- d-----w- C:\Poker

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-15 22:40 . 2009-06-15 22:40 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-06-15 22:40 . 2009-06-15 22:40 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-06-15 22:40 . 2009-06-15 22:40 327688 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-06-15 22:40 . 2009-06-15 22:40 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-15 22:40 . 2009-06-15 22:40 -------- d-----w- c:\program files\AVG
2009-06-15 22:29 . 2009-06-15 22:29 -------- d-----w- c:\program files\Alwil Software
2009-06-15 19:46 . 2009-06-15 19:46 -------- d-----w- c:\program files\OpenOffice.org 3
2009-06-15 10:13 . 2006-03-02 12:00 83832 ----a-w- c:\windows\system32\perfc005.dat
2009-06-15 10:13 . 2006-03-02 12:00 440590 ----a-w- c:\windows\system32\perfh005.dat
2009-06-09 16:17 . 2009-06-06 19:09 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-07 13:20 . 2009-06-07 13:20 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-06-07 13:20 . 2009-06-07 10:56 -------- d-----w- c:\program files\Java
2009-06-07 10:49 . 2009-06-06 19:20 -------- d-----w- c:\program files\Common Files\Adobe
2009-06-06 20:08 . 2009-06-06 18:58 76487 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-06 20:08 . 2009-06-06 18:58 2684 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-06-06 19:39 . 2009-06-06 18:58 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-06-06 19:37 . 2009-06-06 19:37 -------- d-----w- c:\program files\A4Tech
2009-06-06 19:35 . 2009-06-06 19:35 -------- d-----w- c:\program files\KYE
2009-06-06 19:26 . 2009-06-06 19:06 -------- d-----w- c:\program files\Common Files\InstallShield
2009-06-06 19:20 . 2009-06-06 19:20 -------- d-----w- c:\program files\NVIDIA Corporation
2009-06-06 19:17 . 2009-06-06 19:09 -------- d-----w- c:\program files\GIGABYTE
2009-06-06 19:07 . 2009-06-06 19:07 -------- d-----w- c:\program files\DIFX
2009-06-06 18:59 . 2009-06-06 18:59 -------- d-----w- c:\program files\microsoft frontpage
2009-06-06 18:57 . 2009-06-06 18:57 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-05-13 05:05 . 2006-03-02 12:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-07 15:33 . 2006-03-02 12:00 346624 ----a-w- c:\windows\system32\localspl.dll
2009-04-19 19:52 . 2006-03-02 12:00 1847168 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:54 . 2006-03-02 12:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\windows\system32\URTTEMP ----

2003-02-21 04:16 . 2003-02-21 04:16 49152 ----a-w- c:\windows\system32\URTTEMP\regtlib.exe


(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2009-06-02 11:37 1004800 ----a-w- c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-06 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EasyTuneV"="c:\program files\Gigabyte\ET5\ETcall.exe" [2007-01-04 24576]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2006-12-26 196608]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-25 61440]
"Easy-PrintToolBox"="c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2006-10-17 398944]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-06-15 1948440]
"SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2006-05-16 2879488]
"CHotkey"="mHotkey.exe" - c:\windows\mHotkey.exe [2006-12-08 547840]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2006-10-30 16269312]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Radek Kah k\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-1-15 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-06-15 22:40 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0aswBoot.exe /A:* /L:Czech /KBD:2

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"d:\\SteamApps\\common\\football manager 2009\\fm.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [16.6.2009 0:40 327688]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [16.6.2009 0:40 108552]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [16.6.2009 0:40 908568]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [16.6.2009 0:40 298776]
S2 gupdate1c9e8785c7aa73e;Služba Google Update (gupdate1c9e8785c7aa73e);c:\program files\Google\Update\GoogleUpdate.exe [8.6.2009 22:33 133104]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [7.6.2009 12:56 33176]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'

2009-06-16 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-08 20:33]

2009-06-16 c:\windows\Tasks\User_Feed_Synchronization-{88FA17CE-0BCA-4A5B-A277-F32843C01EB0}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Office Excel - d:\office11\EXCEL.EXE/3000
LSP: %SYSTEMROOT%\system32\nvappfilter.dll
Trusted Zone: mojebanka.cz\www
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-16 18:20
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\=*‘|0ß•]
"DisplayName"=""
"DeviceDesc"=""
"ProviderName"=""
"MFG"="????¦"
"ReinstallString"="c:\\WINDOWS\\System32\\ReinstallBackups\\=???\\DriverFiles\\.INF"
"DeviceInstanceIds"=multi:"\0c\00"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(752)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(808)
c:\windows\system32\nvappfilter.dll
.
Celkový čas: 2009-06-16 18:20
ComboFix-quarantined-files.txt 2009-06-16 16:20
ComboFix2.txt 2009-06-16 08:21

Před spuštěním: Volných bajtů: 195 673 579 520
Po spuštění: Volných bajtů: 195 856 887 808

203 --- E O F --- 2009-06-15 15:50

[Damned]

Nevidím tam již problém. Mělo by to být OK.

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš

(pozn.Pokud máš AVG, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG, následně T-Cleaner smaž
a zapni si AVG.)


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found, pak klik empty selected.
Pokud chceš zachovat svoje uložená hesla, klikni na No.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache,
cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer,
Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Označ topic za vyřešený (zelená fajfka) a měj se.

[Radinoo]

Tak to asi bude v hardware.Restartuje se mi to pořád.
Už si nevím rady.

[Damned]

No ještě upravíme jednu hodnotu v registru:

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok. )
Zkopíruj do něj následující celý text označený zeleně:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
"BootExecute"=hex(7):61,00,75,00,74,00,6f,00,63,00,68,00,65,00,63,00,6b,00,20,\
00,61,00,75,00,74,00,6f,00,63,00,68,00,6b,00,20,00,2a,00,00,00,00,00



Ulož si ho jako na Plochu jako fix.reg a jako typ všechny soubory ,
najdi tento soubor na Ploše a poklepáním ho spusť. Budeš dotázán na přidání
hodnoty do registru. Schval. Pak napiš zda to přestalo.

[Radinoo]

Přidal jsem to tak uvidím.

[Damned]

Zbyl ti tam totiž odkaz na avast. Popiš co se děje.

[Radinoo]

Dneska se mi tam při restartu ukázalo jak chci spustit komp.
Microsoft Windows
nebo nějaké recovery.
Nevím co to je.

[Damned]

Zkus najet do Nouzového režimu a tento klíč:

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\=*‘|0ß•]
"DisplayName"=""
"DeviceDesc"=""
"ProviderName"=""
"MFG"="????¦"
"ReinstallString"="c:\\WINDOWS\\System32\\ReinstallBackups\\=???\\DriverFiles\\.INF"
"DeviceInstanceIds"=multi:"\0c\00"

smaž.
Měli by tam být jen podklíče číslované takto: 0001 atd.Jako mám já na obrázku

[Damned]

Jak to vypadá?

[Radinoo]

Můžeš mi prosím poradit co to je vedle těch uživ.účtů?
Mám tam jenom já účet a ty 2 nevím co to je.
Mám taky podezření že to může být HDD.
A to co jsi mi psal tak nevím kde to mám vepsat.
A nevím co tam mám smazat.