Modra obrazovka

[Rudy]

Ještě prověříme systém na rootkity. Udělejte sken GMER: http://forum.viry.cz/viewtopic.php?f=29&t=62878 a dejte oby logy.

[sspooky13]

1. log:

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit quick scan 2012-05-27 20:00:17
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-16 WDC_WD5000AAKX-001CA0 rev.15.01H15
Running: gmer.exe; Driver: C:\DOCUME~1\Peter\LOCALS~1\Temp\kwnyyaod.sys


---- System - GMER 1.0.15 ----

SSDT spdr.sys ZwEnumerateKey [0xB7ECDDA4]
SSDT spdr.sys ZwEnumerateValueKey [0xB7ECE132]

---- Devices - GMER 1.0.15 ----

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 [B7E2FB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort0 [B7E2FB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort1 [B7E2FB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort2 [B7E2FB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort3 [B7E2FB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort4 [B7E2FB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort5 [B7E2FB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-16 [B7E2FB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atjt3qjg \Device\Scsi\atjt3qjg1Port6Path0Target0Lun0 8A5CA1F8
Device \Driver\atjt3qjg \Device\Scsi\atjt3qjg1 8A5CA1F8
Device \FileSystem\Ntfs \Ntfs 8A8571F8

AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)
AttachedDevice \Driver\Tcpip \Device\Ip epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\Udp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\Tcpip \Device\RawIp epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)

---- EOF - GMER 1.0.15 ----

[sspooky13]

a 2. log nemozem dat lebo pocas skenu mi zasa da modru obrazovku

[Rudy]

Toto je OK. Zkuste sken v nouz. režimu.

[sspooky13]

Tak dal som nudzovy rezim. Spustil som program a dal sken. Chvilu to slo a potom mi napisalo ze system musel ten program nudzovo ukoncit. Ked som to spustil 2x tak mi dalo modru obrazovku . Myslite ze je to chyba hardwaru?

[Rudy]

Koukněte do adresáře windows\minidump, jeho obsah zabalte do raru a přiložte k vašmu příspěvku.

[sspooky13]

Tuna to mate

[sspooky13]

no bol som v tej firme a tam mi znizili takt ramok a uz by to zevraj malo ist

[Rudy]

OK. Případně dejte vědět.

[sspooky13]

Tak som s nim prisiel domov a som znova vsetko preinstaloval a vsetko zatial ide. Sice som este nepocul zeby znizenie frekvencie ramok mohlo pomoct ale clovek sa uci cely zivot Dakujem vam za pomoc a ochotu.

[Rudy]

Nemáte zač!