Prosím o kontrolu logu- pc freezuje,pak restart někdy BSOD

[Martinpetricek2]

Prosím o kontrolu logu, už s pc nevím co. Nedávno mě odešla základní deska ,koupil jsem MSI G41m P33 combo . Všechno v pohodě nainstaloval sem Widle. Ale nepravidelně mě PC zamrzne a pak se samo restartuje nebo hodí modrou smrt. Všechny aktualizace nainstalovaný i ovladače. Měnil jsem zdroj tedka mám Enermax naxn 500W a měnil jsem HDD. Ale pořád to dělá. Když hraju hry tak hra jede na plný detaily ale po čase se začne hra sekat seká se tak třeba pul minuty a pak zase jede krásně plynule. Když kouknu v průbehu sekání na správce tak cpu se strašně vytěžuje ,ale nevím jaký program to dělá. Zkoušel sem i scan pc na viry ale nic nenašlo. Prosím o radu. Kdyby bylo potřeba další logy bo něco jiného tak není problém.
zde odkaz na leteckou poštu s mojim logem: http://leteckaposta.cz/950306254

[Rudy]

Zdravím!
Otevřte adresář c:\windows\minidump, jeho obsah zabalte do raru a přiložte k vašemu příštímu postu. Log je OK.

[Martinpetricek2]

zde minidump.

[Rudy]

1. Jaký máte operační systém?
2. Není v PC něco přetaktováno?

[Martinpetricek2]

Mám Windows 7 Professional. Něž se mě zničila předchozí deska tak jsem měl přetaktováno,ale běhalo to stabilně. Mám Q6600 2,4 GHz a měl jsem 3GHz. tedka nemám přetaktováno.

[Rudy]

OK. Udělejte test RAM: http://forum.viry.cz/viewtopic.php?f=53&t=106788 .

[Martinpetricek2]

Zdravím,
tak sem necham memtest běžet 9 hodin, a žádnou chybu to nehodilo.Takže RAMky jsou asi v pořádku.

[Rudy]

OK. Stáhněte, nainstalujte a spusťte CrystalDiskInfo: http://www.stahuj.centrum.cz/utility_a_ ... ldiskinfo/ a přes Úpravy>kopírovat sem dejte log.

[Martinpetricek2]

----------------------------------------------------------------------------
CrystalDiskInfo 5.6.1 Shizuku Edition (C) 2008-2013 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Professional SP1 [6.1 Build 7601] (x64)
Date : 2013/06/17 18:46:25

-- Controller Map ----------------------------------------------------------
+ Intel(R) ICH7 Family Ultra ATA Storage Controllers - 27DF [ATA]
+ ATA Channel 0 (0)
- ASUS DRW-2014L1T ATA Device
+ ATA Channel 1 (1)
- WDC WD5000AAKS-60A7B2 ATA Device
- TSSTcorp CDDVDW SH-S203P ATA Device
+ Intel(R) N10/ICH7 Family Serial ATA Storage Controller - 27C0 [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)

-- Disk List ---------------------------------------------------------------
(1) WDC WD5000AAKS-60A7B2 : 500,1 GB [0/3/1, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD5000AAKS-60A7B2
----------------------------------------------------------------------------
Model : WDC WD5000AAKS-60A7B2
Firmware : 03.03B03
Serial Number : WD-WCAT00726057
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300
Power On Hours : 6626 hod.
Power On Count : 895 krát
Temparature : 28 C (82 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 164 163 _21 00000000129E Čas na roztočení ploten
04 100 100 __0 00000000039A Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 100 253 _51 000000000000 Počet chybných hledání
09 _91 _91 __0 0000000019E2 Hodin v činnosti
0A 100 100 _51 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 _51 000000000000 Počet pokusů o překalibrování
0C 100 100 __0 00000000037F Počet cyklů zapnutí zařízení
B8 100 100 _97 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 _99 __0 000000030003 Časový limit příkazu
BE _72 _58 _45 00000000001C Teplota toku vzduchu
C0 200 200 __0 00000000001F Počet vypnutí disku
C1 200 200 __0 00000000039A Počet cyklů načítání/vymazání
C2 119 105 __0 00000000001C Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 200 200 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5743 4154 3030 3732 3630 3537
020: 0000 8000 0032 3033 2E30 3342 3033 5744 4320 5744
030: 3530 3030 4141 4B53 2D36 3041 3742 3220 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0506 0000 004C 0040
080: 01FE 0000 706B 7C01 4123 7069 BC01 4123 203F 002A
090: 002A 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 0000 0000 5001 4EE2
110: 03E6 BDB5 0000 0000 0000 0000 0000 0000 0000 4014
120: 4014 0000 0000 0000 0000 0000 0000 0000 0029 0400
130: 0001 0000 0000 169D 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 303F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 100E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 73A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 00 00 00 00 00 00 00 03 27
010: 00 A4 A3 9E 12 00 00 00 00 00 04 32 00 64 64 9A
020: 03 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2F 00 64 FD 00 00 00 00 00 00 00 09 32
040: 00 5B 5B E2 19 00 00 00 00 00 0A 33 00 64 64 00
050: 00 00 00 00 00 00 0B 33 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 64 64 7F 03 00 00 00 00 00 B8 33
070: 00 64 64 00 00 00 00 00 00 00 BB 32 00 64 64 00
080: 00 00 00 00 00 00 BC 32 00 64 63 03 00 03 00 00
090: 00 00 BE 22 00 48 3A 1C 00 00 00 00 00 00 C0 32
0A0: 00 C8 C8 1F 00 00 00 00 00 00 C1 32 00 C8 C8 9A
0B0: 03 00 00 00 00 00 C2 22 00 77 69 1C 00 00 00 00
0C0: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0D0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 C8 C8 00
0E0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0F0: 00 00 C8 08 00 C8 C8 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 D0 20 01 5B
170: 03 00 01 00 02 64 00 00 00 00 00 00 00 00 00 00
180: 00 00 01 03 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9C

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 00 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 33 64 64 64 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 33 00 00 00 00
050: 00 00 00 00 00 00 0B 33 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 B8 61
070: 00 00 00 00 00 00 00 00 00 00 BB 00 00 00 00 00
080: 00 00 00 00 00 00 BC 00 00 00 00 00 00 00 00 00
090: 00 00 BE 2D 00 00 00 00 00 00 00 00 00 00 C0 00
0A0: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
0B0: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
0C0: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0D0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0E0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0F0: 00 00 C8 00 C8 C8 C8 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CD

[Rudy]

I disk je v pořádku. Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[Martinpetricek2]

ComboFix 13-06-17.01 - Martin 18.06.2013 7:56.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4095.2661 [GMT 2:00]
Spuštěný z: c:\users\Martin\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\logboot_12.06.2013.tureg.log
c:\windows\SysWow64\frapsvid.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-18 do 2013-06-18 )))))))))))))))))))))))))))))))
.
.
2013-06-18 06:01 . 2013-06-18 06:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-18 05:55 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{23C8D822-2625-46EC-8CF2-76570B2B22EF}\mpengine.dll
2013-06-16 15:04 . 2013-06-16 15:05 -------- d-----w- C:\rsit
2013-06-16 15:04 . 2013-06-16 15:05 -------- d-----w- c:\program files\trend micro
2013-06-13 07:35 . 2013-06-13 07:35 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-06-13 07:35 . 2013-06-13 07:35 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-06-13 07:35 . 2013-06-13 07:35 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-06-13 06:20 . 2013-06-15 16:32 -------- d-----w- c:\users\UpdatusUser
2013-06-12 17:03 . 2013-06-12 17:03 -------- d-----w- c:\windows\SysWow64\RTCOM
2013-06-12 17:03 . 2013-06-12 17:03 -------- d-----w- c:\program files\Realtek
2013-06-12 17:01 . 2013-06-12 17:04 -------- d--h--w- c:\program files (x86)\Temp
2013-06-12 17:01 . 2013-01-16 14:02 2079816 ----a-w- c:\windows\RtlExUpd.dll
2013-06-12 17:01 . 2013-06-12 17:01 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2013-06-12 16:54 . 2012-12-26 23:26 805088 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2013-06-12 16:54 . 2012-12-26 23:26 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2013-06-12 16:47 . 2010-06-21 22:07 255592 ----a-w- c:\windows\system32\nvcohda6.dll
2013-06-12 16:46 . 2013-06-12 16:46 -------- d-----w- c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
2013-06-12 16:39 . 2010-07-10 04:38 65128 ----a-w- c:\windows\system32\OpenCL.dll
2013-06-12 16:39 . 2010-07-10 04:38 56936 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-06-12 16:39 . 2010-07-10 04:38 382568 ----a-w- c:\windows\system32\nvdecodemft.dll
2013-06-12 16:39 . 2010-07-10 04:38 314984 ----a-w- c:\windows\SysWow64\nvdecodemft.dll
2013-06-12 16:39 . 2010-07-10 04:38 260712 ----a-w- c:\windows\system32\nvcod1922.dll
2013-06-12 16:39 . 2010-07-10 04:38 260712 ----a-w- c:\windows\system32\nvcod.dll
2013-06-12 16:39 . 2010-07-10 04:38 11240 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2013-06-12 16:39 . 2013-06-12 17:19 -------- d-----w- c:\program files (x86)\Setup Files
2013-06-12 16:39 . 2010-07-10 04:38 930272 ----a-w- c:\windows\system32\dpinst.exe
2013-06-12 16:28 . 2012-08-22 08:19 11832 ----a-w- c:\windows\acpimof.dll
2013-06-12 15:01 . 2013-06-12 15:01 -------- d-----w- c:\programdata\RegInOut
2013-06-12 09:55 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-12 09:55 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-12 09:55 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-12 09:55 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 09:55 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-12 09:55 . 2013-05-13 05:51 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-12 09:55 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-12 09:55 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-12 09:54 . 2013-05-13 05:51 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 09:54 . 2013-05-13 05:51 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-12 09:54 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-12 09:54 . 2013-05-13 04:45 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-12 09:54 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-12 09:54 . 2013-05-13 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-12 09:54 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-12 09:54 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-12 09:54 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-12 09:54 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-12 09:54 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-12 05:18 . 2013-04-28 12:56 396800 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\DAO\w\a\l\m\a\r\t\dll\ISSkinExW.dll
2013-06-10 06:29 . 2013-06-10 06:29 -------- d-----w- c:\programdata\Garmin
2013-06-10 06:29 . 2013-06-10 06:29 -------- d-----w- c:\program files (x86)\Garmin
2013-06-09 16:04 . 2013-06-09 16:04 -------- d-----w- c:\program files\Western Digital
2013-06-09 16:04 . 2013-06-09 16:04 -------- d-----w- c:\program files (x86)\Western Digital
2013-06-09 15:23 . 2013-06-09 15:23 -------- d--h--w- c:\windows\msdownld.tmp
2013-06-09 15:07 . 2013-06-09 15:07 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-06-09 15:07 . 2013-06-09 15:07 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2013-06-09 14:58 . 2013-06-13 07:34 -------- d-----w- c:\programdata\Orbit
2013-06-09 14:58 . 2013-06-09 14:58 -------- d-----w- c:\programdata\Western Digital
2013-06-09 14:58 . 2013-06-09 14:58 -------- d-----w- c:\programdata\Package Cache
2013-06-09 14:58 . 2013-06-09 14:58 -------- d-----w- c:\programdata\DAEMON Tools Lite
2013-06-09 14:58 . 2013-06-09 14:58 -------- d-----w- c:\programdata\BrowserProtect
2013-06-09 14:58 . 2013-05-12 14:06 -------- d-----w- c:\programdata\Babylon
2013-06-09 14:47 . 2013-06-09 14:47 -------- d-----w- c:\programdata\RELOADED
2013-06-09 14:45 . 2013-06-09 14:47 -------- d-----w- c:\program files (x86)\dumps
2013-06-09 14:45 . 2013-06-09 14:45 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-06-09 14:45 . 2013-06-14 08:54 -------- d-----w- c:\program files (x86)\Steam
2013-06-09 14:34 . 2013-06-09 14:35 -------- d--h--w- c:\programdata\ProgramData
2013-06-09 09:19 . 2013-06-09 09:19 -------- d-----w- c:\programdata\Codemasters
2013-06-09 09:19 . 2013-06-09 09:19 -------- d-----w- c:\programdata\Steam
2013-06-09 09:16 . 2006-11-29 11:06 4398360 ----a-w- c:\windows\system32\d3dx9_32.dll
2013-06-09 08:15 . 2009-07-14 01:41 101376 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPWN7.DLL
2013-06-07 15:04 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2013-06-07 15:04 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2013-06-07 15:04 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2013-06-07 15:04 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2013-06-07 15:04 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2013-06-07 15:04 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2013-06-07 15:04 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2013-06-07 15:04 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2013-06-07 15:04 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2013-06-07 15:04 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2013-06-07 15:04 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2013-06-07 15:03 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-06-07 15:03 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-06-07 15:03 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-06-07 15:03 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-06-07 15:03 . 2011-03-25 03:29 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-06-07 15:03 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-06-07 15:03 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-06-07 14:38 . 2012-09-17 09:56 34656 ----a-w- c:\windows\system32\TURegOpt.exe
2013-06-07 14:38 . 2012-09-17 09:56 25952 ----a-w- c:\windows\system32\authuitu.dll
2013-06-07 14:38 . 2012-09-17 09:56 21344 ----a-w- c:\windows\SysWow64\authuitu.dll
2013-06-07 14:37 . 2013-06-07 14:39 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2013
2013-06-07 12:09 . 2013-06-07 15:21 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-06-07 12:09 . 2013-06-07 15:12 -------- d-----w- c:\program files\Microsoft Silverlight
2013-06-07 11:56 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-06-07 11:56 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-06-07 11:56 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-06-07 11:56 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-06-07 11:43 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-06-07 11:26 . 2013-06-12 09:56 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-06-07 11:16 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-06-07 11:16 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-06-07 11:16 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-06-07 11:16 . 2010-09-30 10:41 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-06-07 11:16 . 2010-09-30 06:47 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-06-07 11:16 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-06-07 11:15 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-06-07 11:15 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-06-07 11:15 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-06-07 11:15 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-06-07 11:15 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-06-07 11:15 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-06-07 11:15 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-06-07 10:57 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-06-07 10:57 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-06-07 10:57 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-06-07 10:57 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-06-07 10:57 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-06-07 10:45 . 2012-11-30 05:41 424448 ----a-w- c:\windows\system32\KernelBase.dll
2013-06-07 10:42 . 2013-06-07 10:43 -------- d-----w- c:\programdata\TuneUp Software
2013-06-07 10:42 . 2013-06-09 14:59 -------- d--h--w- c:\programdata\Common Files
2013-06-07 10:42 . 2013-06-08 10:05 -------- d-sh--w- c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-06-07 10:42 . 2013-02-27 05:52 14172672 ----a-w- c:\windows\system32\shell32.dll
2013-06-07 10:42 . 2013-02-27 05:48 1930752 ----a-w- c:\windows\system32\authui.dll
2013-06-07 10:42 . 2013-02-27 06:02 111448 ----a-w- c:\windows\system32\consent.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-07 11:41 . 2013-06-07 11:41 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-06-07 11:41 . 2013-06-07 11:41 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-06-07 09:37 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2013-06-07 09:37 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2013-05-12 21:42 . 2013-02-25 22:32 1059560 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-05-12 20:34 . 2010-07-09 14:17 6491936 ----a-w- c:\windows\system32\nvcpl.dll
2013-05-12 20:34 . 2010-07-09 14:17 3514656 ----a-w- c:\windows\system32\nvsvc64.dll
2013-05-12 20:34 . 2010-07-09 14:17 884512 ----a-w- c:\windows\system32\nvvsvc.exe
2013-05-12 20:34 . 2010-07-09 14:17 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-05-12 20:34 . 2010-07-09 14:17 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-05-12 13:43 . 2013-05-12 13:43 566048 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-04-13 05:49 . 2013-06-07 10:36 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-06-07 10:36 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-06-07 10:36 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-06-07 10:36 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-06-07 10:36 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-06-07 10:36 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-06-06 1641896]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WDSmartWare.lnk - c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe View=show_in_tray [2009-10-14 9085760]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys [x]
R3 MSICDSetup;MSICDSetup;f:\cdriver64.sys;f:\CDriver64.sys [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;f:\ntiolib_x64.sys;f:\NTIOLib_X64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R4 WDDMService;WD SmartWare Drive Manager Service;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [x]
R4 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [x]
S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - NisDrv
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-07 19:20]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 85.119.89.2 85.119.88.2
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4bvoax46.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-06-18 08:03:14
ComboFix-quarantined-files.txt 2013-06-18 06:03
.
Před spuštěním: Volných bajtů: 176 235 913 216
Po spuštění: Volných bajtů: 176 347 181 056
.
- - End Of File - - AFDE2EAC9BFD72E2CA4083B24AAD483F
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Folder::
c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

Registry::
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"=-

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[Martinpetricek2]

ComboFix 13-06-17.01 - Martin 18.06.2013 17:51:21.2.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4095.2771 [GMT 2:00]
Spuštěný z: c:\users\Martin\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Martin\Desktop\CFScript.txt.txt
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP\WiseCustomCalla.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-18 do 2013-06-18 )))))))))))))))))))))))))))))))
.
.
2013-06-18 15:55 . 2013-06-18 15:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-18 06:12 . 2013-06-18 06:12 964552 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D160C3D5-33DF-4DCE-A2E2-FB68B4411F15}\gapaengine.dll
2013-06-18 06:12 . 2013-06-11 18:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9DF44199-904A-4021-8D78-69519C939DA5}\mpengine.dll
2013-06-18 06:10 . 2013-06-18 06:10 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2013-06-18 06:09 . 2013-06-18 06:10 -------- d-----w- c:\program files\Microsoft Security Client
2013-06-18 05:55 . 2013-05-13 06:37 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{23C8D822-2625-46EC-8CF2-76570B2B22EF}\mpengine.dll
2013-06-16 15:04 . 2013-06-18 06:41 -------- d-----w- c:\program files\trend micro
2013-06-16 15:04 . 2013-06-16 15:05 -------- d-----w- C:\rsit
2013-06-13 07:35 . 2013-06-13 07:35 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-06-13 07:35 . 2013-06-13 07:35 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-06-13 07:35 . 2013-06-13 07:35 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-06-13 06:20 . 2013-06-15 16:32 -------- d-----w- c:\users\UpdatusUser
2013-06-12 17:03 . 2013-06-12 17:03 -------- d-----w- c:\windows\SysWow64\RTCOM
2013-06-12 17:03 . 2013-06-12 17:03 -------- d-----w- c:\program files\Realtek
2013-06-12 17:01 . 2013-06-12 17:04 -------- d--h--w- c:\program files (x86)\Temp
2013-06-12 17:01 . 2013-01-16 14:02 2079816 ----a-w- c:\windows\RtlExUpd.dll
2013-06-12 17:01 . 2013-06-12 17:01 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2013-06-12 16:54 . 2012-12-26 23:26 805088 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2013-06-12 16:54 . 2012-12-26 23:26 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2013-06-12 16:47 . 2010-06-21 22:07 255592 ----a-w- c:\windows\system32\nvcohda6.dll
2013-06-12 16:39 . 2010-07-10 04:38 65128 ----a-w- c:\windows\system32\OpenCL.dll
2013-06-12 16:39 . 2010-07-10 04:38 56936 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-06-12 16:39 . 2010-07-10 04:38 382568 ----a-w- c:\windows\system32\nvdecodemft.dll
2013-06-12 16:39 . 2010-07-10 04:38 314984 ----a-w- c:\windows\SysWow64\nvdecodemft.dll
2013-06-12 16:39 . 2010-07-10 04:38 260712 ----a-w- c:\windows\system32\nvcod1922.dll
2013-06-12 16:39 . 2010-07-10 04:38 260712 ----a-w- c:\windows\system32\nvcod.dll
2013-06-12 16:39 . 2010-07-10 04:38 11240 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2013-06-12 16:39 . 2013-06-12 17:19 -------- d-----w- c:\program files (x86)\Setup Files
2013-06-12 16:39 . 2010-07-10 04:38 930272 ----a-w- c:\windows\system32\dpinst.exe
2013-06-12 16:28 . 2012-08-22 08:19 11832 ----a-w- c:\windows\acpimof.dll
2013-06-12 15:01 . 2013-06-12 15:01 -------- d-----w- c:\programdata\RegInOut
2013-06-12 09:55 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-12 09:55 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-12 09:55 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-12 09:55 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 09:55 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-12 09:55 . 2013-05-13 05:51 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-12 09:55 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-12 09:55 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-12 09:54 . 2013-05-13 05:51 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 09:54 . 2013-05-13 05:51 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-12 09:54 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-12 09:54 . 2013-05-13 04:45 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-12 09:54 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-12 09:54 . 2013-05-13 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-12 09:54 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-06-12 09:54 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-12 09:54 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-12 09:54 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-12 09:54 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-12 05:18 . 2013-04-28 12:56 396800 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\DAO\w\a\l\m\a\r\t\dll\ISSkinExW.dll
2013-06-10 06:29 . 2013-06-10 06:29 -------- d-----w- c:\programdata\Garmin
2013-06-10 06:29 . 2013-06-10 06:29 -------- d-----w- c:\program files (x86)\Garmin
2013-06-09 16:04 . 2013-06-09 16:04 -------- d-----w- c:\program files\Western Digital
2013-06-09 16:04 . 2013-06-09 16:04 -------- d-----w- c:\program files (x86)\Western Digital
2013-06-09 15:23 . 2013-06-09 15:23 -------- d--h--w- c:\windows\msdownld.tmp
2013-06-09 15:07 . 2013-06-09 15:07 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-06-09 15:07 . 2013-06-09 15:07 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2013-06-09 14:58 . 2013-06-13 07:34 -------- d-----w- c:\programdata\Orbit
2013-06-09 14:58 . 2013-06-09 14:58 -------- d-----w- c:\programdata\Western Digital
2013-06-09 14:58 . 2013-06-09 14:58 -------- d-----w- c:\programdata\Package Cache
2013-06-09 14:58 . 2013-06-09 14:58 -------- d-----w- c:\programdata\DAEMON Tools Lite
2013-06-09 14:58 . 2013-06-09 14:58 -------- d-----w- c:\programdata\BrowserProtect
2013-06-09 14:58 . 2013-05-12 14:06 -------- d-----w- c:\programdata\Babylon
2013-06-09 14:47 . 2013-06-09 14:47 -------- d-----w- c:\programdata\RELOADED
2013-06-09 14:45 . 2013-06-09 14:47 -------- d-----w- c:\program files (x86)\dumps
2013-06-09 14:45 . 2013-06-09 14:45 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-06-09 14:45 . 2013-06-14 08:54 -------- d-----w- c:\program files (x86)\Steam
2013-06-09 14:34 . 2013-06-09 14:35 -------- d--h--w- c:\programdata\ProgramData
2013-06-09 09:19 . 2013-06-09 09:19 -------- d-----w- c:\programdata\Codemasters
2013-06-09 09:19 . 2013-06-09 09:19 -------- d-----w- c:\programdata\Steam
2013-06-09 09:16 . 2006-11-29 11:06 4398360 ----a-w- c:\windows\system32\d3dx9_32.dll
2013-06-09 08:15 . 2009-07-14 01:41 101376 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPWN7.DLL
2013-06-07 15:04 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2013-06-07 15:04 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2013-06-07 15:04 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2013-06-07 15:04 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2013-06-07 15:04 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2013-06-07 15:04 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2013-06-07 15:04 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2013-06-07 15:04 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2013-06-07 15:04 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2013-06-07 15:04 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2013-06-07 15:04 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2013-06-07 15:03 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-06-07 15:03 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-06-07 15:03 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-06-07 15:03 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-06-07 15:03 . 2011-03-25 03:29 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-06-07 15:03 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-06-07 15:03 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-06-07 14:38 . 2012-09-17 09:56 34656 ----a-w- c:\windows\system32\TURegOpt.exe
2013-06-07 14:38 . 2012-09-17 09:56 25952 ----a-w- c:\windows\system32\authuitu.dll
2013-06-07 14:38 . 2012-09-17 09:56 21344 ----a-w- c:\windows\SysWow64\authuitu.dll
2013-06-07 14:37 . 2013-06-07 14:39 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2013
2013-06-07 12:09 . 2013-06-07 15:21 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-06-07 12:09 . 2013-06-07 15:12 -------- d-----w- c:\program files\Microsoft Silverlight
2013-06-07 11:56 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-06-07 11:56 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-06-07 11:56 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-06-07 11:56 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-06-07 11:43 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-06-07 11:26 . 2013-06-12 09:56 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-06-07 11:16 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-06-07 11:16 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-06-07 11:16 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-06-07 11:16 . 2010-09-30 10:41 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-06-07 11:16 . 2010-09-30 06:47 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-06-07 11:16 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-06-07 11:15 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-06-07 11:15 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-06-07 11:15 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-06-07 11:15 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-06-07 11:15 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-06-07 11:15 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-06-07 11:15 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-06-07 10:57 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-06-07 10:57 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-06-07 10:57 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-06-07 10:57 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-06-07 10:57 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-06-07 10:45 . 2012-11-30 05:41 424448 ----a-w- c:\windows\system32\KernelBase.dll
2013-06-07 10:42 . 2013-06-07 10:43 -------- d-----w- c:\programdata\TuneUp Software
2013-06-07 10:42 . 2013-06-09 14:59 -------- d--h--w- c:\programdata\Common Files
2013-06-07 10:42 . 2013-02-27 05:52 14172672 ----a-w- c:\windows\system32\shell32.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-07 11:41 . 2013-06-07 11:41 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-06-07 11:41 . 2013-06-07 11:41 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-06-07 09:37 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2013-06-07 09:37 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2013-05-12 21:42 . 2013-02-25 22:32 1059560 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-05-12 20:34 . 2010-07-09 14:17 6491936 ----a-w- c:\windows\system32\nvcpl.dll
2013-05-12 20:34 . 2010-07-09 14:17 3514656 ----a-w- c:\windows\system32\nvsvc64.dll
2013-05-12 20:34 . 2010-07-09 14:17 884512 ----a-w- c:\windows\system32\nvvsvc.exe
2013-05-12 20:34 . 2010-07-09 14:17 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-05-12 20:34 . 2010-07-09 14:17 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-05-12 13:43 . 2013-05-12 13:43 566048 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-04-13 05:49 . 2013-06-07 10:36 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-06-07 10:36 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-06-07 10:36 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-06-07 10:36 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-06-07 10:36 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-06-07 10:36 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-06-06 1641896]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WDSmartWare.lnk - c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe View=show_in_tray [2009-10-14 9085760]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys [x]
R3 MSICDSetup;MSICDSetup;f:\cdriver64.sys;f:\CDriver64.sys [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;f:\ntiolib_x64.sys;f:\NTIOLib_X64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R4 WDDMService;WD SmartWare Drive Manager Service;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [x]
R4 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [x]
S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-07 19:20]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 85.119.89.2 85.119.88.2
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4bvoax46.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2013-06-18 17:59:50 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-06-18 15:59
ComboFix2.txt 2013-06-18 06:03
.
Před spuštěním: Volných bajtů: 174 609 793 024
Po spuštění: Volných bajtů: 174 517 149 696
.
- - End Of File - - AE08F465B54FF71A4AE2FFBCF6FBDAF7
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Log je již OK. Nastala nějaká změna?

[Martinpetricek2]

OK, vyzkouším a budu zkoušet, kdyby se to zase kouslo a BSOD a nebo výsledek tak napíšu sem.