Modrá smrt

[Rudy]

Zluste přeinstalovat ovladač síť karty a DirectX.

[sambala]

Direct přeinstalovány, ale nevím jak ovladač sit karty přeinstalovat.

[Rudy]

Stáhnete z webu výrobce a spustíte instalaci.

[sambala]

přeinstaloval jsem ovladač ale furt stejné beze změny.

[Rudy]

Zbývá hardware. Zdroj, grafika, zákl. deska. K tomu je třeba ale mít k dispozici funkční náhrady jednotlivývh komponent.

[sambala]

grafiky je už odzkoušena o vikendu zkusím zbytek. jinak nemůže to nějak spouštět nějaký vir nebo něco podobného ?

[sambala]

ještě bych dodal že od včerejška by po každém zapnutí pc nebo restartu vyskakuje tato hláška. RunDLL
Při spouštěni souboru NVCPL.DLL došlo k problému. NVCPL.DLL není platná typu Win32 " scren
http://leteckaposta.cz/606405577

[Rudy]

A safra. Podíváme se do systému. Zkuste tento postup: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

[sambala]

frst http://leteckaposta.cz/311972531
addition http://leteckaposta.cz/774078716

[Rudy]

Nic zásadního není vidět. Ještě poprosím o log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[sambala]

ComboFix 13-11-19.01 - Sambala 20.11.2013 18:20:54.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.4095.2446 [GMT 1:00]
Spuštěný z: c:\users\Sambala\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\FlashPlayerApp.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-20 do 2013-11-20 )))))))))))))))))))))))))))))))
.
.
2013-11-20 17:25 . 2013-11-20 17:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-20 17:00 . 2013-11-20 17:00 -------- d-----w- c:\program files\CPUID
2013-11-20 15:29 . 2013-11-20 15:29 -------- d-----w- C:\FRST
2013-11-20 14:49 . 2013-11-20 14:52 -------- d-----w- C:\CS 1.6 v48
2013-11-20 13:01 . 2013-11-20 13:01 -------- d-----w- C:\c9d61200188f1fd1f5c7
2013-11-20 12:53 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2013-11-20 12:53 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2013-11-20 12:33 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2013-11-20 12:33 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2013-11-20 12:30 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{02537017-1066-4EA3-8D16-D1B8AD16585B}\mpengine.dll
2013-11-20 12:26 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-11-20 12:26 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-11-20 12:26 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-11-20 12:26 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-11-20 12:16 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-11-20 12:02 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-11-20 12:02 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-11-20 12:02 . 2009-10-19 14:46 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-11-20 12:02 . 2009-10-19 14:10 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-11-20 12:02 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-11-20 12:02 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-11-20 12:00 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-11-20 12:00 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-11-20 12:00 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-11-20 12:00 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-11-20 12:00 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-11-20 12:00 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-11-20 12:00 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-11-20 11:57 . 2013-11-20 11:58 -------- d-----w- c:\windows\system32\MRT
2013-11-20 11:55 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-11-20 11:55 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2013-11-20 11:55 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2013-11-20 11:55 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-11-20 11:55 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-11-20 11:52 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2013-11-20 11:49 . 2011-03-12 12:03 662528 ----a-w- c:\windows\system32\XpsPrint.dll
2013-11-20 11:49 . 2011-03-12 11:31 442880 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-11-20 11:49 . 2012-11-09 05:34 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-11-20 11:49 . 2012-11-09 04:49 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-11-20 11:47 . 2012-11-09 05:34 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-20 11:46 . 2013-01-04 05:37 362496 ----a-w- c:\windows\system32\wow64win.dll
2013-11-20 11:45 . 2012-04-28 03:50 204800 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2013-11-20 11:43 . 2012-02-15 06:27 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-11-20 11:43 . 2012-02-15 05:44 826368 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-11-20 11:43 . 2012-02-15 04:46 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-11-20 11:43 . 2011-11-17 07:14 1739160 ----a-w- c:\windows\system32\ntdll.dll
2013-11-20 11:43 . 2011-11-17 05:41 1292592 ----a-w- c:\windows\SysWow64\ntdll.dll
2013-11-20 11:43 . 2012-06-06 05:50 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-11-20 11:43 . 2012-06-06 05:09 987136 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll
2013-11-20 11:41 . 2012-05-14 05:20 956416 ----a-w- c:\windows\system32\localspl.dll
2013-11-20 11:39 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2013-11-20 11:39 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll
2013-11-20 11:39 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll
2013-11-20 11:37 . 2012-06-02 05:25 1462784 ----a-w- c:\windows\system32\crypt32.dll
2013-11-20 11:37 . 2012-06-02 05:25 182272 ----a-w- c:\windows\system32\cryptsvc.dll
2013-11-20 11:37 . 2012-06-02 05:25 140288 ----a-w- c:\windows\system32\cryptnet.dll
2013-11-20 11:37 . 2012-06-02 04:45 139264 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-11-20 11:37 . 2012-06-02 04:45 1157632 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-11-20 11:37 . 2012-06-02 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-11-20 11:31 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2013-11-20 11:31 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2013-11-20 11:27 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-11-20 11:27 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-11-20 11:27 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-11-20 11:27 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-11-20 11:27 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-11-20 11:27 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-11-20 11:27 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-11-20 11:26 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-11-20 11:26 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-11-19 08:03 . 2010-02-20 04:36 228352 ----a-w- c:\windows\system32\drivers\1394ohci.sys
2013-11-18 15:38 . 2013-11-18 15:39 -------- d-----w- c:\program files (x86)\MSI Afterburner
2013-11-18 05:09 . 2013-11-19 08:09 -------- d-----w- c:\program files (x86)\Assassins Creed III
2013-11-17 19:42 . 2013-11-17 19:42 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-11-17 19:42 . 2013-11-17 19:42 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-11-17 19:34 . 2013-11-17 19:42 -------- d-----w- c:\program files (x86)\Ubisoft
2013-11-16 16:16 . 2013-11-16 16:16 -------- d-----w- c:\program files (x86)\CrystalDiskInfo
2013-11-16 07:26 . 2013-11-16 07:26 -------- d-----w- c:\program files (x86)\Lavalys
2013-11-15 11:04 . 2013-11-15 11:04 -------- d-----w- c:\program files (x86)\Six Networks
2013-11-15 10:55 . 2013-11-15 10:55 -------- d-----w- c:\programdata\Bohemia Interactive Studio
2013-11-15 10:31 . 2013-11-15 10:31 -------- d-----w- c:\programdata\SIX Networks
2013-11-15 09:19 . 2013-11-15 10:10 -------- d-----w- c:\program files (x86)\ArmA 2
2013-11-14 12:59 . 2013-11-14 12:59 -------- d-----w- c:\program files\McAfee Security Scan
2013-11-11 13:38 . 2013-11-11 13:38 -------- d-----w- c:\program files (x86)\PowerISO
2013-11-11 13:38 . 2013-04-15 09:50 127384 ----a-w- c:\windows\system32\drivers\scdemu.sys
2013-11-10 08:25 . 2013-11-10 08:25 -------- d-----w- c:\windows\system32\appmgmt
2013-11-10 07:10 . 2013-11-10 07:10 -------- d-----w- c:\programdata\Steam
2013-11-10 06:42 . 2013-11-19 08:02 -------- d-----w- C:\Nová složka
2013-11-09 07:54 . 2013-11-18 15:39 -------- d--h--w- c:\windows\msdownld.tmp
2013-11-09 06:31 . 2013-10-18 01:36 1063200 ----a-w- c:\windows\system32\nvspcap64.dll
2013-11-09 06:31 . 2013-10-18 01:36 955168 ----a-w- c:\windows\SysWow64\nvspcap.dll
2013-11-09 06:30 . 2013-11-09 06:30 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-11-09 06:03 . 2013-11-09 06:03 -------- d-----w- c:\program files\CCleaner
2013-11-07 13:32 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2013-11-07 13:32 . 2010-02-04 09:01 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_4.dll
2013-11-07 13:32 . 2010-02-04 09:01 530776 ----a-w- c:\windows\system32\XAudio2_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 528216 ----a-w- c:\windows\SysWow64\XAudio2_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 24920 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2013-11-07 13:32 . 2010-02-04 09:01 238936 ----a-w- c:\windows\SysWow64\xactengine3_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 22360 ----a-w- c:\windows\SysWow64\X3DAudio1_7.dll
2013-11-07 13:32 . 2010-02-04 09:01 176984 ----a-w- c:\windows\system32\xactengine3_6.dll
2013-11-07 13:28 . 2013-11-07 13:39 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim
2013-11-07 13:23 . 2013-11-08 14:28 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-11-06 16:56 . 2013-11-16 06:27 -------- d-----w- c:\programdata\WarThunder
2013-11-06 16:19 . 2013-11-06 16:19 -------- d-----w- C:\Lineage II
2013-11-06 14:01 . 2013-11-06 14:01 -------- d-----w- c:\program files\WinRAR
2013-11-06 05:16 . 2013-11-06 06:16 -------- d-----w- c:\program files (x86)\Lineage II
2013-11-03 13:04 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2013-11-03 13:04 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2013-11-03 13:02 . 2013-11-03 13:03 -------- d-----w- c:\program files (x86)\XBMC
2013-11-01 11:35 . 2013-11-01 11:35 -------- d-----w- c:\program files\TeamSpeak 3 Client
2013-11-01 11:26 . 2013-11-18 17:24 -------- d-----w- c:\programdata\NVIDIA
2013-11-01 11:26 . 2013-11-18 05:40 -------- d-----w- c:\users\UpdatusUser
2013-11-01 11:23 . 2013-11-01 11:23 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-11-01 11:20 . 2009-11-25 19:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2013-11-01 11:20 . 2009-11-25 19:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2013-11-01 11:20 . 2009-11-25 19:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2013-11-01 11:20 . 2009-11-25 19:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2013-11-01 11:20 . 2009-11-25 19:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2013-11-01 11:20 . 2009-11-25 19:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2013-11-01 11:20 . 2009-11-25 19:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2013-11-01 11:20 . 2009-11-25 19:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2013-11-01 11:20 . 2009-11-25 19:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2013-11-01 11:20 . 2009-11-25 19:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2013-11-01 11:19 . 2013-10-23 08:20 6669600 ----a-w- c:\windows\system32\nvcpl.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-20 12:13 . 2013-11-20 12:13 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-11-20 12:13 . 2013-11-20 12:13 249344 ----a-w- c:\windows\system32\webcheck.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2013-04-15 337432]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.130\SSScheduler.exe [2013-9-6 324320]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer6"=wdmaud.drv
.
R3 cpuz136;cpuz136;c:\users\Sambala\AppData\Local\Temp\cpuz136\cpuz136_x64.sys;c:\users\Sambala\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64;c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe [x]
R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-15 06:00 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01 10:55]
.
2013-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01 10:55]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-10-18 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-10-18 1063200]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 195.250.128.34 195.250.128.234 8.8.8.8
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-NVIDIAStereo - c:\program files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EverestDriver]
"ImagePath"="\??\c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-11-20 18:26:41
ComboFix-quarantined-files.txt 2013-11-20 17:26
.
Před spuštěním: Volných bajtů: 394 316 484 608
Po spuštění: Volných bajtů: 395 752 034 304
.
- - End Of File - - 928F9A3883683E9A6E9A331894716E78
A36C5E4F47E84449FF07ED3517B43A31

[Rudy]

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Folder::
c:\program files\McAfee Security Scan

File::
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Driver::
McComponentHostService

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[sambala]

ComboFix 13-11-19.01 - Sambala 20.11.2013 21:15:29.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.4095.2728 [GMT 1:00]
Spuštěný z: c:\users\Sambala\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Sambala\Desktop\CFScript.txt..txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-10-20 do 2013-11-20 )))))))))))))))))))))))))))))))
.
.
2013-11-20 20:18 . 2013-11-20 20:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-20 17:00 . 2013-11-20 17:00 -------- d-----w- c:\program files\CPUID
2013-11-20 15:29 . 2013-11-20 15:29 -------- d-----w- C:\FRST
2013-11-20 14:49 . 2013-11-20 14:52 -------- d-----w- C:\CS 1.6 v48
2013-11-20 13:01 . 2013-11-20 13:01 -------- d-----w- C:\c9d61200188f1fd1f5c7
2013-11-20 12:53 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2013-11-20 12:53 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2013-11-20 12:33 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll
2013-11-20 12:33 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll
2013-11-20 12:30 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{02537017-1066-4EA3-8D16-D1B8AD16585B}\mpengine.dll
2013-11-20 12:26 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-11-20 12:26 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-11-20 12:26 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-11-20 12:26 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-11-20 12:16 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-11-20 12:02 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-11-20 12:02 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-11-20 12:02 . 2009-10-19 14:46 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-11-20 12:02 . 2009-10-19 14:10 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-11-20 12:02 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-11-20 12:02 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-11-20 12:00 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-11-20 12:00 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-11-20 12:00 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-11-20 12:00 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-11-20 12:00 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-11-20 12:00 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-11-20 12:00 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-11-20 11:57 . 2013-11-20 11:58 -------- d-----w- c:\windows\system32\MRT
2013-11-20 11:55 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-11-20 11:55 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2013-11-20 11:55 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2013-11-20 11:55 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-11-20 11:55 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-11-20 11:52 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2013-11-20 11:49 . 2011-03-12 12:03 662528 ----a-w- c:\windows\system32\XpsPrint.dll
2013-11-20 11:49 . 2011-03-12 11:31 442880 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-11-20 11:49 . 2012-11-09 05:34 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-11-20 11:49 . 2012-11-09 04:49 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-11-20 11:47 . 2012-11-09 05:34 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-20 11:46 . 2013-01-04 05:37 362496 ----a-w- c:\windows\system32\wow64win.dll
2013-11-20 11:45 . 2012-04-28 03:50 204800 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2013-11-20 11:43 . 2012-02-15 06:27 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-11-20 11:43 . 2012-02-15 05:44 826368 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-11-20 11:43 . 2012-02-15 04:46 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-11-20 11:43 . 2011-11-17 07:14 1739160 ----a-w- c:\windows\system32\ntdll.dll
2013-11-20 11:43 . 2011-11-17 05:41 1292592 ----a-w- c:\windows\SysWow64\ntdll.dll
2013-11-20 11:43 . 2012-06-06 05:50 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-11-20 11:43 . 2012-06-06 05:09 987136 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll
2013-11-20 11:41 . 2012-05-14 05:20 956416 ----a-w- c:\windows\system32\localspl.dll
2013-11-20 11:39 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2013-11-20 11:39 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll
2013-11-20 11:39 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll
2013-11-20 11:37 . 2012-06-02 05:25 1462784 ----a-w- c:\windows\system32\crypt32.dll
2013-11-20 11:37 . 2012-06-02 05:25 182272 ----a-w- c:\windows\system32\cryptsvc.dll
2013-11-20 11:37 . 2012-06-02 05:25 140288 ----a-w- c:\windows\system32\cryptnet.dll
2013-11-20 11:37 . 2012-06-02 04:45 139264 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-11-20 11:37 . 2012-06-02 04:45 1157632 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-11-20 11:37 . 2012-06-02 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-11-20 11:31 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll
2013-11-20 11:31 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll
2013-11-20 11:27 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-11-20 11:27 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-11-20 11:27 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-11-20 11:27 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-11-20 11:27 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-11-20 11:27 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-11-20 11:27 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-11-20 11:26 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-11-20 11:26 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-11-19 08:03 . 2010-02-20 04:36 228352 ----a-w- c:\windows\system32\drivers\1394ohci.sys
2013-11-18 15:38 . 2013-11-18 15:39 -------- d-----w- c:\program files (x86)\MSI Afterburner
2013-11-18 05:09 . 2013-11-19 08:09 -------- d-----w- c:\program files (x86)\Assassins Creed III
2013-11-17 19:42 . 2013-11-17 19:42 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-11-17 19:42 . 2013-11-17 19:42 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-11-17 19:34 . 2013-11-17 19:42 -------- d-----w- c:\program files (x86)\Ubisoft
2013-11-16 16:16 . 2013-11-16 16:16 -------- d-----w- c:\program files (x86)\CrystalDiskInfo
2013-11-16 07:26 . 2013-11-16 07:26 -------- d-----w- c:\program files (x86)\Lavalys
2013-11-15 11:04 . 2013-11-15 11:04 -------- d-----w- c:\program files (x86)\Six Networks
2013-11-15 10:55 . 2013-11-15 10:55 -------- d-----w- c:\programdata\Bohemia Interactive Studio
2013-11-15 10:31 . 2013-11-15 10:31 -------- d-----w- c:\programdata\SIX Networks
2013-11-15 09:19 . 2013-11-15 10:10 -------- d-----w- c:\program files (x86)\ArmA 2
2013-11-14 12:59 . 2013-11-14 12:59 -------- d-----w- c:\program files\McAfee Security Scan
2013-11-11 13:38 . 2013-11-11 13:38 -------- d-----w- c:\program files (x86)\PowerISO
2013-11-11 13:38 . 2013-04-15 09:50 127384 ----a-w- c:\windows\system32\drivers\scdemu.sys
2013-11-10 08:25 . 2013-11-10 08:25 -------- d-----w- c:\windows\system32\appmgmt
2013-11-10 07:10 . 2013-11-10 07:10 -------- d-----w- c:\programdata\Steam
2013-11-10 06:42 . 2013-11-19 08:02 -------- d-----w- C:\Nová složka
2013-11-09 07:54 . 2013-11-18 15:39 -------- d--h--w- c:\windows\msdownld.tmp
2013-11-09 06:31 . 2013-10-18 01:36 1063200 ----a-w- c:\windows\system32\nvspcap64.dll
2013-11-09 06:31 . 2013-10-18 01:36 955168 ----a-w- c:\windows\SysWow64\nvspcap.dll
2013-11-09 06:30 . 2013-11-09 06:30 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-11-09 06:03 . 2013-11-09 06:03 -------- d-----w- c:\program files\CCleaner
2013-11-07 13:32 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2013-11-07 13:32 . 2010-02-04 09:01 74072 ----a-w- c:\windows\SysWow64\XAPOFX1_4.dll
2013-11-07 13:32 . 2010-02-04 09:01 530776 ----a-w- c:\windows\system32\XAudio2_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 528216 ----a-w- c:\windows\SysWow64\XAudio2_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 24920 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2013-11-07 13:32 . 2010-02-04 09:01 238936 ----a-w- c:\windows\SysWow64\xactengine3_6.dll
2013-11-07 13:32 . 2010-02-04 09:01 22360 ----a-w- c:\windows\SysWow64\X3DAudio1_7.dll
2013-11-07 13:32 . 2010-02-04 09:01 176984 ----a-w- c:\windows\system32\xactengine3_6.dll
2013-11-07 13:28 . 2013-11-07 13:39 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim
2013-11-07 13:23 . 2013-11-08 14:28 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-11-06 16:56 . 2013-11-16 06:27 -------- d-----w- c:\programdata\WarThunder
2013-11-06 16:19 . 2013-11-06 16:19 -------- d-----w- C:\Lineage II
2013-11-06 14:01 . 2013-11-06 14:01 -------- d-----w- c:\program files\WinRAR
2013-11-06 05:16 . 2013-11-06 06:16 -------- d-----w- c:\program files (x86)\Lineage II
2013-11-03 13:04 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2013-11-03 13:04 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2013-11-03 13:02 . 2013-11-03 13:03 -------- d-----w- c:\program files (x86)\XBMC
2013-11-01 11:35 . 2013-11-01 11:35 -------- d-----w- c:\program files\TeamSpeak 3 Client
2013-11-01 11:26 . 2013-11-18 17:24 -------- d-----w- c:\programdata\NVIDIA
2013-11-01 11:26 . 2013-11-18 05:40 -------- d-----w- c:\users\UpdatusUser
2013-11-01 11:23 . 2013-11-01 11:23 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-11-01 11:20 . 2009-11-25 19:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll
2013-11-01 11:20 . 2009-11-25 19:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll
2013-11-01 11:20 . 2009-11-25 19:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll
2013-11-01 11:20 . 2009-11-25 19:47 48960 ----a-w- c:\windows\system32\netfxperf.dll
2013-11-01 11:20 . 2009-11-25 19:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe
2013-11-01 11:20 . 2009-11-25 19:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll
2013-11-01 11:20 . 2009-11-25 19:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2013-11-01 11:20 . 2009-11-25 19:47 444752 ----a-w- c:\windows\system32\mscoree.dll
2013-11-01 11:20 . 2009-11-25 19:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe
2013-11-01 11:20 . 2009-11-25 19:47 1942856 ----a-w- c:\windows\system32\dfshim.dll
2013-11-01 11:19 . 2013-10-23 08:20 6669600 ----a-w- c:\windows\system32\nvcpl.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-20 12:13 . 2013-11-20 12:13 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-11-20 12:13 . 2013-11-20 12:13 249344 ----a-w- c:\windows\system32\webcheck.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2013-04-15 337432]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.130\SSScheduler.exe [2013-9-6 324320]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer6"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 cpuz136;cpuz136;c:\users\Sambala\AppData\Local\Temp\cpuz136\cpuz136_x64.sys;c:\users\Sambala\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64;c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.130\McCHSvc.exe [x]
R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-15 06:00 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01 10:55]
.
2013-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-01 10:55]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-10-18 1028384]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-10-18 1063200]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 195.250.128.34 195.250.128.234 8.8.8.8
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-NVIDIAStereo - c:\program files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EverestDriver]
"ImagePath"="\??\c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-11-20 21:19:56
ComboFix-quarantined-files.txt 2013-11-20 20:19
ComboFix2.txt 2013-11-20 17:26
.
Před spuštěním: Volných bajtů: 394 506 080 256
Po spuštění: Volných bajtů: 394 442 702 848
.
- - End Of File - - D1A1F9C0FED394E9C63A27350CD97651
A36C5E4F47E84449FF07ED3517B43A31

[sambala]

a jinak když hraju hry to je jedno jaka když nepadne BSOD vtom lepšim přiapadě my naskočí tahle hlaška "scren
http://leteckaposta.cz/488084661

[Rudy]

Ta hláška je vyloženě herní problém. Pravděpodobně se s něčím nesnáší. Log je již OK. Myslím že je to souběh více problémů. Začal bych řešit nejprve ten hardware a pak (pokud nějaký zbude) software.