Modrá smrt, pády systému..

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
Castab
Návštěvník
Návštěvník
Příspěvky: 48
Registrován: 22 Srp 2010 20:30

Modrá smrt, pády systému..

#1 Příspěvek od Castab »

Dobrý den, zatím se mi 2x stalo, že mi to hodilo modrou smrt, nebo se počítač zasekl a musel se restartnout. Také, když jsem spustil windows tak mi naběhla černá obrazovka a při restartu to zase šlo (spustit poslední známou konfiguraci). Windows spouštím přes bootovací program XOSL 2 (měl jsem tam XP a W7), ale XP jsem odstranil a myslel jsem, že se W7 bude spouštět klasicky bez nutnosti zmáčknout před spuštením systému "Boot", ale furt to tam je a já bych i zároveň potřeboval poradit jak ten program odstranit a aby se windows spuštěl klasicky (v ovládacích panelech ani nikde jinde není). Napadlo mě, že to bude někde v Settings, Preferences (to je tam taky v tý tabulce kde je boot), ale nechtěl jsem se v tom hrabat, když tomu nerozumím abych nesmazal i tenhle windows, ten XOSL mam totiž od známého. Pak je možnost počítač vyfoukat, to dneska nebo zítra udělám (jak mi vyjde čas).Zdá se mi, že i počítač neběží dle svých specifikací. Na viry jsem neposmyslel, mam aktulizovaného avasta5 a dávám si bacha kde surfuju a co stahuji. Předem děkuji za vaší odbornou pomoc.

Logfile of random's system information tool 1.08 (written by random/random)
Run by xxx at 2011-02-25 15:47:54
Microsoft Windows 7 Ultimate
System drive C: has 25 GB (34%) free of 75 GB
Total RAM: 1024 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:48:04, on 25.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\SOUNDMAN.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Users\xxx\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\xxx\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Users\xxx\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\xxx\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\xxx\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\xxx\Downloads\RSIT.exe
C:\Program Files\trend micro\xxx.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\xxx\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 3777 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4255734986-56726971-44719094-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4255734986-56726971-44719094-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-02-23 3451496]
"SoundMan"=C:\Windows\SOUNDMAN.EXE [2009-04-14 604704]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Google Update"=C:\Users\xxx\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-16 136176]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2011-02-16 396152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-24 18:42:33 ----A---- C:\Windows\system32\pbsvc.exe
2011-02-24 18:00:01 ----D---- C:\Windows\system32\appmgmt
2011-02-24 17:53:04 ----A---- C:\Windows\system32\PnkBstrB.exe
2011-02-24 17:18:23 ----A---- C:\Windows\system32\drivers\PnkBstrK.sys
2011-02-24 17:17:01 ----A---- C:\Windows\system32\PnkBstrA.exe
2011-02-24 17:12:10 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-02-24 15:38:39 ----D---- C:\Users\xxx\AppData\Roaming\.minecraft
2011-02-24 15:07:07 ----D---- C:\Users\xxx\AppData\Roaming\Leadertech
2011-02-23 18:24:08 ----D---- C:\Program Files\GRETECH
2011-02-22 07:03:13 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-02-22 07:01:26 ----D---- C:\ProgramData\Blizzard Entertainment
2011-02-21 21:34:36 ----D---- C:\Program Files\GamePark
2011-02-21 21:03:09 ----D---- C:\Program Files\Microsoft.NET
2011-02-21 21:02:49 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-02-21 21:02:49 ----A---- C:\Windows\system32\PresentationHost.exe
2011-02-21 21:02:49 ----A---- C:\Windows\system32\netfxperf.dll
2011-02-21 21:02:49 ----A---- C:\Windows\system32\mscoree.dll
2011-02-21 21:02:49 ----A---- C:\Windows\system32\dfshim.dll
2011-02-21 19:18:13 ----A---- C:\Users\xxx\AppData\Roaming\PnkBstrK.sys
2011-02-21 19:04:31 ----SHD---- C:\Windows\ftpcache
2011-02-21 18:35:51 ----A---- C:\Windows\ALCFDRTM.EXE
2011-02-21 14:28:55 ----D---- C:\Windows\Minidump
2011-02-21 14:07:04 ----D---- C:\Program Files\trend micro
2011-02-21 14:07:02 ----D---- C:\rsit
2011-02-19 22:10:24 ----D---- C:\ProgramData\Sun
2011-02-19 22:10:23 ----D---- C:\Program Files\Common Files\Java
2011-02-19 22:10:03 ----A---- C:\Windows\system32\javaws.exe
2011-02-19 22:10:03 ----A---- C:\Windows\system32\javaw.exe
2011-02-19 22:10:03 ----A---- C:\Windows\system32\java.exe
2011-02-19 22:10:03 ----A---- C:\Windows\system32\deployJava1.dll
2011-02-19 22:09:50 ----D---- C:\Program Files\Java
2011-02-19 22:08:41 ----D---- C:\Users\xxx\AppData\Roaming\WinRAR
2011-02-19 22:08:29 ----D---- C:\Program Files\WinRAR
2011-02-19 21:14:06 ----D---- C:\TEXCACHE
2011-02-16 07:23:24 ----D---- C:\Program Files\uTorrent
2011-02-16 07:22:54 ----D---- C:\Users\xxx\AppData\Roaming\uTorrent
2011-02-16 06:44:06 ----D---- C:\Program Files\CCleaner
2011-02-05 21:10:36 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-02-05 21:10:30 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-02-05 21:10:30 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-02-05 21:10:30 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-02-05 21:10:30 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-02-05 21:10:30 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-02-05 21:10:30 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-02-05 21:10:30 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-02-05 21:10:29 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-02-05 21:10:29 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-02-05 21:10:29 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-02-05 21:10:29 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-02-05 21:10:29 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-02-05 21:10:29 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-02-05 21:10:29 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-02-05 21:10:29 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-02-05 21:10:25 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-02-05 21:10:25 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-02-05 21:10:25 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-02-05 21:10:25 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-02-05 21:10:24 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-02-05 21:10:24 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-02-05 21:10:24 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-02-05 21:10:24 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-02-05 21:10:24 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-02-05 21:10:24 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-02-05 21:10:23 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-02-05 21:10:23 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-02-05 21:10:23 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-02-05 21:10:23 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-02-05 21:10:23 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-02-05 21:10:23 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-02-05 21:10:22 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-02-05 21:10:22 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-02-05 21:10:22 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-02-05 21:10:22 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-02-05 21:10:22 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-02-05 21:10:22 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-02-05 21:10:22 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-02-05 21:10:22 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-02-05 21:10:21 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-02-05 21:10:21 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-02-05 21:10:21 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-02-05 21:10:21 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-02-05 21:10:21 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-02-05 21:10:21 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-02-05 21:10:21 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-02-05 21:10:20 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-02-05 21:10:20 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-02-05 21:10:20 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-02-05 21:10:20 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-02-05 21:10:20 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-02-05 21:10:20 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-02-05 21:10:19 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-02-05 21:10:19 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-02-05 21:10:19 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-02-05 21:10:19 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-02-05 21:10:18 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-02-05 21:10:18 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-02-05 21:10:18 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-02-05 21:10:18 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-02-05 21:10:18 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-02-05 21:10:18 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-02-05 21:10:17 ----A---- C:\Windows\system32\xinput1_3.dll
2011-02-05 21:10:17 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-02-05 21:10:17 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-02-05 21:10:17 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-02-05 21:10:17 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-02-05 21:10:17 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-02-05 21:10:17 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-02-05 21:10:16 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-02-05 21:10:16 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-02-05 21:10:16 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-02-05 21:10:16 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-02-05 21:10:16 ----A---- C:\Windows\system32\d3dx10.dll
2011-02-05 21:10:15 ----A---- C:\Windows\system32\xinput1_2.dll
2011-02-05 21:10:15 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-02-05 21:10:15 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-02-05 21:10:15 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-02-05 21:10:15 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-02-05 21:10:15 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-02-05 21:10:14 ----A---- C:\Windows\system32\xinput1_1.dll
2011-02-05 21:10:14 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-02-05 21:10:11 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-02-05 21:10:10 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-02-05 21:10:10 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-02-05 21:10:10 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-02-05 21:10:10 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-02-05 21:10:10 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-02-05 21:10:09 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-02-05 21:10:09 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-02-05 21:10:09 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-02-05 20:52:44 ----D---- C:\Program Files\2K Games
2011-02-05 20:49:16 ----A---- C:\Windows\system32\drivers\sptd.sys
2011-02-05 20:48:59 ----D---- C:\Program Files\DAEMON Tools Lite
2011-02-05 20:48:45 ----D---- C:\Users\xxx\AppData\Roaming\DAEMON Tools Lite
2011-02-05 20:48:42 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-02-05 19:22:05 ----D---- C:\EVEREST Ultimate Edition1
2011-02-05 19:09:11 ----A---- C:\Windows\system32\nvhdap32.dll
2011-02-05 19:09:11 ----A---- C:\Windows\system32\drivers\nvhda32v.sys
2011-02-05 19:09:10 ----A---- C:\Windows\system32\nvcohda.dll
2011-02-05 19:08:22 ----D---- C:\ProgramData\NVIDIA
2011-02-05 19:05:47 ----D---- C:\ProgramData\NVIDIA Corporation
2011-02-05 19:05:42 ----D---- C:\Program Files\NVIDIA Corporation
2011-02-05 18:48:09 ----D---- C:\Program Files\Realtek AC97
2011-02-05 18:48:09 ----A---- C:\Windows\system32\RTLCPL.EXE
2011-02-05 18:48:08 ----A---- C:\Windows\system32\RTLCPAPI.dll
2011-02-05 18:48:08 ----A---- C:\Windows\system32\drivers\RTKVAC.SYS
2011-02-05 18:48:08 ----A---- C:\Windows\SOUNDMAN.EXE
2011-02-05 18:48:07 ----A---- C:\Windows\system32\RtkPgExt.dll
2011-02-05 18:48:07 ----A---- C:\Windows\system32\RtkCfg.dll
2011-02-05 18:48:07 ----A---- C:\Windows\system32\RtkAPO.dll
2011-02-05 18:48:06 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-05 18:48:06 ----A---- C:\Windows\alcupd.exe
2011-02-05 18:48:06 ----A---- C:\Windows\alcrmv.exe
2011-02-05 18:48:00 ----A---- C:\Windows\RtlExUpd.dll
2011-02-05 18:48:00 ----A---- C:\Windows\HideWin.exe
2011-02-05 18:47:53 ----D---- C:\Program Files\Common Files\InstallShield
2011-02-05 18:45:22 ----A---- C:\Windows\system32\nvusmb.exe
2011-02-05 18:45:06 ----A---- C:\Windows\system32\NVUNINST.EXE
2011-02-05 18:45:04 ----D---- C:\Users\xxx\AppData\Roaming\InstallShield
2011-02-05 18:44:56 ----D---- C:\NVIDIA
2011-02-05 18:43:59 ----A---- C:\Windows\WINCMD.INI

======List of files/folders modified in the last 1 months======

2011-02-25 15:48:04 ----D---- C:\Windows\Prefetch
2011-02-25 15:47:56 ----D---- C:\Windows\Temp
2011-02-25 07:32:48 ----D---- C:\Windows\System32
2011-02-25 06:15:51 ----RSD---- C:\Windows\assembly
2011-02-24 18:57:10 ----SHD---- C:\Windows\Installer
2011-02-24 18:03:04 ----D---- C:\Windows
2011-02-24 17:18:23 ----D---- C:\Windows\system32\drivers
2011-02-24 15:25:53 ----RD---- C:\Program Files
2011-02-24 06:49:48 ----D---- C:\Windows\system32\NDF
2011-02-23 18:22:59 ----SD---- C:\Users\xxx\AppData\Roaming\Microsoft
2011-02-23 16:04:17 ----A---- C:\Windows\system32\aswBoot.exe
2011-02-22 07:04:09 ----D---- C:\Program Files\Common Files
2011-02-22 07:01:26 ----HD---- C:\ProgramData
2011-02-22 06:17:46 ----D---- C:\Windows\system32\Tasks
2011-02-21 23:26:57 ----D---- C:\Windows\Microsoft.NET
2011-02-21 22:18:21 ----D---- C:\Windows\inf
2011-02-21 22:18:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-21 22:11:59 ----D---- C:\Windows\system32\catroot2
2011-02-21 21:16:07 ----D---- C:\Windows\system32\config
2011-02-21 21:15:47 ----D---- C:\Windows\winsxs
2011-02-21 21:14:55 ----D---- C:\Windows\system32\catroot
2011-02-21 21:03:22 ----D---- C:\Windows\system32\en-US
2011-02-21 21:02:43 ----D---- C:\Windows\SoftwareDistribution
2011-02-21 19:17:12 ----D---- C:\Windows\system32\LogFiles
2011-02-18 17:53:39 ----D---- C:\Windows\system32\wdi
2011-02-18 07:48:19 ----D---- C:\Windows\LiveKernelReports
2011-02-16 09:57:36 ----D---- C:\Windows\Logs
2011-02-16 06:45:31 ----D---- C:\Windows\debug
2011-02-16 06:28:49 ----D---- C:\Windows\Tasks
2011-02-05 19:09:27 ----D---- C:\Windows\system32\DriverStore
2011-02-05 19:06:52 ----D---- C:\Windows\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2007-04-19 102696]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-02-05 691696]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-02-23 371544]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-02-23 301528]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-02-23 49240]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-02-23 53592]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\RTKVAC.SYS [2009-06-19 4172832]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-05-03 1065384]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2010-06-21 105576]
S3 ahcf63gv;ahcf63gv; C:\Windows\system32\drivers\ahcf63gv.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 NVNET;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-02-23 42184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-10-08 129640]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-02-24 75136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-08 236136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Modrá smrt, pády systému..

#2 Příspěvek od motji »

Hezké odpoledne :) ,
duplicita, pokračute prosím zde. http://www.viry.cz/forum/viewtopic.php?f=13&t=109814
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 Bře 2009 20:48
Místo/Bydliště: Třebíč
Kontaktovat uživatele:

Re: Modrá smrt, pády systému..

#3 Příspěvek od Caroprd111 »

Zamykám :closed:
Obrázek

Zamčeno