VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosim o kontrolu logu a popis odstraneni problemu

https://forum.viry.cz:443/viewtopic.php?t=100721

Stránka 3 z 3

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 06 kvě 2010 20:34
od stell
ok,vyzera to dobre ale bezia ti zbytocne programy,ktore nemusia,
Stáhni si a spusť program StartUpLite - http://www.malwarebytes.org/StartUpLite.exe
- Program vypíše seznam zbytečných programů spouštějících se při startu Windows
- K vypnutí spouštění těchto programů zaškrtni u příslušných řádků Disable a klikni na Continue
dnes uz musim koncit,nakolko ,hromy,blesky biju,takze az zajtra budem tu,
potom napis ci je zlepsenie,ak nie tak povypiname aj nejake sluzby.

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 06 kvě 2010 20:57
od server123
startuplite chtel na konci restart.
Po restartu a prihlaseni usera to vytuhlo na 10 minut.
Behem te doby slo spoustet aplikace, hybat s okny, otevirat menu a zalozky, ale samotne aplikace byly tuhe:

Firefox - web se nenacita
VLC - mp3 nehraje
START lista - nejde zmacknout tlacitko start, RMB na tray ikonach taky ne, po pretazeni oken zustavaji na liste zbytky

po deseti minutach se to vse ozivi, FF nacte web, VLC zacne prehravat, spusti se programy po spusteni (skype), lista START ozije a pak vse funguje.

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 07 kvě 2010 06:28
od stell
Samozrejme ze nic neide,ak hned po starte nieco vytlaci procesor,
1: http://screen317.spywareinfoforum.org/SecurityCheck.exe
stiahni-spust-log vloz sem

2:Nastudovat navod a spravit kontrolu,log vloz sem.
http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 14 kvě 2010 19:13
od server123
nejakou dobu jsem tu nebyl.

SecurityCheck:
Results of screen317's Security Check version 0.99.4
Windows XP Service Pack 3
Internet Explorer 6 Out of date!
``````````````````````````````
Antivirus/Firewall Check:
avast! Free Antivirus
```````````````````````````````
Anti-malware/Other Utilities Check:
Out of date HijackThis installed!
Malwarebytes' Anti-Malware
HijackThis 1.99.1
CCleaner
Adobe Flash Player 10.0.42.34
Adobe Reader 6.0 CE
Out of date Adobe Reader installed!
Mozilla Firefox (3.6.3)
````````````````````````````````
Process Check:
objlist.exe by Laurent
Alwil Software Avast5 AvastSvc.exe
system32 AvastUI.exe -?-
ALWILS~1 Avast5 avastUI.exe
````````````````````````````````
DNS Vulnerability Check:
GREAT! (Not vulnerable to DNS cache poisoning)

``````````End of Log````````````

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 14 kvě 2010 23:16
od server123
kaspersky:
Autoscan: completed 11 minutes ago (events: 20, objects: 604820, time: 03:44:56)
15.5.2010 0:03:33 Task completed
14.5.2010 23:16:02 Deleted: Backdoor.Win32.Bifrose.cnpx T:\Zaloha_puvodnich_disku\T\+ Programy +\+ Utilities +\MsOffice2007Ent\Office2007ClassicMenu\Setup_OfficeMenu_retail.exe
14.5.2010 23:14:20 Detected: Backdoor.Win32.Bifrose.cnpx T:\Zaloha_puvodnich_disku\T\+ Programy +\+ Utilities +\MsOffice2007Ent\Office2007ClassicMenu\Setup_OfficeMenu_retail.exe/data0000/Armadillo
14.5.2010 23:04:21 Deleted: not-a-virus:AdWare.Win32.Dap.g T:\Zaloha_puvodnich_disku\T\+ Programy +\+ Net +\Download accelerator\dap53.exe
14.5.2010 23:01:25 Detected: not-a-virus:AdWare.Win32.Dap.g T:\Zaloha_puvodnich_disku\T\+ Programy +\+ Net +\Download accelerator\dap53.exe/WISE0021.BIN/dapiebar.dll
14.5.2010 22:45:24 Deleted: Backdoor.Win32.Agobot.qgj T:\Zaloha_puvodnich_disku\T\+ Programy +\+ CD + DVD +\CloneCD 3051\SetupCloneCD-2.exe
14.5.2010 22:40:32 Detected: Backdoor.Win32.Agobot.qgj T:\Zaloha_puvodnich_disku\T\+ Programy +\+ CD + DVD +\CloneCD 3051\SetupCloneCD-2.exe/InstallHelp.dll
14.5.2010 22:39:15 Deleted: not-a-virus:AdWare.Win32.Gator.3202 T:\Zaloha_puvodnich_disku\T\+ Codec +\DivX\DivX Pro 5.03 GAINBundle.exe\DivXPro503GAINBundle.exe
14.5.2010 22:37:33 Detected: not-a-virus:AdWare.Win32.Gator.3202 T:\Zaloha_puvodnich_disku\T\+ Codec +\DivX\DivX Pro 5.03 GAINBundle.exe\DivXPro503GAINBundle.exe/Gain_Trickler.exe
14.5.2010 21:58:38 Deleted: Trojan.Win32.Genome.jjbf T:\Zaloha_puvodnich_disku\C\Documents and Settings\Leonek\Local Settings\Temp\''WGA Notification v1.5.708.0'' Update\Data\Port_RockXP_v4.exe
14.5.2010 21:56:26 Detected: Trojan.Win32.Genome.jjbf T:\Zaloha_puvodnich_disku\C\Documents and Settings\Leonek\Local Settings\Temp\''WGA Notification v1.5.708.0'' Update\Data\Port_RockXP_v4.exe
14.5.2010 21:08:18 Deleted: Trojan.Win32.Agent2.cdb C:\WINDOWS\system32\viwc.exe
14.5.2010 21:07:50 Detected: Trojan.Win32.Agent2.cdb C:\WINDOWS\system32\viwc.exe
14.5.2010 20:53:36 Deleted: Backdoor.Win32.Bifrose.cnpx C:\System Volume Information\_restore{BCEB004B-6C5E-4525-886C-BDD7AE16CC28}\RP210\A0046232.exe
14.5.2010 20:53:14 Detected: Backdoor.Win32.Bifrose.cnpx C:\System Volume Information\_restore{BCEB004B-6C5E-4525-886C-BDD7AE16CC28}\RP210\A0046232.exe/Armadillo
14.5.2010 20:51:42 Deleted: Packed.Win32.Krap.ar C:\System Volume Information\_restore{BCEB004B-6C5E-4525-886C-BDD7AE16CC28}\RP197\A0034651.exe
14.5.2010 20:50:20 Detected: Packed.Win32.Krap.ar C:\System Volume Information\_restore{BCEB004B-6C5E-4525-886C-BDD7AE16CC28}\RP197\A0034651.exe
14.5.2010 20:34:33 Deleted: Backdoor.Win32.Bifrose.cnpx C:\Program Files\Classic Menu for Office\OfficeMenuManager.exe
14.5.2010 20:32:28 Detected: Backdoor.Win32.Bifrose.cnpx C:\Program Files\Classic Menu for Office\OfficeMenuManager.exe/Armadillo
14.5.2010 20:18:02 Task started

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 15 kvě 2010 10:19
od server123
prvni dojmy, beží to od rána a vypadá to naprosto v pořádku! Dokonce máme s ženou pocit, že je ten počítač několikanásobně rychlejší než kdy byl :)

Tak snad už to finale. Díky moc za pomoc! THUMBS UP!

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 15 kvě 2010 12:52
od stell
Tak potom ok,mal si tam peknu zbierku,,
Nemas zaco. :)

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 16 kvě 2010 10:33
od server123
:arcisit: dnes po spusteni opet, 20 minut zatuhnuto, ted se to rozjelo :(

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 16 kvě 2010 10:44
od stell
Stiahni >>tento<< subor na plochu.rozbal na plochu.
start spustit vloz prikaz
"%userprofile%\plocha\tdsskiller.exe" -l "%userprofile%\plocha\tdsskiller.txt"
po skane log vloz sem.

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 16 kvě 2010 17:24
od server123
18:24:14:343 2772 TDSS rootkit removing tool 2.2.8.1 Mar 22 2010 10:43:04
18:24:14:343 2772 ================================================================================
18:24:14:343 2772 SystemInfo:

18:24:14:343 2772 OS Version: 5.1.2600 ServicePack: 3.0
18:24:14:343 2772 Product type: Workstation
18:24:14:343 2772 ComputerName: MAXIM
18:24:14:343 2772 UserName: restore
18:24:14:343 2772 Windows directory: C:\WINDOWS
18:24:14:343 2772 Processor architecture: Intel x86
18:24:14:343 2772 Number of processors: 1
18:24:14:343 2772 Page size: 0x1000
18:24:14:343 2772 Boot type: Normal boot
18:24:14:343 2772 ================================================================================
18:24:14:359 2772 UnloadDriverW: NtUnloadDriver error 2
18:24:14:359 2772 ForceUnloadDriverW: UnloadDriverW(klmd21) error 2
18:24:14:359 2772 wfopen_ex: Trying to open file C:\WINDOWS\system32\config\system
18:24:14:359 2772 wfopen_ex: MyNtCreateFileW error 32 (C0000043)
18:24:14:359 2772 wfopen_ex: Trying to KLMD file open
18:24:14:359 2772 wfopen_ex: File opened ok (Flags 2)
18:24:14:359 2772 wfopen_ex: Trying to open file C:\WINDOWS\system32\config\software
18:24:14:359 2772 wfopen_ex: MyNtCreateFileW error 32 (C0000043)
18:24:14:359 2772 wfopen_ex: Trying to KLMD file open
18:24:14:359 2772 wfopen_ex: File opened ok (Flags 2)
18:24:14:359 2772 Initialize success
18:24:14:359 2772
18:24:14:359 2772 Scanning Services ...
18:24:14:406 2772 Raw services enum returned 283 services
18:24:14:406 2772
18:24:14:406 2772 Scanning Kernel memory ...
18:24:14:406 2772 Devices to scan: 8
18:24:14:406 2772
18:24:14:406 2772 Driver Name: Disk
18:24:14:406 2772 IRP_MJ_CREATE : F7622BB0
18:24:14:406 2772 IRP_MJ_CREATE_NAMED_PIPE : 804F355A
18:24:14:406 2772 IRP_MJ_CLOSE : F7622BB0
18:24:14:406 2772 IRP_MJ_READ : F761CD1F
18:24:14:406 2772 IRP_MJ_WRITE : F761CD1F
18:24:14:406 2772 IRP_MJ_QUERY_INFORMATION : 804F355A
18:24:14:406 2772 IRP_MJ_SET_INFORMATION : 804F355A
18:24:14:406 2772 IRP_MJ_QUERY_EA : 804F355A
18:24:14:406 2772 IRP_MJ_SET_EA : 804F355A
18:24:14:406 2772 IRP_MJ_FLUSH_BUFFERS : F761D2E2
18:24:14:406 2772 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F355A
18:24:14:406 2772 IRP_MJ_SET_VOLUME_INFORMATION : 804F355A
18:24:14:406 2772 IRP_MJ_DIRECTORY_CONTROL : 804F355A
18:24:14:406 2772 IRP_MJ_FILE_SYSTEM_CONTROL : 804F355A
18:24:14:406 2772 IRP_MJ_DEVICE_CONTROL : F761D3BB
18:24:14:406 2772 IRP_MJ_INTERNAL_DEVICE_CONTROL : F7620F28
18:24:14:406 2772 IRP_MJ_SHUTDOWN : F761D2E2
18:24:14:406 2772 IRP_MJ_LOCK_CONTROL : 804F355A
18:24:14:406 2772 IRP_MJ_CLEANUP : 804F355A
18:24:14:406 2772 IRP_MJ_CREATE_MAILSLOT : 804F355A
18:24:14:406 2772 IRP_MJ_QUERY_SECURITY : 804F355A
18:24:14:406 2772 IRP_MJ_SET_SECURITY : 804F355A
18:24:14:406 2772 IRP_MJ_POWER : F761EC82
18:24:14:406 2772 IRP_MJ_SYSTEM_CONTROL : F762399E
18:24:14:406 2772 IRP_MJ_DEVICE_CHANGE : 804F355A
18:24:14:406 2772 IRP_MJ_QUERY_QUOTA : 804F355A
18:24:14:406 2772 IRP_MJ_SET_QUOTA : 804F355A
18:24:14:406 2772 C:\WINDOWS\system32\DRIVERS\disk.sys - Verdict: 1
18:24:14:406 2772
18:24:14:406 2772 Driver Name: USBSTOR
18:24:14:406 2772 IRP_MJ_CREATE : F78D1218
18:24:14:406 2772 IRP_MJ_CREATE_NAMED_PIPE : 804F355A
18:24:14:406 2772 IRP_MJ_CLOSE : F78D1218
18:24:14:406 2772 IRP_MJ_READ : F78D123C
18:24:14:406 2772 IRP_MJ_WRITE : F78D123C
18:24:14:406 2772 IRP_MJ_QUERY_INFORMATION : 804F355A
18:24:14:406 2772 IRP_MJ_SET_INFORMATION : 804F355A
18:24:14:406 2772 IRP_MJ_QUERY_EA : 804F355A
18:24:14:406 2772 IRP_MJ_SET_EA : 804F355A
18:24:14:406 2772 IRP_MJ_FLUSH_BUFFERS : 804F355A
18:24:14:406 2772 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F355A
18:24:14:406 2772 IRP_MJ_SET_VOLUME_INFORMATION : 804F355A
18:24:14:406 2772 IRP_MJ_DIRECTORY_CONTROL : 804F355A
18:24:14:406 2772 IRP_MJ_FILE_SYSTEM_CONTROL : 804F355A
18:24:14:406 2772 IRP_MJ_DEVICE_CONTROL : F78D1180
18:24:14:406 2772 IRP_MJ_INTERNAL_DEVICE_CONTROL : F78CC9E6
18:24:14:406 2772 IRP_MJ_SHUTDOWN : 804F355A
18:24:14:406 2772 IRP_MJ_LOCK_CONTROL : 804F355A
18:24:14:406 2772 IRP_MJ_CLEANUP : 804F355A
18:24:14:406 2772 IRP_MJ_CREATE_MAILSLOT : 804F355A
18:24:14:406 2772 IRP_MJ_QUERY_SECURITY : 804F355A
18:24:14:406 2772 IRP_MJ_SET_SECURITY : 804F355A
18:24:14:406 2772 IRP_MJ_POWER : F78D05F0
18:24:14:406 2772 IRP_MJ_SYSTEM_CONTROL : F78CEA6E
18:24:14:406 2772 IRP_MJ_DEVICE_CHANGE : 804F355A
18:24:14:406 2772 IRP_MJ_QUERY_QUOTA : 804F355A
18:24:14:406 2772 IRP_MJ_SET_QUOTA : 804F355A
18:24:14:421 2772 C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS - Verdict: 1
18:24:14:421 2772
18:24:14:421 2772 Driver Name: Disk
18:24:14:421 2772 IRP_MJ_CREATE : F7622BB0
18:24:14:421 2772 IRP_MJ_CREATE_NAMED_PIPE : 804F355A
18:24:14:421 2772 IRP_MJ_CLOSE : F7622BB0
18:24:14:421 2772 IRP_MJ_READ : F761CD1F
18:24:14:421 2772 IRP_MJ_WRITE : F761CD1F
18:24:14:421 2772 IRP_MJ_QUERY_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_SET_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_EA : 804F355A
18:24:14:421 2772 IRP_MJ_SET_EA : 804F355A
18:24:14:421 2772 IRP_MJ_FLUSH_BUFFERS : F761D2E2
18:24:14:421 2772 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_SET_VOLUME_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_DIRECTORY_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_FILE_SYSTEM_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_DEVICE_CONTROL : F761D3BB
18:24:14:421 2772 IRP_MJ_INTERNAL_DEVICE_CONTROL : F7620F28
18:24:14:421 2772 IRP_MJ_SHUTDOWN : F761D2E2
18:24:14:421 2772 IRP_MJ_LOCK_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_CLEANUP : 804F355A
18:24:14:421 2772 IRP_MJ_CREATE_MAILSLOT : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_SECURITY : 804F355A
18:24:14:421 2772 IRP_MJ_SET_SECURITY : 804F355A
18:24:14:421 2772 IRP_MJ_POWER : F761EC82
18:24:14:421 2772 IRP_MJ_SYSTEM_CONTROL : F762399E
18:24:14:421 2772 IRP_MJ_DEVICE_CHANGE : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_QUOTA : 804F355A
18:24:14:421 2772 IRP_MJ_SET_QUOTA : 804F355A
18:24:14:421 2772 C:\WINDOWS\system32\DRIVERS\disk.sys - Verdict: 1
18:24:14:421 2772
18:24:14:421 2772 Driver Name: Disk
18:24:14:421 2772 IRP_MJ_CREATE : F7622BB0
18:24:14:421 2772 IRP_MJ_CREATE_NAMED_PIPE : 804F355A
18:24:14:421 2772 IRP_MJ_CLOSE : F7622BB0
18:24:14:421 2772 IRP_MJ_READ : F761CD1F
18:24:14:421 2772 IRP_MJ_WRITE : F761CD1F
18:24:14:421 2772 IRP_MJ_QUERY_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_SET_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_EA : 804F355A
18:24:14:421 2772 IRP_MJ_SET_EA : 804F355A
18:24:14:421 2772 IRP_MJ_FLUSH_BUFFERS : F761D2E2
18:24:14:421 2772 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_SET_VOLUME_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_DIRECTORY_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_FILE_SYSTEM_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_DEVICE_CONTROL : F761D3BB
18:24:14:421 2772 IRP_MJ_INTERNAL_DEVICE_CONTROL : F7620F28
18:24:14:421 2772 IRP_MJ_SHUTDOWN : F761D2E2
18:24:14:421 2772 IRP_MJ_LOCK_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_CLEANUP : 804F355A
18:24:14:421 2772 IRP_MJ_CREATE_MAILSLOT : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_SECURITY : 804F355A
18:24:14:421 2772 IRP_MJ_SET_SECURITY : 804F355A
18:24:14:421 2772 IRP_MJ_POWER : F761EC82
18:24:14:421 2772 IRP_MJ_SYSTEM_CONTROL : F762399E
18:24:14:421 2772 IRP_MJ_DEVICE_CHANGE : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_QUOTA : 804F355A
18:24:14:421 2772 IRP_MJ_SET_QUOTA : 804F355A
18:24:14:421 2772 C:\WINDOWS\system32\DRIVERS\disk.sys - Verdict: 1
18:24:14:421 2772
18:24:14:421 2772 Driver Name: Disk
18:24:14:421 2772 IRP_MJ_CREATE : F7622BB0
18:24:14:421 2772 IRP_MJ_CREATE_NAMED_PIPE : 804F355A
18:24:14:421 2772 IRP_MJ_CLOSE : F7622BB0
18:24:14:421 2772 IRP_MJ_READ : F761CD1F
18:24:14:421 2772 IRP_MJ_WRITE : F761CD1F
18:24:14:421 2772 IRP_MJ_QUERY_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_SET_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_EA : 804F355A
18:24:14:421 2772 IRP_MJ_SET_EA : 804F355A
18:24:14:421 2772 IRP_MJ_FLUSH_BUFFERS : F761D2E2
18:24:14:421 2772 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_SET_VOLUME_INFORMATION : 804F355A
18:24:14:421 2772 IRP_MJ_DIRECTORY_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_FILE_SYSTEM_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_DEVICE_CONTROL : F761D3BB
18:24:14:421 2772 IRP_MJ_INTERNAL_DEVICE_CONTROL : F7620F28
18:24:14:421 2772 IRP_MJ_SHUTDOWN : F761D2E2
18:24:14:421 2772 IRP_MJ_LOCK_CONTROL : 804F355A
18:24:14:421 2772 IRP_MJ_CLEANUP : 804F355A
18:24:14:421 2772 IRP_MJ_CREATE_MAILSLOT : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_SECURITY : 804F355A
18:24:14:421 2772 IRP_MJ_SET_SECURITY : 804F355A
18:24:14:421 2772 IRP_MJ_POWER : F761EC82
18:24:14:421 2772 IRP_MJ_SYSTEM_CONTROL : F762399E
18:24:14:421 2772 IRP_MJ_DEVICE_CHANGE : 804F355A
18:24:14:421 2772 IRP_MJ_QUERY_QUOTA : 804F355A
18:24:14:421 2772 IRP_MJ_SET_QUOTA : 804F355A
18:24:14:437 2772 C:\WINDOWS\system32\DRIVERS\disk.sys - Verdict: 1
18:24:14:437 2772
18:24:14:437 2772 Driver Name: nvatabus
18:24:14:437 2772 IRP_MJ_CREATE : F745185E
18:24:14:437 2772 IRP_MJ_CREATE_NAMED_PIPE : F745183E
18:24:14:437 2772 IRP_MJ_CLOSE : F745185E
18:24:14:437 2772 IRP_MJ_READ : F745183E
18:24:14:437 2772 IRP_MJ_WRITE : F745183E
18:24:14:437 2772 IRP_MJ_QUERY_INFORMATION : F745183E
18:24:14:437 2772 IRP_MJ_SET_INFORMATION : F745183E
18:24:14:437 2772 IRP_MJ_QUERY_EA : F745183E
18:24:14:437 2772 IRP_MJ_SET_EA : F745183E
18:24:14:437 2772 IRP_MJ_FLUSH_BUFFERS : F745183E
18:24:14:437 2772 IRP_MJ_QUERY_VOLUME_INFORMATION : F745183E
18:24:14:437 2772 IRP_MJ_SET_VOLUME_INFORMATION : F745183E
18:24:14:437 2772 IRP_MJ_DIRECTORY_CONTROL : F745183E
18:24:14:437 2772 IRP_MJ_FILE_SYSTEM_CONTROL : F745183E
18:24:14:437 2772 IRP_MJ_DEVICE_CONTROL : F7451878
18:24:14:437 2772 IRP_MJ_INTERNAL_DEVICE_CONTROL : F7451D20
18:24:14:437 2772 IRP_MJ_SHUTDOWN : F745183E
18:24:14:437 2772 IRP_MJ_LOCK_CONTROL : F745183E
18:24:14:437 2772 IRP_MJ_CLEANUP : F745183E
18:24:14:437 2772 IRP_MJ_CREATE_MAILSLOT : F745183E
18:24:14:437 2772 IRP_MJ_QUERY_SECURITY : F745183E
18:24:14:437 2772 IRP_MJ_SET_SECURITY : F745183E
18:24:14:437 2772 IRP_MJ_POWER : F7451CC0
18:24:14:437 2772 IRP_MJ_SYSTEM_CONTROL : F7451A4C
18:24:14:437 2772 IRP_MJ_DEVICE_CHANGE : F745183E
18:24:14:437 2772 IRP_MJ_QUERY_QUOTA : F745183E
18:24:14:437 2772 IRP_MJ_SET_QUOTA : F745183E
18:24:14:453 2772 C:\WINDOWS\system32\DRIVERS\nvatabus.sys - Verdict: 1
18:24:14:453 2772
18:24:14:453 2772 Driver Name: nvatabus
18:24:14:453 2772 IRP_MJ_CREATE : F745185E
18:24:14:453 2772 IRP_MJ_CREATE_NAMED_PIPE : F745183E
18:24:14:453 2772 IRP_MJ_CLOSE : F745185E
18:24:14:453 2772 IRP_MJ_READ : F745183E
18:24:14:453 2772 IRP_MJ_WRITE : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_INFORMATION : F745183E
18:24:14:453 2772 IRP_MJ_SET_INFORMATION : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_EA : F745183E
18:24:14:453 2772 IRP_MJ_SET_EA : F745183E
18:24:14:453 2772 IRP_MJ_FLUSH_BUFFERS : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_VOLUME_INFORMATION : F745183E
18:24:14:453 2772 IRP_MJ_SET_VOLUME_INFORMATION : F745183E
18:24:14:453 2772 IRP_MJ_DIRECTORY_CONTROL : F745183E
18:24:14:453 2772 IRP_MJ_FILE_SYSTEM_CONTROL : F745183E
18:24:14:453 2772 IRP_MJ_DEVICE_CONTROL : F7451878
18:24:14:453 2772 IRP_MJ_INTERNAL_DEVICE_CONTROL : F7451D20
18:24:14:453 2772 IRP_MJ_SHUTDOWN : F745183E
18:24:14:453 2772 IRP_MJ_LOCK_CONTROL : F745183E
18:24:14:453 2772 IRP_MJ_CLEANUP : F745183E
18:24:14:453 2772 IRP_MJ_CREATE_MAILSLOT : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_SECURITY : F745183E
18:24:14:453 2772 IRP_MJ_SET_SECURITY : F745183E
18:24:14:453 2772 IRP_MJ_POWER : F7451CC0
18:24:14:453 2772 IRP_MJ_SYSTEM_CONTROL : F7451A4C
18:24:14:453 2772 IRP_MJ_DEVICE_CHANGE : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_QUOTA : F745183E
18:24:14:453 2772 IRP_MJ_SET_QUOTA : F745183E
18:24:14:453 2772 C:\WINDOWS\system32\DRIVERS\nvatabus.sys - Verdict: 1
18:24:14:453 2772
18:24:14:453 2772 Driver Name: nvatabus
18:24:14:453 2772 IRP_MJ_CREATE : F745185E
18:24:14:453 2772 IRP_MJ_CREATE_NAMED_PIPE : F745183E
18:24:14:453 2772 IRP_MJ_CLOSE : F745185E
18:24:14:453 2772 IRP_MJ_READ : F745183E
18:24:14:453 2772 IRP_MJ_WRITE : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_INFORMATION : F745183E
18:24:14:453 2772 IRP_MJ_SET_INFORMATION : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_EA : F745183E
18:24:14:453 2772 IRP_MJ_SET_EA : F745183E
18:24:14:453 2772 IRP_MJ_FLUSH_BUFFERS : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_VOLUME_INFORMATION : F745183E
18:24:14:453 2772 IRP_MJ_SET_VOLUME_INFORMATION : F745183E
18:24:14:453 2772 IRP_MJ_DIRECTORY_CONTROL : F745183E
18:24:14:453 2772 IRP_MJ_FILE_SYSTEM_CONTROL : F745183E
18:24:14:453 2772 IRP_MJ_DEVICE_CONTROL : F7451878
18:24:14:453 2772 IRP_MJ_INTERNAL_DEVICE_CONTROL : F7451D20
18:24:14:453 2772 IRP_MJ_SHUTDOWN : F745183E
18:24:14:453 2772 IRP_MJ_LOCK_CONTROL : F745183E
18:24:14:453 2772 IRP_MJ_CLEANUP : F745183E
18:24:14:453 2772 IRP_MJ_CREATE_MAILSLOT : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_SECURITY : F745183E
18:24:14:453 2772 IRP_MJ_SET_SECURITY : F745183E
18:24:14:453 2772 IRP_MJ_POWER : F7451CC0
18:24:14:453 2772 IRP_MJ_SYSTEM_CONTROL : F7451A4C
18:24:14:453 2772 IRP_MJ_DEVICE_CHANGE : F745183E
18:24:14:453 2772 IRP_MJ_QUERY_QUOTA : F745183E
18:24:14:453 2772 IRP_MJ_SET_QUOTA : F745183E
18:24:14:453 2772 C:\WINDOWS\system32\DRIVERS\nvatabus.sys - Verdict: 1
18:24:14:453 2772
18:24:14:453 2772 Completed
18:24:14:453 2772
18:24:14:453 2772 Results:
18:24:14:453 2772 Memory objects infected / cured / cured on reboot: 0 / 0 / 0
18:24:14:453 2772 Registry objects infected / cured / cured on reboot: 0 / 0 / 0
18:24:14:453 2772 File objects infected / cured / cured on reboot: 0 / 0 / 0
18:24:14:453 2772
18:24:14:453 2772 fclose_ex: Trying to close file C:\WINDOWS\system32\config\system
18:24:14:453 2772 fclose_ex: Trying to close file C:\WINDOWS\system32\config\software
18:24:15:484 2772 KLMD(ARK) unloaded successfully

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 16 kvě 2010 17:32
od stell
log je v poriadku,,do prikazoveho riadku zadaj SFC /scannow
tento prikaz skontroluje systemove subory,,ak bude chciet inst.Cd-tak vloz.
dalsi prikaz bude chkdsk /f/r [enter] suhlas restart-skontroluje HD,,potom napis,

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 16 kvě 2010 18:21
od server123
na tom pc jsou XP Home takze tu nemam originalni instalaci XP Profi, musim si ji vzit v praci ...

Re: Prosim o kontrolu logu a popis odstraneni problemu

Napsal: 16 kvě 2010 18:32
od stell
Ok,mas casu dost,ak nepomoze..,,,, tak to vidim na Format.
skontroluj ci neide HD v PIO-mode
Všechny časy jsou v UTC+01:00
Stránka 3 z 3

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz