VIRY.CZ

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  VirusTotal: C:\Windows\SysWOW64\srvany.exe
  File: C:\Windows\SysWOW64\srvany.exe
  File: C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
  FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
  FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
  2018-05-22 22:57 - 2018-05-22 22:57 - 000000000 ____D C:\rsit
  2018-05-22 22:57 - 2018-05-22 22:57 - 000000000 ____D C:\Program Files\trend micro
  2018-05-22 22:28 - 2018-05-22 22:28 - 001222144 _____ C:\Users\Kuratko\Desktop\RSITx64.exe
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Fix result of Farbar Recovery Scan Tool (x64) Version: 06.06.2018 01
Ran by Kuratko (18-06-2018 19:07:12) Run:1
Running from C:\Users\Kuratko\Desktop
Loaded Profiles: Kuratko & (Available Profiles: Kuratko & Hasbend & Guest)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

VirusTotal: C:\Windows\SysWOW64\srvany.exe
File: C:\Windows\SysWOW64\srvany.exe
File: C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
2018-05-22 22:57 - 2018-05-22 22:57 - 000000000 ____D C:\rsit
2018-05-22 22:57 - 2018-05-22 22:57 - 000000000 ____D C:\Program Files\trend micro
2018-05-22 22:28 - 2018-05-22 22:28 - 001222144 _____ C:\Users\Kuratko\Desktop\RSITx64.exe

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Error: (0) Failed to create a restore point.
VirusTotal: C:\Windows\SysWOW64\srvany.exe => https://www.virustotal.com/file/abd4afd ... 529312387/

========================= File: C:\Windows\SysWOW64\srvany.exe ========================

C:\Windows\SysWOW64\srvany.exe
MD5: 4635935FC972C582632BF45C26BFCB0E
Creation and modification date: 2014-03-26 16:45 - 2003-04-18 19:06
Size: 000008192
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:
VirusTotal: https://www.virustotal.com/file/abd4afd ... 529312387/

====== End of File: ======


========================= File: C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe ========================

C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
MD5: 865252239FBEAE8F8050A42576E3A2CB
Creation and modification date: 2014-03-26 16:39 - 2011-01-18 09:50
Size: 005839872
Attributes: ----A
Company Name: Dell Inc.
Internal Name: bcmwltry.exe
Original Name: bcmwltry.exe
Product: DW WLAN Card Wireless Network Controller
Description: DW WLAN Card Wireless Network Controller
File Version: 5.100.235.13
Product Version: 5.100.235.13
Copyright: 1998-2010, Dell Inc. All Rights Reserved.
VirusTotal: https://www.virustotal.com/file/986cc8c ... 520360534/

====== End of File: ======

"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
C:\rsit => moved successfully
C:\Program Files\trend micro => moved successfully
C:\Users\Kuratko\Desktop\RSITx64.exe => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 12582912 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 3149032 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 41018514 B
Edge => 0 B
Chrome => 0 B
Firefox => 381231770 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 214 B
NetworkService => 52342868 B
Kuratko => 3344237 B
Hasbend => 25369 B
Guest => 0 B

RecycleBin => 252314 B
EmptyTemp: => 471.1 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 19:15:02 ====

Vyzera to ciste. Ak PC stale seka, skontrolujeme disk:

Stiahni CrystalDiskInfo: https://crystalmark.info/redirect.php?p ... alDiskInfo

• Rozbal cely archiv na plochu a spusti cez DiskInfo64.exe
• Hore klikni na Upravy (Edit) -> Kopirovat (Copy)
• Skopiruje sa log, jeho obsah vloz (Ctrl+V) do dalsej odpovedi

----------------------------------------------------------------------------
CrystalDiskInfo 7.6.1 (C) 2008-2018 hiyohiyo
Crystal Dew World : https://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Premium SP1 [6.1 Build 7601] (x64)
Date : 2018/06/22 21:47:28

-- Controller Map ----------------------------------------------------------
- ATA Channel 5 (5) [ATA]
+ Intel(R) 6 Series/C200 Series Chipset Family 6 Port SATA AHCI Controller - 1C03 [ATA]
+ ATA Channel 0 (0)
- WDC WD2500BEKT-75PVMT0 ATA Device
+ ATA Channel 1 (1)
- TEAC DVD-ROM DV-28SW ATA Device
- ATA Channel 3 (3)
- ATA Channel 4 (4)
- ATA Channel 5 (5)
+ O2Micro Integrated MMC/SD controller [SCSI]
- O2Micro SD SCSI Disk Device
- O2Micro Integrated MS/MSPRO controller [SCSI]
+ MagicISO SCSI Host Controller [SCSI]
- MagicISO Virtual DVD-ROM0000

-- Disk List ---------------------------------------------------------------
(1) WDC WD2500BEKT-75PVMT0 : 250,0 GB [0/0/0, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD2500BEKT-75PVMT0
----------------------------------------------------------------------------
Model : WDC WD2500BEKT-75PVMT0
Firmware : 01.01A01
Serial Number : WD-WX81A41P5384
Disk Size : 250,0 GB (8,4/137,4/250,0/250,0)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 488397168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : ---- | SATA/300
Power On Hours : 13572 hod.
Power On Count : 7153 krát
Host Reads : 22055 GB
Host Writes : 20822 GB
Temperature : 32 C (89 F)
Health Status : Pozor
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0080h [ON]
AAM Level : ----
Drive Letter : C:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 199 199 _51 0000000086D7 Počet chyb čtení
03 165 157 _21 0000000002C4 Čas na roztočení ploten
04 _93 _93 __0 000000001BF7 Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 __0 000000000000 Počet chybných hledání
09 _82 _82 __0 000000003504 Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C _93 _93 __0 000000001BF1 Počet cyklů zapnutí zařízení
BF __1 __1 __0 000000001448 Počet udalostí zaznamenaných otřesovým senzorem
C0 200 200 __0 0000000000B0 Počet vypnutí disku
C1 177 177 __0 0000000118D6 Počet cyklů načítání/vymazání
C2 111 _82 __0 000000000020 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000001 Počet podezřelých sektorů
C6 100 253 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů
F0 _84 _84 __0 000000002F35 Čas nastavování hlaviček - v hodinách
F1 200 200 __0 000A2AC6D40A Total Host Writes
F2 200 200 __0 000AC4E16AD7 Total Host Reads
FE __1 __1 __0 00000000019D Ochrana proti pádu

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5758 3831 4134 3150 3533 3834
020: 0000 8000 0032 3031 2E30 3141 3031 5744 4320 5744
030: 3235 3030 4245 4B54 2D37 3550 564D 5430 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 1F06 0000 004C 0040
080: 01FE 0000 746B 7D09 6163 7469 BC09 6163 207F 001D
090: 001D 0080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 5970 1D1C 0000 0000 0000 0000 0000 0000 5001 4EE6
110: 5686 292B 0000 0000 0000 0000 0000 0000 0000 4018
120: 4018 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 16FE 013F 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 1028 0000 C000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 7035 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 101E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 59A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C7 C7 D7 86 00 00 00 00 00 03 27
010: 00 A5 9D C4 02 00 00 00 00 00 04 32 00 5D 5D F7
020: 1B 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 52 52 04 35 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 5D 5D F1 1B 00 00 00 00 00 BF 32
070: 00 01 01 48 14 00 00 00 00 00 C0 32 00 C8 C8 B0
080: 00 00 00 00 00 00 C1 32 00 B1 B1 D6 18 01 00 00
090: 00 00 C2 22 00 6F 52 20 00 00 00 00 00 00 C4 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C5 32 00 C8 C8 01
0B0: 00 00 00 00 00 00 C6 30 00 64 FD 00 00 00 00 00
0C0: 00 00 C7 32 00 C8 C8 00 00 00 00 00 00 00 C8 08
0D0: 00 C8 C8 00 00 00 00 00 00 00 F0 32 00 54 54 35
0E0: 2F 00 00 00 00 00 F1 32 00 C8 C8 0A D4 C6 2A 0A
0F0: 00 00 F2 32 00 C8 C8 D7 6A E1 C4 0A 00 00 FE 32
100: 00 01 01 9D 01 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 44 16 01 7B
170: 03 00 01 00 02 3B 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 02 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CB

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C7 C8 00 00 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 C8 C8 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 BF 00
070: 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00
080: 00 00 00 00 00 00 C1 00 00 00 00 00 00 00 00 00
090: 00 00 C2 00 00 00 00 00 00 00 00 00 00 00 C4 00
0A0: 00 00 00 00 00 00 00 00 00 00 C5 00 00 00 00 00
0B0: 00 00 00 00 00 00 C6 00 00 00 00 00 00 00 00 00
0C0: 00 00 C7 00 00 00 00 00 00 00 00 00 00 00 C8 00
0D0: C8 C8 00 00 00 00 00 00 00 00 F0 00 00 00 00 00
0E0: 00 00 00 00 00 00 F1 00 00 00 00 00 00 00 00 00
0F0: 00 00 F2 00 00 00 00 00 00 00 00 00 00 00 FE 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7E

Spusti kontrolu disku:

• Otvor prikazovy riadok ako spravca a napis prikaz:

  Kód: Vybrat vše

  chkdsk c: /f /r

• Napis "y" a stlac enter, cim sa naplanuje kontrola na najblizsi restart PC
• Restartuj PC a pockaj na dokoncenie chkdsk kontroly

Stlac klavesy Win+R, napis "eventvwr.exe" (bez uvodzoviek) a stlac enter

• Vlavo klikni na Protokoly systemu Windows (Windows Logs) a potom na System
• Vpravo klikni na Ulozit vsechny udalosti jako (Save All Events As)
• Napis nazov suboru "system", typ suboru nechaj ako .evtx a uloz na plochu
• Vlavo klikni na Aplikace (Application), vpravo opat klikni na Ulozit vsechny udalosti jako (Save All Events As)
• Napis nazov suboru "application", typ suboru nechaj ako .evtx a uloz na plochu
• Tieto 2 subory nahraj zabal do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku

Vse provedeno, soubor prilis velky, tk posilam pres odkaz:

https://uloz.to/!hSOKjVG5dK8L/eventvwr-24-06-2018-zip

Po konzultaci s kolegom to podla logov z eventvieweru vyzera skor na problem s harddiskom alebo SATA kablom. Preventivne zatial odporucam zalohovat data z HDD.

Urob test disku cez diangosticky nastroj Western Digital: http://downloads.wdc.com/windlg/WinDlg_v1_31.zip

• Nainstaluj (pri instalacii zaskrtni Create desktop shortcut) a restartuj PC
• Nespustaj ziadne programy, a ak su nejake spustene v pozadi, ukonci ich
• Spusti nainstalovany nastroj Data Lifeguard Diagnostic
• Dvakrat klikni na HDD, nasledne vyber Extended test
• Pockaj na dokoncenie (moze trvat dlhsi cas), nasledne klikni na Close
• Opat dvojklik na HDD, potom klikni na "View test results"
• Oznac vsetko stlacenim Ctrl+A a skopirovany text vloz sem do dalsej odpovede