Blue screes (BSOD)

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Napisano: 17 Mar 2013 17:55

E ovako,imam problem sa plavim ekranom ili BSOD,javljao se i ranije ali nakon memtest86+ ustanovio sam da je ram problem,kupio sam novi ram,odradio novi sistem i bio sam miran nekih 20 dana,nakon toga opet,radio sam neke testove pa evo rezultata:


Iz programa WhoCrashed

[url=https://www.mycity.rs/must-login.png viewer[/url]
Iz gore navedenog programa


Iz HDDTune-a
------------------------------------------------------------------------------------------
DDS : https://www.mycity.rs/must-login.png

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 10.15.2
Run by G31M at 17:25:40 on 2013-03-17
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.381.1033.18.2037.866 [GMT 1:00]
.
AV: ESET NOD32 Antivirus 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\sppsvc.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\AUDIODG.EXE
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - d:\prolazni\java\bin\ssv.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - d:\prolazni\java\bin\jp2ssv.dll
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
TCP: NameServer = 192.168.1.254
TCP: Interfaces\{F3D2141D-9FBF-46E7-90E0-E0AA7A09A19B} : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{F3D2141D-9FBF-46E7-90E0-E0AA7A09A19B}\6596C61602D456469647562716E60223 : DHCPNameServer = 192.168.1.254
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\25.0.1364.172\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\g31m\appdata\roaming\mozilla\firefox\profiles\u9fbhd4a.default\
FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\google\update\1.3.21.135\npGoogleUpdate3.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_6_602_180.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
FF - plugin: d:\prolazni\java\bin\plugin2\npjp2.dll
.
============= SERVICES / DRIVERS ===============
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2013-3-3 242240]
R2 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2011-8-9 163424]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2011-8-9 974944]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2011-8-4 103112]
R2 TeamViewer8;TeamViewer 8;c:\program files\teamviewer\version8\TeamViewer_Service.exe [2013-3-3 3560800]
R3 athur;Wireless Network Adapter Service;c:\windows\system32\drivers\athur.sys [2013-3-3 1500160]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\drivers\L1C62x86.sys [2009-6-10 50688]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-2-7 161384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2013-3-4 1343400]
.
=============== Created Last 30 ================
.
2013-03-17 16:23:26 -------- d-----w- c:\users\g31m\appdata\local\CrashRpt
2013-03-17 16:23:09 -------- d-----w- c:\program files\SIW 2011 Home Edition
2013-03-17 16:23:00 -------- d-----w- c:\users\g31m\appdata\local\Programs
2013-03-17 15:14:22 -------- d-----w- c:\program files\HD Tune
2013-03-17 14:59:10 -------- d-----w- c:\program files\WhoCrashed
2013-03-15 13:00:58 -------- d-----w- c:\users\g31m\appdata\local\SlimWare Utilities Inc
2013-03-13 12:59:43 -------- d-----w- c:\users\g31m\appdata\local\Facebook
2013-03-07 13:45:29 -------- d-----w- c:\users\g31m\appdata\roaming\TeamViewer
2013-03-04 16:51:03 -------- d-----w- c:\windows\system32\Wat
2013-03-04 16:46:00 -------- d-----w- c:\windows\system32\appmgmt
2013-03-04 15:41:47 -------- d-----w- c:\users\g31m\appdata\roaming\Clickteam
2013-03-04 15:36:09 -------- d-----w- c:\users\g31m\New folder
2013-03-04 13:08:25 -------- d-----w- c:\users\g31m\appdata\local\Macromedia
2013-03-04 13:02:20 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-03-04 13:02:20 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-03-03 21:55:34 -------- d-----w- c:\windows\Panther
2013-03-03 21:55:21 -------- d-sh--w- C:\Boot
2013-03-03 18:35:30 861088 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-03-03 18:35:30 782240 ----a-w- c:\windows\system32\deployJava1.dll
2013-03-03 18:35:21 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-03-03 16:01:31 -------- d-----w- c:\users\g31m\appdata\local\Microsoft Games
2013-03-03 15:52:44 -------- d-----w- c:\users\g31m\appdata\local\WMTools Downloaded Files
2013-03-03 15:38:27 -------- d-----w- C:\programi
2013-03-03 15:35:30 -------- d-----w- c:\program files\TeamViewer
2013-03-03 15:27:31 -------- d-----w- c:\users\g31m\appdata\local\Mozilla
2013-03-03 15:27:25 -------- d-----w- c:\program files\Mozilla Maintenance Service
2013-03-03 15:18:50 -------- d-----r- c:\program files\Skype
2013-03-03 15:14:44 -------- d-----w- c:\users\g31m\appdata\local\Diagnostics
2013-03-03 15:12:30 1500160 ----a-w- c:\windows\system32\drivers\athur.sys
2013-03-03 15:12:30 1500160 ----a-w- c:\windows\system32\athur.sys
2013-03-03 15:12:30 -------- d-----w- c:\windows\Options
2013-03-03 14:22:59 -------- d-----w- c:\program files\Microsoft Synchronization Services
2013-03-03 14:22:38 -------- d-----w- c:\windows\PCHEALTH
2013-03-03 14:22:38 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2013-03-03 14:21:58 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2013-03-03 14:21:34 -------- d-----w- c:\program files\Microsoft Analysis Services
2013-03-03 14:20:58 -------- d-----w- c:\users\g31m\appdata\local\Microsoft Help
2013-03-03 14:10:42 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2013-03-03 14:10:42 -------- d-----w- c:\program files\Spybot - Search & Destroy
2013-03-03 14:07:23 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-03-03 14:07:18 -------- d-----w- c:\users\g31m\appdata\roaming\DAEMON Tools Lite
2013-03-03 14:07:16 -------- d-----w- c:\program files\DAEMON Tools Lite
2013-03-03 14:06:34 -------- d-----w- c:\programdata\DAEMON Tools Lite
2013-03-03 13:53:37 -------- d-----w- c:\windows\pss
2013-03-03 13:50:47 -------- d-----w- c:\users\g31m\appdata\local\Google
2013-03-03 13:50:32 -------- d-----w- c:\users\g31m\appdata\local\Deployment
2013-03-03 13:50:32 -------- d-----w- c:\users\g31m\appdata\local\Apps
2013-03-03 13:50:28 -------- d-----w- c:\program files\ESET
2013-03-03 13:25:26 6954968 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{77144cb4-e61a-492f-b703-8b798be77441}\mpengine.dll
2013-03-03 13:25:25 232336 ------w- c:\windows\system32\MpSigStub.exe
2013-03-03 13:21:45 -------- d-----w- c:\users\g31m\appdata\roaming\uTorrent
2013-03-03 13:19:21 -------- d-sh--w- c:\windows\Installer
2013-03-03 13:10:54 -------- d-----w- c:\windows\system32\wbem\Performance
2013-03-03 13:10:37 -------- d-----w- c:\programdata\TP-LINK
.
==================== Find3M ====================
.
2013-03-04 16:51:21 409088 ----a-w- c:\windows\system32\systemcpl.dll
2013-03-04 16:51:21 13824 ----a-w- c:\windows\system32\slwga.dll
2013-03-04 16:51:18 811520 ----a-w- c:\windows\system32\user32.dll
.
============= FINISH: 17:26:05,21 ===============


Attach : https://www.mycity.rs/must-login.png

Gmer1 : https://www.mycity.rs/must-login.png
Gmer2 : https://www.mycity.rs/must-login.png
Gmer3 : https://www.mycity.rs/must-login.png

Dopuna: 17 Mar 2013 17:58

Evo jos rezultat iz programa MiniToolBox:

https://www.mycity.rs/must-login.png

• 2Ovo se svidja korisnicima: g[h]ost, boki199777
  
  Registruj se da bi pohvalio/la poruku!

Pozdrav i dobrodosao u Ambulantu.


Logovi ne pokazuju tragove aktivnog malware-a. Problem nije prouzrokovan istim.

Ono sto ti ja mogu reci jeste to da dozvolis Java Auto Updater-u da instalira zadnju verziju Jave.

Preporučujem ti da koristiš program MCShield za zaštitu USB memorijskih uređaja.

Program možeš preuzeti sa OVOG linka. Nakon instalacije programa, priključi USB memorijske uređaje, i oni će biti skenirani. Na kraju skeniranja ćeš dobiti izveštaj da je uređaj čist ili obaveštenje o uklonjenom malware-u.


--- --- --- --- --- --- --- --- --- --- --- --- --- --- ---


Postoji mogucnost da je BSOD prouzrokovan "DAEMON Tools Lite" softverom. Testa radi, deinstaliraj ga pa testiraj racunar da vidis kako ce onda da se ponasa. Javi rezultate u svojoj temu u Windows forumu.

Sto se tice nas, to bi bilo to.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Okk,znaci nema nekih vidljivih uzrocnika....ionako ga ne koristim obrisacu ga

• 1Ovo se svidja korisniku: g[h]ost
  
  Registruj se da bi pohvalio/la poruku!

Kada deinstlairas Daemon, preuzmi i pokreni ovaj alat:

Preuzmi alat SPTDinst ( by: DuplexSecure ) sa donjeg linka i sacuvaj ga na Desktop;
http://www.duplexsecure.com/downloads/

> Dvoklikom pokreni alat i klikni na dugme [Uninstall]

Kao sto rekoh, testiraj, pa vidi kako ce racunar da se ponasa. Resavanje BSOD problema nastavi u Windows temi.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

a ja sam ga vec uklonio preko CP ,da sad opet i ovo odradim ili je vec kasno?

• 1Ovo se svidja korisniku: g[h]ost
  
  Registruj se da bi pohvalio/la poruku!

boki199777 ::a ja sam ga vec uklonio preko CP ,da sad opet i ovo odradim ili je vec kasno?

Pa ako si.
Slobodno ti dodatno proveri sa ovim alatom. On uklanja neki ostatak DT-a koji je verovatno vec i uklonjen njegovim uninstallerom ali ne skodi dodatna provera.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

kad sam ga pokrenuo dugme uninstall je bilo zatamljeno (nije se moglo kliknuti na njega)

• 1Ovo se svidja korisniku: g[h]ost
  
  Registruj se da bi pohvalio/la poruku!

boki199777 ::kad sam ga pokrenuo dugme uninstall je bilo zatamljeno (nije se moglo kliknuti na njega)

To znaci da je sve lepo deinstlairano.

• 1Ovo se svidja korisniku: magna86
  
  Registruj se da bi pohvalio/la poruku!

Ok,hvala,ako bude nesto jos,nasavicu u drugom delu ,poz