Laptop-STOP: C000021A


(Lammermoor) #1

Wcześniej prosiłam o analizę WinDbg na PC teraz laptop też zwariował :

STOP: C000021a Unknown Hard Error

Unknown Hard Error

Proszę o pomoc bo jest jeszcze dwa miesiące na gwarancji i zastanawiał mnie juz wcześniej fakt,że bateria trzyma tylko niecałe 2 godz. po naładowaniu.Czytałam gdzieś,że powinna cztery.


(McDracullo) #2

Raz czy kilka razy takie coś miało miejsce?

ale bateria się zużywa, dodtakow nalezy ją odpoeiwdnio używac.


(Lammermoor) #3

1-nie był to pierwszy raz,wczoraj podobno też

2-jak używać baterii to wiem,laptop nie ma jeszcze roku,korzystam z niego okazjonalnie, to chyba za wcześnie na jej zużycie.


(McDracullo) #4

No to serwis. Po co grzebać?

Mówisz że korzystasz okazjonalnie. Wies że baterie do "postoju" trzeba odpowiednio przygotowac?


(Lammermoor) #5

Przy sprawdzeniu zgodności systemu jest komunikat,że-nie można odnaleźć określonego pliku D:\i386\WINNTUPG\NETUPGRD.DLL

Aktualnie wpisałam polecenie sfc /scannow i czekam na rezultaty ale mam pytanie:jeśli chciałabym zrobić format czy naprawę systemu,który już był zainstalowany przy kupnie laptopa(WinXP HE),to gdzie znajdę numer seryjny?Mam w sumie 3 płytki(polską wersję systemu+angielską+Application and Driver Recovery DVD).Na żadnej z nich tego numeru nie ma, ani w dokumentacji.

Nie wiem jak to jest w wersji OEM i prosze o odp.


(JNJN) #6

Pewnie w instalce XP lub dokumentach lapa,instalacja systemu z płyty instalacyjnej lub recovery.

Poczytaj instrukcję do lapa.

Poczytaj gwarancję często na baterie jest tylko 6 miesięcy gwarancji.


(Lammermoor) #7

W/w pliku niestety nie ma.Póki co laptop działa normalnie.Chciałam nadpisać system ale musze rozgryźć BIOS bo na razie nie wiem jak ustawić boot z CD-ROM.Są tam zupełnie inne opcje niż te do których jestem przyzwyczajona.

Prosze spojrzeć na screeny i logi.Zainstalowałam Avtive SMART i niby jest ok ale po każdym włączeniu laptopa pokazuje się info,że parametr został zmieniony po czym jak ponownie sprawdza dysk to już jest ok,bez tego komunikatu.

activesmart1hf5.th.jpg

activesmart2km6.th.jpg

Log z Active SMART

21 August 2006 07:12:58 :: INFO

SMART monitoring started - ST94019A [3KW6V25D]


21 August 2006 07:38:25 :: ALERT

[ST94019A] - Parametr SMART się zmienił: 

Parametr : 01 - Raw Read Error Rate

Ostatnio sprawdzona wartość : 53

Nowa wartość : 51


21 August 2006 07:38:25 :: ALERT

[ST94019A] - Parametr SMART się zmienił: 

Parametr : C3 - Unknown attribute

Ostatnio sprawdzona wartość : 53

Nowa wartość : 51


21 August 2006 08:08:34 :: ALERT

[ST94019A] - Parametr SMART się zmienił: 

Parametr : 01 - Raw Read Error Rate

Ostatnio sprawdzona wartość : 51

Nowa wartość : 52


21 August 2006 08:08:35 :: ALERT

[ST94019A] - Parametr SMART się zmienił: 

Parametr : C3 - Unknown attribute

Ostatnio sprawdzona wartość : 51

Nowa wartość : 52


21 August 2006 09:51:22 :: ALERT

[ST94019A] - Parametr SMART się zmienił: 

Parametr : 01 - Raw Read Error Rate

Ostatnio sprawdzona wartość : 52

Nowa wartość : 53


21 August 2006 09:51:22 :: ALERT

[ST94019A] - Parametr SMART się zmienił: 

Parametr : C3 - Unknown attribute

Ostatnio sprawdzona wartość : 52

Nowa wartość : 53


21 August 2006 10:37:00 :: ALERT

[ST94019A] - Parametr SMART się zmienił: 

Parametr : 01 - Raw Read Error Rate

Ostatnio sprawdzona wartość : 53

Nowa wartość : 52


21 August 2006 10:37:00 :: ALERT

[ST94019A] - Parametr SMART się zmienił: 

Parametr : C3 - Unknown attribute

Ostatnio sprawdzona wartość : 53

Nowa wartość : 52

Silent Runners

"Silent Runners.vbs", revision 40, http://www.silentrunners.org/

Operating System: Windows XP SP2

Output limited to non-default values, except where indicated by "{++}"



Startup items buried in registry:

---------------------------------


HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}

"Magentic" = ""C:\PROGRA~1\Magentic\bin\Magentic.exe" /c" [empty string]

"PcSync" = ""C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog" ["Time Information Services Ltd."]

"RSD_HDDThermo" = ""C:\Program Files\HDD Thermometer\HDD Thermometer.exe"" [null data]


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}

"IgfxTray" = "C:\WINDOWS\system32\igfxtray.exe" ["Intel Corporation"]

"HotKeysCmds" = "C:\WINDOWS\system32\hkcmd.exe" ["Intel Corporation"]

"Persistence" = "C:\WINDOWS\system32\igfxpers.exe" ["Intel Corporation"]

"AGRSMMSG" = "AGRSMMSG.exe" ["Agere Systems"]

"SoundMAXPnP" = ""C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe"" ["Analog Devices, Inc."]

"SoundMAX" = ""C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray" ["Analog Devices, Inc."]

"PTHOSTTR" = ""C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE" /Start" ["Hewlett-Packard Development Company, L.P."]

"UpdateManager" = ""C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r" ["Sonic Solutions"]

"dla" = "C:\WINDOWS\system32\dla\tfswctrl.exe" ["Sonic Solutions"]

"SynTPEnh" = ""C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"" ["Synaptics, Inc."]

"hpWirelessAssistant" = ""C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe"" ["Hewlett-Packard Company"]

"eabconfg.cpl" = ""C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" /Start" ["Hewlett-Packard "]

"KAVPersonal50" = ""C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize" ["Kaspersky Lab"]

"Cpqset" = "C:\Program Files\HPQ\Default Settings\cpqset.exe" [null data]

"WatchDog" = "C:\Program Files\InterVideo\DVD Check\DVDCheck.exe" ["InterVideo Inc."]

"Picasa Media Detector" = ""C:\Program Files\Picasa2\PicasaMediaDetector.exe"" ["Google Inc."]

"DataLayer" = ""C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe"" ["Nokia Mobile Phones Ltd."]

"PCSuiteTrayApplication" = ""C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -onlytray" ["Nokia"]


HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]

{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Spybot - Search Destroy\SDHelper.dll" ["Safer Networking Limited"]

{5CA3D70E-1895-11CF-8E15-001234567890}\(Default) = "DriveLetterAccess" [from CLSID]

  - {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\dla\tfswshx.dll" ["Sonic Solutions"]


HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"

  - {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]

"{DEE12703-6333-4D4E-8F34-738C4DCC2E04}" = "RecordNow! SendToExt"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Sonic\RecordNow!\shlext.dll" [null data]

"{5CA3D70E-1895-11CF-8E15-001234567890}" = "DriveLetterAccess"

  - {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\dla\tfswshx.dll" ["Sonic Solutions"]

"{2F603045-309F-11CF-9774-0020AFD0CFF6}" = "Synaptics Control Panel"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Synaptics\SynTP\SynTPCpl.dll" ["Synaptics, Inc."]

"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices"

  - {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]

"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"

  - {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]

"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

"{00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}" = "TuneUp Shredder Shell Context Menu Extension"

  - {CLSID}\InProcServer32\(Default) = ""C:\Program Files\TuneUp Utilities 2004\sdshelex.dll"" ["TuneUp Software GmbH"]

"{e57ce731-33e8-4c51-8354-bb4de9d215d1}" = "Uniwersalne urządzenia Plug and Play"

  - {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\upnpui.dll" [MS]

"{21569614-B795-46b1-85F4-E737A8DC09AD}" = "Shell Search Band"

  - {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS]

"{0561EC90-CE54-4f0c-9C55-E226110A740C}" = "Haali Column Provider"

  - {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\mmfinfo.dll" [null data]

"{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler"

  - {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\OFFICE11\MLSHEXT.DLL" [MS]

"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler"

  - {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\OFFICE11\OLKFSTUB.DLL" [MS]

"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\OFFICE11\msohev.dll" [MS]

"{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A}" = "PhoneBrowser"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll" ["Nokia"]

"{FBFE7864-D495-41f0-B7DC-4BB601CC295E}" = "Contact View"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Nokia\Nokia PC Suite 6\ContactView.dll" ["Nokia"]

"{C0C4375A-5B72-4efe-929D-3B848C3A1E91}" = "Message View"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Nokia\Nokia PC Suite 6\MessageView.dll" ["Nokia"]


HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\

INFECTION WARNING! "{54D9498B-CF93-414F-8984-8CE7FDE0D391}" = "ewido shell guard"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido\security suite\shellhook.dll" ["TODO: "]


HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\

INFECTION WARNING! igfxcui\DLLName = "igfxdev.dll" ["Intel Corporation"]

INFECTION WARNING! WgaLogon\DLLName = "WgaLogon.dll" [MS]

INFECTION WARNING! WRNotifier\DLLName = "WRLogonNTF.dll" [file not found]


HKLM\Software\Classes\PROTOCOLS\Filter\

INFECTION WARNING! text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS]


HKLM\Software\Classes\*\shellex\ContextMenuHandlers\

ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido\security suite\context.dll" ["ewido networks"]

Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\shellex.dll" ["Kaspersky Lab"]

TuneUp Shredder\(Default) = "{00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}"

  - {CLSID}\InProcServer32\(Default) = ""C:\Program Files\TuneUp Utilities 2004\sdshelex.dll"" ["TuneUp Software GmbH"]

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\

ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido\security suite\context.dll" ["ewido networks"]

TuneUp Shredder\(Default) = "{00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}"

  - {CLSID}\InProcServer32\(Default) = ""C:\Program Files\TuneUp Utilities 2004\sdshelex.dll"" ["TuneUp Software GmbH"]

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\

Kaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\shellex.dll" ["Kaspersky Lab"]

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]



Active Desktop and Wallpaper:

-----------------------------


Active Desktop is disabled at this entry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState


HKCU\Control Panel\Desktop\

"Wallpaper" = "C:\Documents and Settings\klijent\Ustawienia lokalne\Dane aplikacji\Magentic\Runtime\Magentic Wallpaper.bmp"



Enabled Screen Saver:

---------------------


HKCU\Control Panel\Desktop\

"SCRNSAVE.EXE" = "C:\WINDOWS\system32\ssstars.scr" [MS]



Startup items in "klijent" "All Users" startup folders:

---------------------------------------------------------


C:\Documents and Settings\klijent\Menu Start\Programy\Autostart

"Active SMART" - shortcut to: "C:\Program Files\Active SMART\ActiveSMART.exe" ["Ariolic Software (www.ariolic.com)"]



Enabled Scheduled Tasks:

------------------------


"1-Click Maintenance" - launches: "C:\Program Files\TuneUp Utilities 2004\SystemOptimizer.exe /schedulestart" ["TuneUp Software GmbH"]



Winsock2 Service Provider DLLs:

-------------------------------


Namespace Service Providers


HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}

000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]

000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

000000000004\LibraryPath = "%SystemRoot%\System32\nwprovau.dll" [MS]

000000000005\LibraryPath = "%SystemRoot%\system32\wshbth.dll" [MS]


Transport Service Providers


HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}

0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:

%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 29

%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05



Toolbars, Explorer Bars, Extensions:

------------------------------------


Toolbars


HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\

"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = "Yahoo! Toolbar" [from CLSID]

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll" ["Yahoo! Inc."]


HKLM\Software\Microsoft\Internet Explorer\Toolbar\

"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = "Yahoo! Toolbar" [from CLSID]

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll" ["Yahoo! Inc."]


Explorer Bars


Dormant Explorer Bars in "View, Explorer Bar" menu


HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\ = "Badanie"

Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]

InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL" [MS]


Extensions (Tools menu items, main toolbar menu buttons)


HKLM\Software\Microsoft\Internet Explorer\Extensions\

{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\

"MenuText" = "Sun Java Console"

"CLSIDExtension" = "{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}"

  - {CLSID}\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll" ["Sun Microsystems, Inc."]


{85D1F590-48F4-11D9-9669-0800200C9A66}\

"MenuText" = "Uninstall BitDefender Online Scanner v8"

"Exec" = "%windir%\bdoscandel.exe" [null data]


{92780B25-18CC-41C8-B9BE-3C9C571A8263}\

"ButtonText" = "Badanie"


{FB5F1910-F110-11D2-BB9E-00C04F795683}\

"ButtonText" = "Messenger"

"MenuText" = "Windows Messenger"

"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]



Miscellaneous IE Hijack Points

------------------------------


C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings")


Added lines (compared with English-language version):

[Strings]: START_PAGE_URL=http://www.hp.com


Missing lines (compared with English-language version):

[Strings]: 1 line


HKLM\Software\Microsoft\Internet Explorer\AboutURLs\

HIJACK WARNING! "TuneUp" = "file://C|/Documents and Settings/All Users/Dane aplikacji/TuneUp Software/Common/base.css" [file not found]



Running Services (Display Name, Service Name, Path {Service DLL}):

------------------------------------------------------------------


BlueSoleil Hid Service, BlueSoleil Hid Service, "C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe" [null data]

Bluetooth Support Service, BthServ, "C:\WINDOWS\system32\svchost.exe -k bthsvcs" {"C:\WINDOWS\System32\bthserv.dll" [MS]}

ewido security suite control, ewido security suite control, "C:\Program Files\ewido\security suite\ewidoctrl.exe" ["ewido networks"]

kavsvc, kavsvc, ""C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"" ["Kaspersky Lab"]

SoundMAX Agent Service, SoundMAX Agent Service (default), "C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe" ["Analog Devices, Inc."]

User Profile Hive Cleanup, UPHClean, "C:\Program Files\UPHClean\uphclean.exe" [MS]

Usługi Simple TCP/IP, SimpTcp, "C:\WINDOWS\system32\tcpsvcs.exe" [MS]

Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS]



----------

+ This report excludes default entries except where indicated.

+ To see *everywhere* the script checks and *everything* it finds,

  launch it from a command prompt or a shortcut with the -all parameter.

+ The search for DESKTOP.INI DLL launch points on all local fixed drives

  took 17 seconds.

+ The search for all Registry CLSIDs containing dormant Explorer Bars

  took 11 seconds.

---------- (total run time: 51 seconds)