Nie wiem, czy wszystko zrobiłam jak trzeba Nie znam się w ogóle na komputerach.
ATF Cleaner nie działa w ogóle, jest tylko informacja po zaznaczeniu Current User Temp oraz All Users Temp, że pliki mają 0 bajtów i nic dalej nie mogę zrobić.
Zdebugowałam tak jak miałam to zrobić (lub tak mi sie wydaje, ze tak miało to być). Oto efekt:
Microsoft ® Windows Debugger Version 6.6.0003.5
Copyright © Microsoft Corporation. All rights reserved.
Loading Dump File [C]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 MP (2 procs) Free x86 compatible
Product: WinNt
Kernel base = 0x804d0000 PsLoadedModuleList = 0x8054ae28
Debug session time: Sat Feb 17 20:24:41.108 2007 (GMT+1)
System Uptime: 0 days 12:11:06.675
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
…
Loading User Symbols
Loading unloaded module list
…
*** WARNING: Unable to verify timestamp for ati2cqag.dll
*** ERROR: Module load completed but symbols could not be loaded for ati2cqag.dll
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000EA, {81216898, 8152fa38, 81360ba0, 1}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
Unable to load image watchdog.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for watchdog.sys
*** ERROR: Module load completed but symbols could not be loaded for watchdog.sys
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: watchdog!_DEFERRED_WATCHDOG ***
*** ***
*************************************************************************
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
TargetInfo::ReadBusData is not available in the current debug session
Probably caused by : ati2cqag.dll ( ati2cqag+1e150 )
Followup: MachineOwner
A teraz jeszcze raz załączam nowy log z HijackThis:
Logfile of HijackThis v1.99.1
Scan saved at 11:16:58, on 2007-02-22
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\RENE\Pulpit\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tlen.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE
O4 - HKLM…\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM…\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime
O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe”
O4 - HKLM…\Run: [RemoteControl] “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe”
O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background
O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Device Detector 3.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe