Szybkość,wyskakujące okienka,niedokładne zapisywanie

Andrzej88 · 17 Czerwiec 2007 07:37

ComboFix 07-06-13.3 - F:\Documents and Settings\FILIP\Pulpit\ComboFix.exe

qrczak13 · 17 Czerwiec 2007 13:52

Ściągnij The Avenger,

wypakuj > uruchom > Input script manually > klikasz w lupkę > w nowo otwartym oknie wklejasz:

Po wklejeniu > Done > klik na zielone światło > ok i będzie restart. Po restarcie wchodzisz gdzie masz The Avenger i wklejasz raport C:\avenger.txt + nowy log combo

Andrzej88 · 17 Czerwiec 2007 15:45

Syntax error in line ---- does not appear to be a valid registry patch. Line will be ignored.

Po zmianie sterowników komuter działał przez kilka godzin nadzwyczaj stabilnie a…teraz znowu działa jak dawniej (czyt. prawie nie dziala).

Wklepać nowego minidumpa?

Złączono Posta : 17.06.2007 (Nie) 19:52

Zrobiłem wszystko poza ostatnią linijką (wywoływała w/w błąd).

Zawartość F:\avanger.txt

qrczak13 · 17 Czerwiec 2007 22:01

Daj nowy log z combofix.

Andrzej88 · 18 Czerwiec 2007 14:11

ComboFix 07-06-13.3 - F:\Documents and Settings\FILIP\Pulpit\ComboFix.exe “FILIP” - 2007-06-18 16:05:08 - Dodatek Service Pack 2 NTFS ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) F:\DOCUME~1\FILIP\DANEAP~1.\macromedia\Flash Player#SharedObjects\ZCT3V99T\www.broadcaster.com F:\DOCUME~1\FILIP\DANEAP~1.\macromedia\Flash Player#SharedObjects\ZCT3V99T\www.broadcaster.com\played_list.sol F:\DOCUME~1\FILIP\DANEAP~1.\macromedia\Flash Player#SharedObjects\ZCT3V99T\www.broadcaster.com\video_queue.sol F:\DOCUME~1\FILIP\DANEAP~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys#www.broadcaster.com F:\DOCUME~1\FILIP\DANEAP~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys#www.broadcaster.com\settings.sol ((((((((((((((((((((((((( Files Created from 2007-05-18 to 2007-06-18 ))))))))))))))))))))))))))))))) 2007-06-17 09:49 49,152 --a------ F:\WINDOWS\system32\ChCfg.exe 2007-06-17 09:49 147,456 --a------ F:\WINDOWS\system32\RtlCPAPI.dll 2007-06-17 09:49 10,528,768 --a------ F:\WINDOWS\system32\RTLCPL.exe 2007-06-17 09:49 2007-06-16 14:07 49,152 --a------ F:\WINDOWS\nircmd.exe 2007-06-16 09:33 2007-06-15 21:49 2007-06-15 21:49 2007-06-15 21:15 2007-06-14 18:14 2007-06-13 19:41 2007-06-13 18:46 2007-06-13 18:46 2007-06-08 07:47 2007-06-08 07:46 2007-06-06 08:14 2007-06-04 12:11 2007-05-30 21:23 2007-05-27 23:01 2007-05-25 21:36 2007-05-20 16:31 2007-05-18 22:52 135,168 --a------ F:\WINDOWS\system32\DSKernel2.dll 2007-05-18 22:52 1,936,528 --a------ F:\WINDOWS\system32\ltmm15.dll (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-06-16 12:17:31 74,230 ----a-w F:\WINDOWS\system32\perfc015.dat 2007-06-16 12:17:31 448,004 ----a-w F:\WINDOWS\system32\perfh015.dat 2007-06-16 07:33:11 2 ----a-w F:\WINDOWS\system32\wtssvtr32.exe 2007-06-15 19:57:48 -------- d-----w F:\Program Files\Testy gimnazjalne 2006 2007-06-15 19:57:38 -------- d-----w F:\Program Files\ScannerU 2007-06-15 19:57:38 -------- d-----w F:\Program Files\OLYMPUS CAMEDIASuite 2007-06-15 19:57:28 -------- d-----w F:\Program Files\UnrealTournament 2007-06-15 19:57:27 -------- d-----w F:\Program Files\G-PEN SERIES 2007-06-15 19:23:47 -------- d-----w F:\Program Files\Debugging Tools for Windows 2007-06-15 19:15:03 737,280 ----a-w F:\WINDOWS\iun6002.exe 2007-06-10 07:31:30 -------- d-----w F:\Program Files\Warcraft III 2007-06-06 14:44:35 -------- d-----w F:\Program Files\Winamp 2007-06-06 06:14:41 -------- d–h--w F:\Program Files\InstallShield Installation Information 2007-05-30 19:23:06 -------- d-----w F:\Program Files??crosoft 2007-05-27 20:57:45 -------- d-----w F:\Program Files\Common Files\LightScribe 2007-05-25 17:50:46 -------- d-----w F:\DOCUME~1\FILIP\DANEAP~1\Skype 2007-05-20 18:51:40 -------- d-----w F:\Program Files\Replay Converter 2007-05-14 17:58:16 1,386,496 ----a-w F:\WINDOWS\system32\msvbvm60.dll 2007-05-12 20:55:15 -------- d-----w F:\Program Files\AliveMedia 2007-05-12 20:41:01 -------- d-----w F:\Program Files\IrfanView 2007-05-12 20:37:48 -------- d-----w F:\Program Files\XviD 2007-05-11 20:26:34 -------- d-----w F:\Program Files\GIMP-2.0 2007-05-11 20:24:58 -------- d-----w F:\Program Files\Pakiet firmy InsERT 2007-05-10 17:49:23 -------- d-----w F:\Program Files\Rainbow Technologies 2007-05-06 06:54:45 -------- d-----w F:\Program Files\SpeedSim 2007-05-06 06:54:07 -------- d-----w F:\Program Files\MoorHunt 2007-05-06 06:53:13 -------- d-----w F:\Program Files\Keeper 2007-05-04 16:04:09 -------- d-----w F:\Program Files\Ager Web Edytor 2007-05-02 13:32:04 -------- d-----w F:\Program Files\Bonjour 2007-04-25 14:20:48 4,030,144 ----a-w F:\WINDOWS\system32\drivers\alcxwdm.sys 2007-04-19 16:44:13 -------- d-----w F:\DOCUME~1\FILIP\DANEAP~1\SolidWorks 2007-04-16 20:47:36 33,624 ----a-w F:\WINDOWS\system32\wups.dll 2007-04-16 20:45:54 1,710,936 ----a-w F:\WINDOWS\system32\wuaueng.dll 2007-04-16 20:45:48 549,720 ----a-w F:\WINDOWS\system32\wuapi.dll 2007-04-16 20:45:42 325,976 ----a-w F:\WINDOWS\system32\wucltui.dll 2007-04-16 20:45:36 203,096 ----a-w F:\WINDOWS\system32\wuweb.dll 2007-04-16 20:45:28 92,504 ----a-w F:\WINDOWS\system32\cdm.dll 2007-04-16 20:45:20 53,080 ----a-w F:\WINDOWS\system32\wuauclt.exe 2007-04-16 20:45:20 43,352 ----a-w F:\WINDOWS\system32\wups2.dll 2007-04-16 13:28:22 577,536 ----a-w F:\WINDOWS\soundman.exe 2007-03-09 07:12:32 27,648 --sha-w F:\WINDOWS\system32\AVSredirect.dll ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 14:22] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “SunJavaUpdateSched”=“F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe” [2005-11-10 14:03] “SoundMan”=“SOUNDMAN.EXE” [2007-04-16 15:28 F:\WINDOWS\soundman.exe] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “Komunikator”=“D:\Tlen.pl\tlen.exe” [2007-02-12 11:01] “Pop-Up-Blocker”=“F:\Program Files\Tweak-XP Pro 4\popup.exe” [2006-06-19 04:08] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] “SynchronousMachineGroupPolicy”=0 (0x0) “SynchronousUserGroupPolicy”=0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Action Manager 32.lnk] backup=F:\WINDOWS\pss\Action Manager 32.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^PIOTR^Menu Start^Programy^Autostart^Adobe Gamma.lnk] backup=F:\WINDOWS\pss\Adobe Gamma.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVKTray] “F:\Program Files\G DATA\AntiVirus 2007\AVKTray\AVKTray.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easy-PrintToolBox] F:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall] “F:\Program Files\FreeCall.com\FreeCall\FreeCall.exe” -nosplash -minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility] F:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHmon03] F:\WINDOWS\system32\hphmon03.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “F:\Program Files\Messenger\msmsgs.exe” /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] “F:\Program Files\CyberLink\PowerDVD\PDVDServ.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] “F:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] SOUNDMAN.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] F:\Program Files\Valve\Steam\Steam.exe -silent [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Twoje TVN24] “F:\Program Files\Pasek TVN24\PasekTVN24.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] “UPS”=3 (0x3) “Themes”=2 (0x2) “SysmonLog”=3 (0x3) “InCDsrvR”=2 (0x2) “InCDsrv”=2 (0x2) “AVKWCtl”=2 (0x2) “AVKService”=2 (0x2) “AVKProxy”=2 (0x2) “TapiSrv”=3 (0x3) “NProtectService”=2 (0x2) “Macromedia Licensing Service”=3 (0x3) “LightScribeService”=2 (0x2) “ATI Smart”=2 (0x2) “Ati HotKey Poller”=2 (0x2) “Alerter”=2 (0x2) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H] AutoRun\command- H:\AutoRun.exe Contents of the ‘Scheduled Tasks’ folder 2007-06-18 14:06:00 F:\WINDOWS\tasks\Symantec NetDetect.job ************************************************************************** catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-06-18 16:07:16 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-06-18 16:07:57 F:\ComboFix-quarantined-files.txt … 2007-06-18 16:07 F:\ComboFix2.txt … 2007-06-17 09:33 F:\ComboFix3.txt … 2007-06-16 14:14 — E O F —

Gutek · 18 Czerwiec 2007 15:58

Poczytaj Usuwanie PurityScan

Andrzej88 · 20 Czerwiec 2007 18:28

O ile czeogś nie skopałem to tu ( http://img125.imageshack.us/img125/3707 … owatv8.png ) nie ma nic z ??? …

Gutek · 20 Czerwiec 2007 21:59

Daj log z Combo

Andrzej88 · 10 Lipiec 2007 09:57

ComboFix 07-06-13.3 - F:\Documents and Settings\FILIP\Pulpit\ComboFix.exe

Gutek · 10 Lipiec 2007 10:03

nadal linnki wyżej

Pobierz program SDFix

Andrzej88 · 15 Lipiec 2007 14:20

Report.txt:

SDFix: Version 1.91 Run by FILIP on 2007-07-15 at 16:08 Microsoft Windows XP [Wersja 5.1.2600] Running From: F:\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Restoring Missing Security Center Service Restoring Missing SharedAccess Service Rebooting… Normal Mode: Checking Files: No Trojan Files Found Removing Temp Files… ADS Check: F:\WINDOWS No streams found. F:\WINDOWS\system32 No streams found. F:\WINDOWS\system32\svchost.exe No streams found. F:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] “%windir%\system32\sessmgr.exe”="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" “D:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe”=“D:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe:*:Disabled:Kerio Personal Firewall 4 - GUI” [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] “%windir%\system32\sessmgr.exe”="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" Remaining Files: --------------- Files with Hidden Attributes: F:\Program Files\Replay Converter\atrc3260.dll F:\Program Files\Replay Converter\cygwin1.dll F:\Program Files\Replay Converter\cygz.dll F:\Program Files\Replay Converter\drv13260.dll F:\Program Files\Replay Converter\drv23260.dll F:\Program Files\Replay Converter\drv33260.dll F:\Program Files\Replay Converter\drv43260.dll F:\Program Files\Replay Converter\dspr3260.dll F:\Program Files\Replay Converter\ivvideo.dll F:\Program Files\Replay Converter\qtmlClient.dll F:\Program Files\Replay Converter\raac.dll F:\Program Files\Replay Converter\rnco3260.dll F:\Program Files\Replay Converter\rnlt3260.dll F:\Program Files\Replay Converter\rv103260.dll F:\Program Files\Replay Converter\rv203260.dll F:\Program Files\Replay Converter\rv303260.dll F:\Program Files\Replay Converter\rv403260.dll F:\WINDOWS\system32\AVSredirect.dll F:\Documents and Settings\ASIA\Ustawienia lokalne\Temp\ZTRB.tmp F:\Documents and Settings\FILIP\Pulpit~WRL0003.tmp F:\Documents and Settings\FILIP\Pulpit~WRL2487.tmp F:\Documents and Settings\FILIP\Pulpit~WRL3690.tmp F:\WINDOWS\system32\RO18BF.tmp.LOG F:\WINDOWS\system32\RO18C4.tmp.LOG F:\WINDOWS\system32\RO18C7.tmp.LOG F:\WINDOWS\system32\RO18CC.tmp.LOG F:\WINDOWS\system32\RO18CF.tmp.LOG F:\WINDOWS\system32\RO18D4.tmp.LOG F:\WINDOWS\system32\RO18D7.tmp.LOG F:\WINDOWS\system32\RO18DC.tmp.LOG F:\WINDOWS\system32\RO18DF.tmp.LOG F:\WINDOWS\system32\RO18E4.tmp.LOG F:\WINDOWS\system32\RO18E7.tmp.LOG F:\WINDOWS\system32\RO18EC.tmp.LOG F:\WINDOWS\system32\config\default.tmp.LOG F:\WINDOWS\system32\config\SAM.tmp.LOG F:\WINDOWS\system32\config\SECURITY.tmp.LOG F:\WINDOWS\system32\config\software.tmp.LOG F:\WINDOWS\system32\config\system.tmp.LOG Finished

Plik z avangera:

Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\vfhaemtp ******************* Script file located at: ??\F:\Documents and Settings\kccfcarr.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at F:\Avenger ******************* Beginning to process script file: Could not open folder F:\DOCUME~1\PIOTR\DANEAP~1??sembly for deletion Deletion of folder F:\DOCUME~1\PIOTR\DANEAP~1??sembly failed! Could not process line: F:\DOCUME~1\PIOTR\DANEAP~1??sembly Status: 0xc0000033 Could not open folder F:\Program Files??crosoft for deletion Deletion of folder F:\Program Files??crosoft failed! Could not process line: F:\Program Files??crosoft Status: 0xc0000033 Completed script processing. ******************* Finished! Terminate.

Joan · 16 Lipiec 2007 12:11

spróbuj wywalić ten folder ręcznie w awaryjnym

Andrzej88 · 8 Sierpień 2007 15:59

Udało się, komp chodził w miarę stabilnie.

Przepraszam, że nie podziękowałem - nie było mnie parę tygodni w kraju.

W każdym razie wielkie dzięki…

Mam jeszcze jeden problem: mianowicie kupiłem grę (kultowego starocia) i… niebieski ekranik co 3 min grania…

No i bardzo mi zależy na tej gierce, eh. Także się zapytam: co robić?

Tutaj jest minidump, jeśli to ma znaczenie:

Microsoft ® Windows Debugger Version 6.7.0005.0 Copyright © Microsoft Corporation. All rights reserved. Loading Dump File [F] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: *** Invalid *** **************************************************************************** * Symbol loading may be unreliable without a symbol search path. * * Use .symfix to have the debugger choose a symbol path. * * After setting your symbol path, use .reload to refresh symbol locations. * **************************************************************************** Executable search path is: ********************************************************************* * Symbols can not be loaded because symbol path is not initialized. * * * * The Symbol Path can be set by: * * using the _NT_SYMBOL_PATH environment variable. * * using the -y argument when starting the debugger. * * using .sympath and .sympath+ * ********************************************************************* Unable to load image \WINDOWS\system32\ntoskrnl.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntoskrnl.exe *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible Product: WinNt Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420 Debug session time: Wed Aug 8 15:32:44.531 2007 (GMT+2) System Uptime: 0 days 1:07:30.078 ********************************************************************* * Symbols can not be loaded because symbol path is not initialized. * * * * The Symbol Path can be set by: * * using the _NT_SYMBOL_PATH environment variable. * * using the -y argument when starting the debugger. * * using .sympath and .sympath+ * ********************************************************************* Unable to load image \WINDOWS\system32\ntoskrnl.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntoskrnl.exe *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe Loading Kernel Symbols … Loading User Symbols Loading unloaded module list … ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck A, {5008459b, ff, 0, 804db65c} *** WARNING: Unable to verify timestamp for mssmbios.sys *** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys ANALYSIS: Kernel with unknown size. Will force reload symbols with known size. ANALYSIS: Force reload command: .reload /f ntoskrnl.exe=FFFFFFFF804D7000,213F80,42250FF9 ***** Kernel symbols are WRONG. Please fix symbols to do analysis. Probably caused by : ntoskrnl.exe ( nt+465c ) Followup: MachineOwner ---------

Złączono Posta : 08.08.2007 (Sro) 20:14

Się okazuje, że mam ten sam problem - blue screen lub reset- nie tytlko z tą gierką ale i z Photoshopem, Flashem i kilkoma innymi aplikacjami.

qrczak13 · 9 Sierpień 2007 20:52

Innych plików minidmp nie ma?

Zobacz:

start > uruchom > eventvwr > zakładka system > wpisy na czerwono z czasu restartu > dwuklik > to co jest w opisie zaznacz > ctrl + c i do posta wklej ctrl + v. Tego co najwięcej.

Przeinstaluj stery do karty graficznej.