błąd systemu

[AliG]

C:\WINDOWS\closewnd.exe


W drugim nic nie znalazło.

[Okocza]

otwórz notatnik wklej w nim to:

Kod: Zaznacz wszystko

File::
C:\WINDOWS\closewnd.exe


Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . odczekaj az wygeneruje sie nowy log i go daj na forum

[AliG]

To chyba to, dwa razy w trakcie tego mi się wyłączył ( tak jak pisałam w pierwszym poście)

ComboFix 08-04-26.5 - Ala 2008-04-27 21:10:57.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.157 [GMT 2:00]
Running from: C:\Documents and Settings\Ala\Pulpit\ComboFix.exe
Command switches used :: C:\Documents and Settings\Ala\Moje dokumenty\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
C:\WINDOWS\closewnd.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Ala\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows Media\10.0\WMSDKNSD.XML
.
---- Previous Run -------
.
C:\WINDOWS\closewnd.exe

.
((((((((((((((((((((((((( Files Created from 2008-03-27 to 2008-04-27 )))))))))))))))))))))))))))))))
.

2008-04-27 19:38 . 2008-04-27 19:38 <DIR> d-------- C:\WINDOWS\ERUNT
2008-04-27 19:35 . 2008-04-27 19:53 <DIR> d-------- C:\SDFix
2008-04-27 19:07 . 2008-04-27 19:07 1,024 --ah----- C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG
2008-04-27 18:53 . 2006-10-11 23:44 55,296 --a------ C:\Seconfig XP.exe
2008-04-24 22:34 . 2008-04-24 22:36 <DIR> d-------- C:\Documents and Settings\Ala\Dane aplikacji\Hide IP NG
2008-04-24 22:33 . 2008-04-24 22:34 <DIR> d-------- C:\Program Files\Hide IP NG
2008-04-19 15:58 . 2008-04-27 20:27 <DIR> d-------- C:\Program Files\ABC Amber PowerPoint Converter
2008-04-19 15:44 . 2008-04-19 15:44 <DIR> d-------- C:\Program Files\Fox Magic
2008-04-19 15:44 . 2005-06-12 17:29 77,824 --a------ C:\WINDOWS\system32\fmcodec.DLL
2008-04-19 15:19 . 2008-04-19 15:19 <DIR> d-------- C:\Program Files\Wondershare
2008-04-19 15:16 . 2008-04-19 15:43 <DIR> d-------- C:\Program Files\Wisdom-soft AutoScreenRecorder Free
2008-04-19 14:04 . 2008-04-19 14:04 <DIR> d-------- C:\Documents and Settings\Ala\Dane aplikacji\VisiPPT
2008-04-19 14:04 . 2008-04-19 14:04 <DIR> d-------- C:\Documents and Settings\Ala\Dane aplikacji\GeoVid
2008-04-19 14:03 . 2008-04-19 14:03 <DIR> d-------- C:\Program Files\VisiFly
2008-04-19 14:03 . 2008-04-19 14:03 <DIR> d-------- C:\Program Files\Common Files\GeoVid
2008-04-19 14:03 . 2008-04-19 14:03 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\GeoVid
2008-04-19 14:03 . 2004-08-18 15:00 1,712,128 --a------ C:\WINDOWS\system32\gdiplus.dll
2008-04-19 14:03 . 2003-03-19 06:05 89,088 --a------ C:\WINDOWS\system32\atl71.dll
2008-04-19 14:03 . 2007-06-28 18:55 77,824 --a------ C:\WINDOWS\system32\xvid.ax
2008-04-19 14:03 . 2005-06-07 15:11 60,416 --a------ C:\WINDOWS\system32\dsetup.dll
2008-04-19 13:33 . 2008-04-19 13:33 <DIR> d-------- C:\Program Files\OpenLibraries
2008-04-19 13:33 . 2008-04-19 13:33 <DIR> d-------- C:\Program Files\mlt
2008-04-19 13:33 . 2008-04-19 13:34 <DIR> d-------- C:\Program Files\Jahshaka
2008-04-19 13:33 . 2008-04-19 13:33 <DIR> d-------- C:\Program Files\gtk2
2008-04-19 13:33 . 2008-04-19 13:33 262,144 --a------ C:\WINDOWS\system32\wrap_oal.dll
2008-04-19 13:33 . 2008-04-19 13:33 86,016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2008-04-18 08:33 . 2008-04-18 08:33 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Office Genuine Advantage
2008-04-17 22:36 . 2005-07-29 17:12 2,977,792 --------- C:\WINDOWS\UNNMP.exe
2008-04-17 22:36 . 2005-09-16 14:10 49,857 --------- C:\WINDOWS\UNNMP.cfg
2008-04-17 22:33 . 2008-04-17 22:33 <DIR> d-------- C:\Program Files\Common Files\Nero
2008-04-17 22:33 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-04-17 22:32 . 2005-07-12 19:06 2,973,696 --------- C:\WINDOWS\UNNeroVision.exe
2008-04-17 22:32 . 2005-09-16 14:10 154,568 --------- C:\WINDOWS\UNNeroVision.cfg
2008-04-17 22:31 . 2008-04-17 22:35 <DIR> d-------- C:\Program Files\Ahead
2008-04-17 22:31 . 2004-07-26 17:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2008-04-17 22:31 . 2004-07-26 17:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2008-04-17 22:31 . 2004-07-26 17:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2008-04-17 22:31 . 2004-07-09 09:43 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll
2008-04-17 22:31 . 2004-07-26 17:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2008-04-17 22:31 . 2000-06-26 11:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2008-04-17 22:31 . 2001-06-26 08:15 38,912 --------- C:\WINDOWS\system32\picn20.dll
2008-04-16 22:11 . 2008-04-16 22:11 <DIR> d-------- C:\Documents and Settings\Ala\Dane aplikacji\vlc
2008-04-16 22:10 . 2008-04-16 22:10 <DIR> d-------- C:\Program Files\VideoLAN
2008-04-16 17:13 . 2006-10-26 19:56 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
2008-04-16 17:09 . 2008-04-16 17:09 <DIR> d-------- C:\Program Files\MSBuild
2008-04-16 17:09 . 2008-04-16 17:09 <DIR> d-------- C:\Program Files\Microsoft Works
2008-04-16 17:08 . 2008-04-16 17:08 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-04-16 17:04 . 2008-04-16 17:09 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-04-16 17:04 . 2008-04-16 17:14 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2008-04-16 17:03 . 2008-04-16 17:03 <DIR> dr-h----- C:\MSOCache

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-27 16:56 --------- d-----w C:\Program Files\uTorrent
2008-04-27 16:54 --------- d-----w C:\Documents and Settings\Ala\Dane aplikacji\uTorrent
2008-04-19 18:33 --------- d-----w C:\Documents and Settings\Ala\Dane aplikacji\BearShare
2008-04-17 20:31 --------- d-----w C:\Program Files\Common Files\Ahead
2008-04-17 20:31 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ahead
2008-04-02 18:11 8,224 ----a-w C:\Documents and Settings\Ala\Dane aplikacji\GDIPFONTCACHEV1.DAT
2008-03-20 08:21 --------- d-----w C:\Program Files\hp Laserjet 1005
2008-03-17 16:35 --------- d-----w C:\Program Files\Java
2008-03-13 20:30 --------- d-----w C:\Program Files\AudioCommander
2008-03-13 20:18 --------- d-----w C:\Program Files\AnMing
2008-03-12 10:59 --------- d-----w C:\Program Files\NCH Swift Sound
2008-03-12 10:59 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
2008-03-05 20:36 --------- d-----w C:\Program Files\Winamp
2008-03-05 15:40 --------- d-----w C:\Program Files\GoD
2008-03-04 18:04 --------- d-----w C:\Documents and Settings\Ala\Dane aplikacji\winamp
2008-03-04 18:03 --------- d-----w C:\Program Files\Winamp Remote
2008-03-04 18:03 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\OrbNetworks
2008-03-02 20:25 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-02 11:35 --------- d-----w C:\Program Files\Wizaz 13
2008-03-02 10:18 --------- d-----w C:\Program Files\BitComet
2008-02-29 18:45 --------- d-----w C:\Program Files\Google
2008-02-29 16:11 --------- d-----w C:\Program Files\Alwil Software
2008-02-29 15:36 --------- d-----w C:\Program Files\Winamp Toolbar
2008-02-29 15:36 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
2008-02-29 15:29 --------- d-----w C:\Documents and Settings\Ala\Dane aplikacji\Gadu-Gadu
2008-02-29 15:23 --------- d-----w C:\Program Files\Gadu-Gadu
2008-02-28 19:53 --------- d-----w C:\Program Files\Teczka ArchiCADa 8.1
2008-02-28 19:41 --------- d-----w C:\Documents and Settings\Ala\Dane aplikacji\Graphisoft
2008-02-28 19:40 --------- d-----w C:\Program Files\WIBU-SYSTEMS
2008-02-28 18:17 --------- d-----w C:\Program Files\RM Converter
2008-02-28 18:17 --------- d-----w C:\Program Files\Boilsoft ASF Converter
2008-02-28 18:16 --------- d--h--r C:\Documents and Settings\Ala\Dane aplikacji\SecuROM
2008-02-28 18:16 --------- d-----w C:\Program Files\K-Lite Codec Pack
2008-02-28 18:16 --------- d-----w C:\Program Files\Boilsoft Video Splitter
2008-02-28 18:16 --------- d-----w C:\Program Files\AviSynth 2.5
2008-02-28 18:14 --------- d-----w C:\Program Files\PhoneTools
2008-02-17 15:18 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-12-13 18:49 1185120 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2007-12-13 18:49 1185120]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-12-13 18:49 1185120]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:44 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [ ]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 01:44 1667584]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-11-14 12:54 2131392]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2008-02-29 20:45 171448]
"Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-01-07 22:02 495616]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [ ]
"dxlock"="" []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-22 11:09 77824 C:\WINDOWS\SOUNDMAN.EXE]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-06 02:07 61440]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-01-13 14:49 77824]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [ ]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 01:44 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.avis"= C:\Program Files\ffdshow\ffdshow.ax
"VIDC.AP41"= APmpg4v1.dll
"VIDC.YV12"= yv12vfw.dll
"VIDC.FMVC"= fmcodec.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Gadu-Gadu\\gg.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9112:TCP"= 9112:TCP:BitComet 9112 TCP
"9112:UDP"= 9112:UDP:BitComet 9112 UDP
"8461:TCP"= 8461:TCP:GoD High Port
"8462:TCP"= 8462:TCP:GoD Low Port

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
S3 se46bus;Sony Ericsson Device 070 driver (WDM);C:\WINDOWS\system32\DRIVERS\se46bus.sys [2006-11-30 16:11]
S3 Wibukey2;Wibukey2;C:\WINDOWS\system32\drivers\wibukey2.sys []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{31efd23a-b22e-11dc-a6ab-0014858b2481}]
\Shell\AutoRun\command - I:\Setup.exe

.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-27 21:12:19
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-04-27 21:13:00
ComboFix-quarantined-files.txt 2008-04-27 19:12:57
ComboFix2.txt 2008-04-27 17:09:02

Pre-Run: 38,351,093,760 bajtów wolnych
Post-Run: 38,341,365,760 bajtów wolnych

191

[Okocza]

czyli co, na razie jest ok

[AliG]

Wyłączył sie dwa razy a jak się włączał to znowu ten błąd systemu....

[Okocza]

ale w logu jest czysto, tak jak pisał Mutopompka, jest to spowodowane przez jakąś awarię hardware..

[AliG]

No i co ja moge z tym zrobić???

[Okocza]

jedyna metoda która jest tam wymieniona to raportowanie błędu lub skontaktowanie się ze sprzedawcą... tylko nie wiemy co padło...

zainstaluj everesta i zrób screena z zakładki czujnik. pokombinujemy coś..

[wojtas]

Prawym na ,,Mój komputer">właściwości>Zakładka "Zaawansowane" -> Uruchamianie i odzyskiwanie i klikamy "ustawienia">
w części "Awaria systemu" odznaczamy pole "Automatycznie uruchom ponownie"

teraz zamiast resetu pojawi sie bluescreen przepisz kod bledu z dolu strony bluescreena

Autor postu otrzymał pochwałę

[AliG]

Ok. wyłączyłam. jak będe miała kod błędu to podam.