Nie można uruchomić windows,... plik został uszkodzony

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 11:16

Cześć,
kuzynka przywiozła kompa, mówiła że coś z nim nie gra. Gdy go włączałem wyskoczyło takie coś:

Jak widzicie logów nie mam jak zrobić :-|

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 11:18

Jak to nie masz?? Pewnie że masz

Pobierz OTLPENet.exe od OldTimera - link

Narzędzie pobieramy i wypalamy na czystej, niezainfekowanej maszynie!
Upewnij się, że w napędzie jest czysta płyta CD.
Uruchom OTLPENet.exe - to uruchomi procedurę dekompresji i wypalenia płyty, z której będziemy korzystać.
Uruchom zainfekowany komputer z płyty, którą właśnie wypaliłeś. Wskazówki tutaj
A jako że chwilę to zajmie, zanim płytka rozpozna sprzęt i załaduje system, więc zalecam w tym momencie kubek herbaty/kufel piwa

(...ładną chwilę później... ponieważ system i wszystko jest ładowane z płyty, uzbrój się w solidny zapas cierpliwości)

Wyświetli się pulpit Reatogo. Znajdź na nim ikonę OTLPE i uruchom.
Wskaż katalog, gdzie zainstalowany jest system. KATALOG, NIE DYSK! (np. C:\WINDOWS...)
Na pytanie "Do you wish to load the remote registry", odpowiedz Yes
Na pytanie "Do you wish to load remote user profile(s) for scanning", odpowiedz Yes
Upewnij się że opcja "Automatically Load All Remaining Users" jest zaznaczona i wciśnij OK, to uruchomi OTL
W OTL wciśnij Run Scan. Gdy skończy, log będzie zapisany jako C:\OTL.txt

Natomiast to, co jest na screenie, to jest uszkodzony rejestr i tym się zajmiemy zaraz, zresztą chyba OTLPE też sie nam do tego przyda

Autor postu otrzymał pochwałę

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 12:11

Kod: Zaznacz wszystko: OTL logfile created on: 9/11/2010 1:01:56 PM - Run OTLPE by OldTimer - Version 3.1.41.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Dodatek Service Pack. 1 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 6.0.2800.1106) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 255.00 Mb Total Physical Memory | 92.00 Mb Available Physical Memory | 36.00% Memory free 215.00 Mb Paging File | 96.00 Mb Available in Paging File | 45.00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 18.76 Gb Total Space | 5.57 Gb Free Space | 29.71% Space Free | Partition Type: NTFS Drive D: | 18.50 Gb Total Space | 13.87 Gb Free Space | 75.00% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Drive X: | 434.85 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO Current User Name: SYSTEM Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard Using ControlSet: ControlSet002 [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ) SRV - [2010/05/06 16:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV - [2010/05/06 16:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV - [2010/05/06 16:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [Auto] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2002/09/28 18:00:00 | 000,047,104 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\mspmspsv.dll -- (WmdmPmSp) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand] -- -- (WDICA) DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP) DRV - File not found [Kernel | System] -- -- (PCIDump) DRV - File not found [Kernel | System] -- -- (lbrtfdc) DRV - File not found [Kernel | System] -- -- (i2omgmt) DRV - File not found [Kernel | System] -- -- (Changer) DRV - [2010/05/06 16:39:23 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2010/05/06 16:39:00 | 000,164,048 | ---- | M] (ALWIL Software) [Kernel | System] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2010/05/06 16:34:27 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2010/05/06 16:33:59 | 000,100,432 | ---- | M] (ALWIL Software) [File_System | Auto] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2010/05/06 16:33:29 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2006/03/26 22:48:34 | 000,026,752 | R--- | M] (ASUSTek Computer Inc. ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ipfnd51.sys -- (ip100xp) DRV - [2004/10/29 10:50:00 | 002,826,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2003/04/08 03:56:36 | 000,820,133 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sis7012.sys -- (SiS7012) Service for AC'97 Sample Driver (WDM) DRV - [2002/08/28 20:32:44 | 000,009,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2001/08/17 17:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [2001/08/17 16:58:02 | 000,026,112 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\SISAGP.SYS -- (sisagp) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\JUSTYNA_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\JUSTYNA_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\systemprofile_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/08/17 14:33:22 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/17 14:33:21 | 000,000,000 | ---D | M] [2010/05/16 14:56:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JUSTYNA\Dane aplikacji\mozilla\Extensions [2010/05/16 14:56:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JUSTYNA\Dane aplikacji\mozilla\Firefox\Profiles\odwp7b95.default\extensions [2010/05/16 14:55:58 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010/04/01 13:33:11 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010/04/01 13:33:11 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010/04/01 13:33:11 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010/04/01 13:33:11 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010/04/01 13:33:11 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010/04/01 13:33:11 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2002/09/28 18:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (&Radio) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation) O4 - HKU\JUSTYNA_ON_C..\Run: [ares] C:\Program Files\Ares\Ares.exe (Ares Development Group) O4 - HKU\JUSTYNA_ON_C..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\JUSTYNA_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\systemprofile_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: @shdoclc.dll,-866 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm () O9 - Extra 'Tools' menuitem : @shdoclc.dll,-864 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm () O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010/05/09 10:20:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2003/01/04 15:55:44 | 000,002,440 | ---- | M] () - D:\automatycznie_przewijana_strona.html -- [ FAT32 ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/08/14 11:58:45 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll [2010/08/14 11:58:45 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll [2010/08/14 11:58:45 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Msvcr71.dll [2010/08/14 11:53:17 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu 10 [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/08/18 17:41:29 | 000,233,472 | ---- | M] () -- C:\Documents and Settings\NetworkService\NTUSER.DAT [2010/08/18 17:41:29 | 000,233,472 | ---- | M] () -- C:\Documents and Settings\LocalService\NTUSER.DAT [2010/08/18 17:41:27 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/08/18 17:41:24 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/08/18 17:41:17 | 003,145,728 | ---- | M] () -- C:\Documents and Settings\JUSTYNA\ntuser.dat [2010/08/18 17:41:17 | 000,000,104 | -HS- | M] () -- C:\Documents and Settings\JUSTYNA\ntuser.ini [2010/08/18 05:03:26 | 003,730,510 | -H-- | M] () -- C:\Documents and Settings\JUSTYNA\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010/08/17 14:33:25 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\JUSTYNA\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2010/08/15 08:18:07 | 000,013,824 | ---- | M] () -- C:\Documents and Settings\JUSTYNA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/08/15 06:44:19 | 000,017,145 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2010/08/14 11:58:45 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll [2010/08/14 11:58:45 | 001,060,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll [2010/08/14 11:58:45 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\Msvcr71.dll [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/09/11 13:01:32 | 000,008,192 | -H-- | C] () -- C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG [2010/08/12 06:58:44 | 003,145,728 | ---- | C] () -- C:\Documents and Settings\JUSTYNA\ntuser.dat [2010/08/03 12:23:19 | 000,000,035 | ---- | C] () -- C:\WINDOWS\A4W.INI [2010/06/13 12:34:45 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010/06/13 12:34:44 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2010/06/13 12:34:35 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010/06/13 12:34:34 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010/06/13 12:34:31 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010/06/13 12:34:31 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2010/06/13 12:29:55 | 000,013,824 | ---- | C] () -- C:\Documents and Settings\JUSTYNA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/05/18 16:25:20 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2010/05/16 16:25:31 | 001,253,376 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2010/05/16 16:25:31 | 001,032,192 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2010/05/16 16:25:31 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\vorbisfile.dll [2010/05/16 16:25:30 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2010/05/09 10:27:58 | 000,237,568 | ---- | C] () -- C:\WINDOWS\system32\config\systemprofile\ntuser.dat [2010/05/09 10:27:25 | 000,000,104 | -HS- | C] () -- C:\Documents and Settings\JUSTYNA\ntuser.ini [2010/05/09 10:27:24 | 000,221,184 | -H-- | C] () -- C:\Documents and Settings\JUSTYNA\ntuser.dat.LOG [2010/05/09 10:26:17 | 000,233,472 | ---- | C] () -- C:\Documents and Settings\LocalService\NTUSER.DAT [2010/05/09 10:26:17 | 000,024,576 | -H-- | C] () -- C:\Documents and Settings\LocalService\ntuser.dat.LOG [2010/05/09 10:26:17 | 000,000,020 | -HS- | C] () -- C:\Documents and Settings\NetworkService\ntuser.ini [2010/05/09 10:26:17 | 000,000,020 | -HS- | C] () -- C:\Documents and Settings\LocalService\ntuser.ini [2010/05/09 10:26:16 | 000,233,472 | ---- | C] () -- C:\Documents and Settings\NetworkService\NTUSER.DAT [2010/05/09 10:26:16 | 000,024,576 | -H-- | C] () -- C:\Documents and Settings\NetworkService\ntuser.dat.LOG [2003/04/08 05:40:22 | 000,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [2002/09/28 18:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [color=#E56717]========== LOP Check ==========[/color] [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 12:13

Wykonaj teraz nowego loga z OTLPE, u góry okna programu wciśnij "nic" ale zanim naciśniesz "skanuj" wpisz do dolnego okna komendę

Kod: Zaznacz wszystko: restorepoints

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 12:17

Oto i log

Kod: Zaznacz wszystko: OTL logfile created on: 9/11/2010 1:13:56 PM - Run OTLPE by OldTimer - Version 3.1.41.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Dodatek Service Pack. 1 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 6.0.2800.1106) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 255.00 Mb Total Physical Memory | 61.00 Mb Available Physical Memory | 24.00% Memory free 215.00 Mb Paging File | 69.00 Mb Available in Paging File | 32.00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 18.76 Gb Total Space | 5.57 Gb Free Space | 29.71% Space Free | Partition Type: NTFS Drive D: | 18.50 Gb Total Space | 13.87 Gb Free Space | 75.00% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Drive X: | 434.85 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO Current User Name: SYSTEM Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard Using ControlSet: ControlSet002 [color=#E56717]========== Custom Scans ==========[/color] [color=#E56717]========== Restore Points Found ==========[/color] [2010/08/13 04:03:02 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP17\snapshot [2010/08/13 04:02:39 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP18\snapshot [2010/07/30 04:17:55 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP16\snapshot [2010/07/30 04:17:00 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP15\snapshot [2010/07/29 15:12:17 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP14\snapshot [2010/07/23 09:55:08 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP13\snapshot [2010/07/06 14:22:13 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP12\snapshot [2010/06/30 16:59:35 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP11\snapshot [2010/06/24 10:40:58 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP10\snapshot [2010/06/21 10:03:46 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP9\snapshot [2010/06/19 02:42:31 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP8\snapshot [2010/06/15 16:51:48 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP7\snapshot [2010/06/13 13:09:36 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP6\snapshot [2010/05/18 16:21:13 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP5\snapshot [2010/05/16 15:33:37 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP4\snapshot [2010/05/15 08:12:58 | 000,000,000 | ---D | M] -- C:\System Volume Information\_restore{33FCAAE9-AA7A-4441-9785-36D515F78E1E}\RP3\snapshot < End of report >

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 12:20

Jasne

mamy więc komplet informacji, co powinniśmy wiedzieć

Teraz ważne pytanie: czy to jakaś dziwna modyfikacja windowsa, czy czysty system xp sp1? Od kiedy pojawia się błąd? Możesz to ustalić?

Notabene - przydałaby mu się aktualizacja do SP3

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 12:24

Nie jestem pewien. Powiem tak, modyfikacja to żadna nie jest.
SP nie widze info, więc pewnie 1, ale głowy nie dam :roll:

Zadzwonie zaraz do kuzynki i się zapytam od kiedy pojawia się ten błąd

EDIT:
wieczorem sie normlanie wylaczyl
a rano....
Czyli częsty scenariusz

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 12:32

Dobra, nie ma co. Bierzemy się za naprawę rejestru.

1. Konsola Odzyskiwania Windows XP:

Na czystym komputerze pobierasz TEN plik. Jest obraz ISO gotowej konsoli do windowsa XP.
Wypalasz ten obraz na płytę, z której następnie bootujesz uszkodzony komputer.
Pojawi się okno jak na obrazku. Wybierasz zaznaczoną opcję
Otworzy się czarne okno z wyborem systemu operacyjnego, który chcemy naprawić. Wpisujemy jego numer i enter.
Następnie konsola zapyta nas o hasło administratora, a nie konta użytkownika. Proszę wpisać to hasło. Jeśli go nie ma, wciskamy samo enter.
Konsola otwiera się domyślnie w ścieżce C:\Windows.

2. Wydajesz w niej następujące polecenia:

Kod: Zaznacz wszystko: md tmp copy c:\windows\system32\config\system c:\windows\tmp\system.bak copy c:\windows\system32\config\software c:\windows\tmp\software.bak copy c:\windows\system32\config\sam c:\windows\tmp\sam.bak copy c:\windows\system32\config\security c:\windows\tmp\security.bak copy c:\windows\system32\config\default c:\windows\tmp\default.bak delete c:\windows\system32\config\system delete c:\windows\system32\config\software delete c:\windows\system32\config\sam delete c:\windows\system32\config\security delete c:\windows\system32\config\default copy c:\windows\repair\system c:\windows\system32\config\system copy c:\windows\repair\software c:\windows\system32\config\software copy c:\windows\repair\sam c:\windows\system32\config\sam copy c:\windows\repair\security c:\windows\system32\config\security copy c:\windows\repair\default c:\windows\system32\config\default

Oczywiście każde polecenie zatwierdzasz enterem.

Potem próbujesz uruchomić komputer normalnie. Ma działać system, nie zdziw się jak nic więcej nie będzie działać.

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 13:15

Zrobiłem wszystko no i teraz:

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 13:48

Uruchom komputer z płyty OTLPE

Uruchom OTL
u góry kliknij none
w oknie na dole wklej

Kod: Zaznacz wszystko: /md5start atapi.sys iaStor.sys jraid.sys nvata.sys ndis.sys beep.sys ntfs.sys explorer.exe svchost.exe userinit.exe winlogon.exe /md5stop %systemroot%\system32\ws2_32.dll /md5 %systemroot%\system32\kernel32.dll /md5 %systemroot%\system32\user32.dll /md5 %systemroot%\Tasks\*.job /lockedfiles %systemroot%\system32\drivers\* /lockedfiles

Kliknij Run Scan i przeklej raport.

:ok:

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 14:01

Kod: Zaznacz wszystko: OTL logfile created on: 9/11/2010 3:55:08 PM - Run OTLPE by OldTimer - Version 3.1.41.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Dodatek Service Pack. 1 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 6.0.2800.1106) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 255.00 Mb Total Physical Memory | 96.00 Mb Available Physical Memory | 38.00% Memory free 215.00 Mb Paging File | 95.00 Mb Available in Paging File | 44.00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 18.76 Gb Total Space | 5.94 Gb Free Space | 31.66% Space Free | Partition Type: NTFS Drive D: | 18.50 Gb Total Space | 13.87 Gb Free Space | 75.00% Space Free | Partition Type: FAT32 Drive E: | 3.72 Gb Total Space | 3.72 Gb Free Space | 100.00% Space Free | Partition Type: FAT32 F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Drive X: | 434.85 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO Current User Name: SYSTEM Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard Using ControlSet: ControlSet001 [color=#E56717]========== Standard Registry (All) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home IE - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\systemprofile_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [2010/05/16 14:55:58 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010/08/17 14:33:22 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2010/04/01 14:05:59 | 000,023,000 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll [2010/04/01 14:05:59 | 000,138,712 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll [2010/04/01 14:05:59 | 000,064,984 | ---- | M] (mozilla.org) -- C:\Program Files\Mozilla Firefox\plugins\npnul32.dll [2003/07/15 00:56:52 | 000,013,888 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL [2003/05/15 04:01:48 | 000,133,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll [2010/04/01 13:33:11 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010/04/01 13:33:11 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010/04/01 13:33:11 | 000,002,371 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml [2010/04/01 13:33:11 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010/04/01 13:33:11 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010/04/01 13:33:11 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010/04/01 13:33:11 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2002/09/28 18:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O3 - HKLM\..\Toolbar: (&Radio) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation) O4 - HKLM..\Run: [SchedulingAgent] C:\WINDOWS\System32\mstinit.exe (Microsoft Corporation) O4 - HKLM..\Run: [SRFirstRun] C:\WINDOWS\System32\srclient.dll (Microsoft Corporation) O4 - HKU\.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation) O4 - HKU\systemprofile_ON_C..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\systemprofile_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: @shdoclc.dll,-866 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm () O9 - Extra 'Tools' menuitem : @shdoclc.dll,-864 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation) O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation) O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation) O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation) O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation) O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation) O20 - Winlogon\Notify\EFS: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Moduł wstępnego ładowania interfejsu Browseui - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Demon buforu kategorii składników - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010/05/09 10:20:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2003/01/04 15:55:44 | 000,002,440 | ---- | M] () - D:\automatycznie_przewijana_strona.html -- [ FAT32 ] O32 - AutoRun File - [2010/09/11 10:48:12 | 000,000,000 | RHSD | M] - E:\Autorun.inf -- [ FAT32 ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2002/09/28 18:00:00 | 010,180,934 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys [2002/09/28 18:00:00 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\system32\drivers\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2002/09/28 18:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\dllcache\beep.sys [2002/09/28 18:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\drivers\beep.sys [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2002/09/28 18:00:00 | 001,005,568 | ---- | M] (Microsoft Corporation) MD5=54638B94DF29C0FD0F8DEA7BAF6DBDFE -- C:\WINDOWS\explorer.exe [2002/09/28 18:00:00 | 001,005,568 | ---- | M] (Microsoft Corporation) MD5=F4AF85D918E83D71341FCE2AA5318181 -- C:\WINDOWS\system32\dllcache\explorer.exe [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2002/09/28 18:00:00 | 000,167,552 | ---- | M] (Microsoft Corporation) MD5=3B350E5A2A5E951453F3993275A4523A -- C:\WINDOWS\system32\dllcache\ndis.sys [2002/09/28 18:00:00 | 000,167,552 | ---- | M] (Microsoft Corporation) MD5=3B350E5A2A5E951453F3993275A4523A -- C:\WINDOWS\system32\drivers\ndis.sys [color=#A23BEC]< MD5 for: NTFS.SYS >[/color] [2002/09/28 18:00:00 | 000,561,920 | ---- | M] (Microsoft Corporation) MD5=E3AE9C79498210A5F39FE5A9AD62BC55 -- C:\WINDOWS\system32\dllcache\ntfs.sys [2002/09/28 18:00:00 | 000,561,920 | ---- | M] (Microsoft Corporation) MD5=E3AE9C79498210A5F39FE5A9AD62BC55 -- C:\WINDOWS\system32\drivers\ntfs.sys [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color] [2002/09/28 18:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) MD5=B3C95BFEEF6781A82A1C429F466A3A11 -- C:\WINDOWS\system32\dllcache\svchost.exe [2002/09/28 18:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) MD5=B3C95BFEEF6781A82A1C429F466A3A11 -- C:\WINDOWS\system32\svchost.exe [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color] [2002/09/28 18:00:00 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=323D3FFCBF99C59B2D20B4C5A7ECE347 -- C:\WINDOWS\system32\dllcache\userinit.exe [2002/09/28 18:00:00 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=323D3FFCBF99C59B2D20B4C5A7ECE347 -- C:\WINDOWS\system32\userinit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2002/09/28 18:00:00 | 000,519,168 | ---- | M] (Microsoft Corporation) MD5=8B6E6BB5D451F8BBC0621203B687D993 -- C:\WINDOWS\system32\dllcache\winlogon.exe [2002/09/28 18:00:00 | 000,519,168 | ---- | M] (Microsoft Corporation) MD5=8B6E6BB5D451F8BBC0621203B687D993 -- C:\WINDOWS\system32\winlogon.exe [color=#A23BEC]< %systemroot%\system32\ws2_32.dll /md5 >[/color] [2002/09/28 18:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=9B7D1C56CC12D806314B853BF52ECB4C -- C:\WINDOWS\system32\ws2_32.dll [2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\system32\kernel32.dll /md5 >[/color] [2002/09/28 18:00:00 | 000,958,976 | ---- | M] (Microsoft Corporation) MD5=D7F0FB6223CB9B34125B2978E79C6B96 -- C:\WINDOWS\system32\kernel32.dll [2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\system32\user32.dll /md5 >[/color] [2002/09/28 18:00:00 | 000,561,664 | ---- | M] (Microsoft Corporation) MD5=3A4892A57CFE05D61E4BBC3EC3E24A63 -- C:\WINDOWS\system32\user32.dll [2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\* /lockedfiles >[/color] < End of report > [color=#A23BEC]< MD5 for: [2002/09/28 18:00:00 | 000,004,224 | ---- | M] (MICROSOFT CORPORATION) >[/color] [2002/09/28 18:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dllcache\beep.sys [2002/09/28 18:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\beep.sys [color=#A23BEC]< MD5 for: [2002/09/28 18:00:00 | 000,012,800 | ---- | M] (MICROSOFT CORPORATION) >[/color] [2002/09/28 18:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dllcache\svchost.exe [2002/09/28 18:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [color=#A23BEC]< MD5 for: [2002/09/28 18:00:00 | 000,022,528 | ---- | M] (MICROSOFT CORPORATION) >[/color] [2002/09/28 18:00:00 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dllcache\userinit.exe [2002/09/28 18:00:00 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\userinit.exe [color=#A23BEC]< MD5 for: [2002/09/28 18:00:00 | 000,086,912 | ---- | M] (MICROSOFT CORPORATION) >[/color] [2002/09/28 18:00:00 | 000,086,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\atapi.sys [color=#A23BEC]< MD5 for: [2002/09/28 18:00:00 | 000,167,552 | ---- | M] (MICROSOFT CORPORATION) >[/color] [2002/09/28 18:00:00 | 000,167,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dllcache\ndis.sys [2002/09/28 18:00:00 | 000,167,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\ndis.sys [color=#A23BEC]< MD5 for: [2002/09/28 18:00:00 | 000,519,168 | ---- | M] (MICROSOFT CORPORATION) >[/color] [2002/09/28 18:00:00 | 000,519,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dllcache\winlogon.exe [2002/09/28 18:00:00 | 000,519,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winlogon.exe [color=#A23BEC]< MD5 for: [2002/09/28 18:00:00 | 000,561,920 | ---- | M] (MICROSOFT CORPORATION) >[/color] [2002/09/28 18:00:00 | 000,561,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dllcache\ntfs.sys [2002/09/28 18:00:00 | 000,561,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\ntfs.sys [color=#A23BEC]< MD5 for: [2002/09/28 18:00:00 | 001,005,568 | ---- | M] (MICROSOFT CORPORATION) >[/color] [2002/09/28 18:00:00 | 001,005,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [2002/09/28 18:00:00 | 001,005,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dllcache\explorer.exe [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2002/09/28 18:00:00 | 010,180,934 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys [color=#A23BEC]< %systemroot%\system32\ws2_32.dll /md5 >[/color] [2002/09/28 18:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=9B7D1C56CC12D806314B853BF52ECB4C -- C:\WINDOWS\system32\ws2_32.dll [2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\system32\kernel32.dll /md5 >[/color] [2002/09/28 18:00:00 | 000,958,976 | ---- | M] (Microsoft Corporation) MD5=D7F0FB6223CB9B34125B2978E79C6B96 -- C:\WINDOWS\system32\kernel32.dll [2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\system32\user32.dll /md5 >[/color] [2002/09/28 18:00:00 | 000,561,664 | ---- | M] (Microsoft Corporation) MD5=3A4892A57CFE05D61E4BBC3EC3E24A63 -- C:\WINDOWS\system32\user32.dll [2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\* /lockedfiles >[/color] < End of report >

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 14:05

No to teraz najtrudniejsza część zadania.

Nakładkowa instalacja Windowsa XP

Pamiętać należy, że do nakładki używamy płyty w dokładnie tej samej wersji systemu, jaki jest zainstalowany, czyli jeśli jest to XP PRO SP2, to takiej należy użyć. Można także użyć płyty XP PRO SP3, wtedy pliki nadpiszą się już nowszymi wersjami - będzie to od razu upgrade do wyższej wersji SP.

Startujemy komputer z bootowalnej płyty instalacyjnej
Dostajemy na ekranie do wyboru opcje:
- ENTER - do instalacji Windowsa
- R - do naprawiania przy pomocy konsoli
- F3 - do wyjścia
Wybieramy pierwszą - ENTER instalacyjne
Za chwilę (po potwierdzeniu licencji i takich tam) dostajemy drugie okno z opcjami:
- R - naprawa podświetlonej w ramce instalacji
- ESC - instalacja świeżego systemu
Wybieramy opcję pierwszą - R

UWAGA!
Jeśli opcji drugiego R nie ma - to znaczy że możliwy jest tylko format, a nie nakładkowa instalacja.

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 20:27

Nie jest dobrze,

Jakieś pomysły

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 20:30

Chwilowo brak

I mówiąc szczerze, to nie mam bladego pojęcia czym to może być spowodowane.

Jaką płytką, z jakim systemem próbowałeś nakładać?
Tylko dokładnie.

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 20:41

No Win XP SP1

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 20:44

Co się wyświetliło w tym dzienniku błędów?

kari [PL^^], jak jeszcze raz będziesz robił nakładkę albo instalację porysowaną płytą to zorbię Ci z tyłka wylotówkę na Warszawę :evil:

**Posty:** 2077 · przez **KaRi** 11 Wrz 2010, 21:00

**Posty:** 2183 · przez **NieWiem** 11 Wrz 2010, 21:02

Jak byk błąd kopiowania z płyty ;]

Może jednak weźmy nieporysowaną, co?

**Posty:** 2077 · przez **KaRi** 12 Wrz 2010, 17:31

EUREKA,
udało się, system się załadował i działa

Co dalej Miszczu

**Posty:** 2183 · przez **NieWiem** 12 Wrz 2010, 21:47

Z przyklejonego tematu pobierz OTL

Wykonaj standardowego loga, z tą różnicą, że w oknie na dole wklej komendy

Kod: Zaznacz wszystko: restorepoints createrestorepoint

i dopiero wciśnij "skanuj"