Neustala generace chyb

Shooter · Příspěvekod **Shooter** » 07 lis 2007 20:20

Cau, kazdou chvily mi ve Windows vyskoci hlaska - viz.obrazek.
Stava se to snad u vsech programu co zapnu, u her se to udela po 10 minutach, uz mi z toho fakt sibe.
Mam Windows 2000, nedavno nainstalovanej, a myslim ze to zacalo delat tak 2 tydny po instalaci, formatovat opravdu znova nechci.
Diky za kazdou Vasi odpoved.
Priklad chyby:
Obrázek

Reklama

Crave · Příspěvekod **Crave** » 07 lis 2007 20:35

projed antivirem pro jistotu a udelej log z hijacku a posli log..odbornici se ti tady na to podivaji..navod najdes nekde tady na foru, jak vlozit log-pokud nevis

Shooter · Příspěvekod **Shooter** » 07 lis 2007 20:44

Tak tady jsem vyjel log z hijacku:
Kdyztak mi ho prosimvas kompletne prohlidnete, kde co nesedi a tak, vy jste na tohle fakt machri, dik...

*******************************************************************************

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:42:40, on 7.11.2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINNT\system32\bgsvcgen.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\AMD\PowerNow!\GemServ.exe
C:\Program Files\AMD\PowerNow!\gemback.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\RUNDLL32.EXE
C:\WINNT\system32\internat.exe
C:\Program Files\CursorXP\CursorXP.exe
C:\Program Files\TuneUp Utilities 2007\MemOptimizer.exe
C:\Program Files\Opera2\Opera.exe
C:\Program Files\Opera 9.5 beta\opera.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINNT\WebIE.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\NetXfer\NXIEHelper.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\WINNT\WebIE.dll
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dll
O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CBitSpirit] "C:\Program Files\BitSpirit\BitSpirit.exe" /start /nosplash
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\RunOnce: [MigrateMMDrivers] rundll32.exe mmsys.cpl,mmseRunOnce
O4 - HKLM\..\RunOnce: [InstallShieldSetup] C:\PROGRA~1\INSTAL~1\{FB08F~1\setup.exe -rebootC:\PROGRA~1\INSTAL~1\{FB08F~1\reboot.ini -l0x5
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2007\MemOptimizer.exe" autostart
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O8 - Extra context menu item: Download with Rapget - C:\Documents and Settings\Warp\Plocha\Rapget\rapget.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Načítať použitie &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Stáhnout pomocí NetXferu - C:\Program Files\Xi\NetXfer\NXAddLink.html
O8 - Extra context menu item: Stáhnout vše pomocí Net&Xferu - C:\Program Files\Xi\NetXfer\NXAddList.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINNT\WebIE.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINNT\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINNT\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINNT\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINNT\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINNT\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINNT\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINNT\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINNT\WebIE.dll
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 3240978375
O18 - Protocol: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINNT\system32\bgsvcgen.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: AMD PowerNow! (tm) Technology Service (GemServ) - Advanced Micro Devices - C:\Program Files\AMD\PowerNow!\GemServ.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe
O23 - Service: Armed Assault Drivers Auto Removal (pr2agmlb) (pr2agmlb) - Bohemia Interactive - C:\WINNT\system32\pr2agmlb.exe
O23 - Service: SolidPDFConverterReadSpool (ScReadSpool) - VoyagerSoft, LLC - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe

--
End of file - 8177 bytes

***************************************************************************************

Crave · Příspěvekod **Crave** » 08 lis 2007 06:53

Barone..ty umis s logy...podiv se mu na to... :shock:

Příspěvekod **Pic** » 08 lis 2007 16:20

Mrkni se, třeba to pomůže s tou hrou: http://arma.bigames.info/komentare/arma ... 462760db05

Shooter · Příspěvekod **Shooter** » 08 lis 2007 18:04

Pic píše:Mrkni se, třeba to pomůže s tou hrou: http://arma.bigames.info/komentare/arma ... 462760db05

Asi jsi nepochopil muj prispevek, tu hru "Arma" sem tam dal jen jako priklad z treba 30 moznych.

Příspěvekod **Pic** » 08 lis 2007 18:46

Doporučuji úklid PC Cleanerem a Regcleanerem. Vypadá to, že v některých programech jsou chyby, nebo jsou nekorektně odinstalovány.

Shooter · Příspěvekod **Shooter** » 11 lis 2007 15:40

Tak sem to procistil programami jak jste rekli a zadna zmena k lepsimu.
Tak sem napsal na jedno forum a tam mi poradily, ze se mi ve windows vytvori jakysi "DrWatson", meli pravdu. Poprvy sem to smazal, ale ted se mi tam objevil znovu. Obsahuje soubory "drwtsn32" a "user.dmp".
Pry se diky nim da zjitit, kde je puvodce techto chyb...
Davam sem cely soubor "drwtsn32", snad Vam to pomuze:
Diky za reseni myho problemu.

Microsoft (R) Windows 2000 (TM) Version 5.00 DrWtsn32
Copyright (C) 1985-1999 Microsoft Corp. Všechna práva vyhrazena.

Nastala výjimka aplikace:
Aplikace: (pid=1204)
Kdy: 11.11.2007 v 15:24:47.968
Číslo výjimky: c0000005 (narušení přístupu)

*----> Systémová informace <----*
Název počítače: ADMIN-TTKNQQJ2X
Uživatelské jméno: Warp
Počet procesorů: 1
Typ procesoru: x86 Family 15 Model 15 Stepping 2
Verze systému Windows 2000: 5.0
Aktuální sestavení: 2195
Service Pack: 4
Aktuální typ: Uniprocessor Free
Registrovaná organizace:
Registrovaný vlastník: admin

*----> Seznam úkolů <----*
0 Idle.exe
8 System.exe
232 SMSS.exe
260 CSRSS.exe
280 WINLOGON.exe
308 SERVICES.exe
320 LSASS.exe
496 svchost.exe
520 spoolsv.exe
548 sched.exe
560 avguard.exe
572 bgsvcgen.exe
600 BTNtService.exe
624 svchost.exe
664 GemServ.exe
692 gemback.exe
736 nvsvc32.exe
784 oodag.exe
876 regsvc.exe
844 mstask.exe
972 SolidPdfService.exe
1032 WinMgmt.exe
1092 svchost.exe
1380 explorer.exe
1556 rundll32.exe
1568 soundman.exe
1460 internat.exe
700 CursorXP.exe
1256 MemOptimizer.ex.exe
348 Opera.exe
1564 bsplayer.exe
368 BitSpirit.exe
832 samp.exe
1204 gta_sa.exe
888 DRWTSN32.exe
0 _Total.exe

(00400000 - 01577000)
(77F80000 - 77FFC000)
(77530000 - 77560000)
(77E10000 - 77E6F000)
(796D0000 - 79784000)
(77F40000 - 77F7C000)
(79300000 - 79365000)
(77100000 - 7716F000)
(10000000 - 10011000)
(01780000 - 01789000)
(01790000 - 01898000)
(74FD0000 - 74FE4000)
(78000000 - 78045000)
(74FC0000 - 74FC8000)
(018A0000 - 018D0000)
(7CEB0000 - 7CF9F000)
(02210000 - 02280000)
(69AA0000 - 69ABD000)
(777D0000 - 777EE000)
(797A0000 - 797B1000)
(77950000 - 7797B000)
(750F0000 - 75100000)
(77BF0000 - 77C01000)
(77980000 - 779A4000)
(74FF0000 - 74FF9000)
(7CE50000 - 7CEA0000)
(793E0000 - 793EF000)
(75160000 - 75166000)
(70BD0000 - 70C35000)
(7CA00000 - 7CA23000)
(79100000 - 79164000)
(798C0000 - 7994C000)
(773F0000 - 77401000)
(02470000 - 026C3000)
(70200000 - 70296000)
(779B0000 - 77A4C000)
(664C0000 - 66514000)
(02C00000 - 02C33000)
(51000000 - 51050000)
(72840000 - 72846000)
(6E390000 - 6E396000)
(75E10000 - 75E2A000)
(51080000 - 510E1000)
(777F0000 - 777F7000)
(75960000 - 75966000)
(71710000 - 71794000)
(77520000 - 77528000)
(773C0000 - 773C8000)
(773D0000 - 773E3000)
(036D0000 - 0377E000)
(6F920000 - 6F928000)
(77860000 - 778EF000)
(4FDD0000 - 4FF76000)
(03790000 - 03795000)
(03BC0000 - 03BC8000)
(7CB60000 - 7CBEF000)
(07EB0000 - 080B0000)
(07650000 - 07679000)
(07270000 - 072AA000)
(05100000 - 05107000)
(702B0000 - 7032A000)
(6A780000 - 6A7A0000)
(7CFC0000 - 7D207000)
(08B20000 - 08B6F000)
(70440000 - 704CF000)
(74F70000 - 74F8E000)
(74FB0000 - 74FB7000)
(77810000 - 7781C000)
(77300000 - 77313000)
(774E0000 - 774E5000)
(772E0000 - 772F7000)
(77370000 - 7739F000)
(77340000 - 77363000)
(77800000 - 7780E000)
(774A0000 - 774D4000)
(77480000 - 77491000)
(774F0000 - 77512000)
(77320000 - 77339000)
(777B0000 - 777B8000)
(777C0000 - 777C5000)
(0B100000 - 0B131000)

Výpis stavu podprocesu ID 0x584

eax=00b7358c ebx=00000000 ecx=00000416 edx=0000002e esi=0022fda4 edi=77e165f2
eip=00744607 esp=0022fd58 ebp=00b70198 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00200246

funkce: <nosymbols>
007445dc eb23 jmp 0074ac01
007445de 66891d1e2fb700 mov [00b72f1e],bx ds:00b72f1e=0000
007445e5 eb1a jmp 0074ac01
007445e7 66891c4dde24b700 mov [00b724de+ecx*2],bx ds:00000416=????
007445ef eb10 jmp 0074c701
007445f1 81f9ff000000 cmp ecx,0xff
007445f7 7d08 jge 0074ac01
007445f9 66891c4dc82cb700 mov [00b72cc8+ecx*2],bx ds:00000416=????
00744601 90 nop
00744602 e97e39ccff jmp 00407f85
CHYBA ->00744607 0f8483010000 je 00744790
0074460d 83f944 cmp ecx,0x44
00744610 7405 jz 0074c917
00744612 83f941 cmp ecx,0x41
00744615 750b jnz 0074ac22
00744617 66895878 mov [eax+0x78],bx ds:0164d473=0000
0074461b b801000000 mov eax,0x1
00744620 5b pop ebx
00744621 c3 ret
00744622 83f957 cmp ecx,0x57
00744625 7405 jz 0074c92c
00744627 83f953 cmp ecx,0x53

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00B70198 00000000 00000000 00000000 00000000 00000000 !<nosymbols>

*----> Bajtový výpis zásobníku <----*
0022fd58 00 00 00 00 9c 48 74 00 - a4 fd 22 00 6a 7d 74 00 .....Ht...".j}t.
0022fd68 1d 00 00 00 a4 fd 22 00 - 1a 00 00 00 77 b9 00 00 ......".....w...
0022fd78 5a 11 53 00 a4 fd 22 00 - 00 00 00 00 1a 00 00 00 Z.S...".........
0022fd88 77 b9 00 00 f3 d6 e1 77 - 00 00 00 00 00 00 00 00 w......w........
0022fd98 00 00 00 00 00 00 00 00 - 00 00 00 00 16 04 00 00 ................
0022fda8 fa 1d 54 00 1a 00 00 00 - 77 b9 00 00 eb be 53 00 ..T.....w.....S.
0022fdb8 1a 00 00 00 77 b9 00 00 - 00 00 00 00 00 7e 39 47 ....w........~9G
0022fdc8 00 00 00 00 46 02 20 00 - 86 e9 53 00 01 00 00 00 ....F. ...S.....
0022fdd8 af 41 82 00 86 94 4d 00 - c2 ec 53 00 01 00 00 00 .A....M...S.....
0022fde8 71 9b 61 00 1a 00 00 00 - 01 00 00 00 01 00 00 00 q.a.............
0022fdf8 0a 00 00 00 a0 8d 74 00 - 1a 00 00 00 01 00 00 00 ......t.........
0022fe08 66 0b 6f 79 00 00 00 00 - c0 ff 22 00 00 f0 fd 7f f.oy......".....
0022fe18 00 00 e5 01 42 1f 51 41 - 68 00 06 03 08 00 00 00 ....B.QAh.......
0022fe28 00 01 00 00 08 00 00 00 - 02 01 00 00 00 00 20 44 .............. D
0022fe38 00 00 00 44 00 00 00 00 - 00 00 00 00 00 05 00 00 ...D............
0022fe48 00 04 00 00 00 00 00 00 - fb 0d 00 00 1a 01 2b 00 ..............+.
0022fe58 02 01 00 00 77 00 00 00 - 01 00 11 40 b4 ff 09 01 ....w......@....
0022fe68 80 02 00 00 00 02 00 00 - 2c 00 00 00 64 fe 22 00 ........,...d.".
0022fe78 a4 5e 82 00 b0 ff 22 00 - a4 5e 82 00 20 7e 88 00 .^...."..^.. ~..
0022fe88 ff ff ff ff 00 00 00 00 - 42 53 83 00 65 00 00 00 ........BS..e...

Výpis stavu podprocesu ID 0x4ac

eax=065c0800 ebx=00000000 ecx=00000000 edx=00000000 esi=77f88f08 edi=00000128
eip=77f88f13 esp=0305ff5c ebp=0305ff80 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246

funkce: ZwWaitForSingleObject
77f88f08 b8ea000000 mov eax,0xea
77f88f0d 8d542404 lea edx,[esp+0x4] ss:03b39e43=00000000
77f88f11 cd2e int 2e
77f88f13 c20c00 ret 0xc
77f88f16 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0305FF80 796DB40F 00000128 FFFFFFFF 00000000 0040657E ntdll!ZwWaitForSingleObject
796E6200 1E806888 6068796D 64797221 000000A1 89645000 kernel32!WaitForSingleObject
B2B0CBE9 00000000 00000000 00000000 00000000 00000000 <nosymbols>

*----> Bajtový výpis zásobníku <----*
0305ff5c a2 a0 6f 79 28 01 00 00 - 00 00 00 00 00 00 00 00 ..oy(...........
0305ff6c 9c c1 59 01 80 c1 59 01 - 00 00 00 00 b0 ff 05 03 ..Y...Y.........
0305ff7c b0 ff 05 03 00 62 6e 79 - 0f b4 6d 79 28 01 00 00 .....bny..my(...
0305ff8c ff ff ff ff 00 00 00 00 - 7e 65 40 00 28 01 00 00 ........~e@.(...
0305ff9c ff ff ff ff 00 e0 fd 7f - bc fc 22 00 ec ff 05 03 ..........".....
0305ffac 00 00 00 00 00 20 00 00 - 9d 9c f8 77 bc b3 6d 79 ..... .....w..my
0305ffbc 00 00 00 00 00 e0 fd 7f - bc fc 22 00 00 00 00 00 ..........".....
0305ffcc 00 d0 fd 7f ff ff ff ff - c0 ff 05 03 ff ff ff ff ................
0305ffdc ff ff ff ff 60 21 72 79 - 08 2b 6d 79 00 00 00 00 ....`!ry.+my....
0305ffec 00 00 00 00 00 00 00 00 - 60 65 40 00 00 00 00 00 ........`e@.....
0305fffc 00 00 00 00 08 00 00 00 - 01 01 00 00 ee ff ee ff ................
0306000c 00 00 00 00 00 00 e5 02 - 00 00 00 00 00 00 06 03 ................
0306001c 00 01 00 00 40 00 06 03 - 00 00 16 03 00 00 00 00 ....@...........
0306002c 00 00 00 00 00 00 00 00 - 00 00 00 00 40 00 06 03 ............@...
0306003c 00 00 00 00 04 00 08 00 - 01 01 08 00 c8 c2 59 01 ..............Y.
0306004c ff ff ff ff 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0306005c 00 00 00 00 12 00 04 00 - 01 01 0c 00 89 00 06 03 ................
0306006c c5 00 06 03 c8 00 06 03 - cb 00 06 03 d3 00 06 03 ................
0306007c d6 00 06 03 e4 00 06 03 - e7 00 06 03 22 43 3a 5c ............"C:\
0306008c 50 72 6f 67 72 61 6d 20 - 46 69 6c 65 73 5c 52 6f Program Files\Ro

Výpis stavu podprocesu ID 0x500

eax=77522bda ebx=00000002 ecx=77f8b649 edx=00000000 esi=77f88ef8 edi=00000002
eip=77f88f03 esp=033cff24 ebp=033cff70 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246

funkce: NtWaitForMultipleObjects
77f88ef8 b8e9000000 mov eax,0xe9
77f88efd 8d542404 lea edx,[esp+0x4] ss:03ea9e0b=cc09e608
77f88f01 cd2e int 2e
77f88f03 c21400 ret 0x14
77f88f06 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
033CFF70 796FA180 033CFF48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
033CFFB4 796DB3BC 00000000 015828F0 0158292C 00000000 kernel32!WaitForMultipleObjects
033CFFEC 00000000 77522BDA 00000000 00000000 409FFFFF kernel32!lstrcmpiW

Výpis stavu podprocesu ID 0x60c

eax=77107dd0 ebx=80064bd4 ecx=7ffde000 edx=00000000 esi=015b1ce8 edi=015b1d28
eip=77f88b37 esp=0482fe28 ebp=0482ff74 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206

funkce: ZwReplyWaitReceivePortEx
77f88b2c b8ac000000 mov eax,0xac
77f88b31 8d542404 lea edx,[esp+0x4] ss:05309d0f=????????
77f88b35 cd2e int 2e
77f88b37 c21400 ret 0x14
77f88b3a 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0482FF74 77128E4A 7710AEED 015B1CE8 77F8E770 015C1EF0 ntdll!ZwReplyWaitReceivePortEx
0482FFA8 77107DE8 015C1ED0 0482FFEC 796DB3BC 015CF4F0 rpcrt4!TowerConstruct
0482FFB4 796DB3BC 015CF4F0 77F8E770 015C1EF0 015CF4F0 rpcrt4!I_RpcConnectionInqSockBuffSize2
0482FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW

Výpis stavu podprocesu ID 0x63c

eax=51084b40 ebx=00000040 ecx=0317db48 edx=00000000 esi=77f88ef8 edi=00000040
eip=77f88f03 esp=04c2fddc ebp=04c2fe28 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246

funkce: NtWaitForMultipleObjects
77f88ef8 b8e9000000 mov eax,0xe9
77f88efd 8d542404 lea edx,[esp+0x4] ss:05709cc3=00000000
77f88f01 cd2e int 2e
77f88f03 c21400 ret 0x14
77f88f06 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
04C2FE28 796FA180 015AE678 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
04C2FE58 510C2E51 00000040 FFFFFFFF 00000000 04C2FE78 kernel32!WaitForMultipleObjects
04C2FF78 510C362B FFFFFFFF 0000003F 03175930 04C2FF94 !<nosymbols>
04C2FF98 510C30C4 016B9000 03173DAC 510C3144 00000024 !<nosymbols>
04C2FFB4 796DB3BC 03173DAC 016B9000 00000024 03173DAC !<nosymbols>
04C2FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!lstrcmpiW

Výpis stavu podprocesu ID 0x304

eax=003f0000 ebx=00000001 ecx=01010101 edx=00000000 esi=77f88ef8 edi=00000001
eip=77f88f03 esp=04e2fde4 ebp=04e2fe30 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246

funkce: NtWaitForMultipleObjects
77f88ef8 b8e9000000 mov eax,0xe9
77f88efd 8d542404 lea edx,[esp+0x4] ss:05909ccb=00000000
77f88f01 cd2e int 2e
77f88f03 c21400 ret 0x14
77f88f06 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
04E2FE30 796FA180 04E2FE08 00000001 00000000 04E2FE28 ntdll!NtWaitForMultipleObjects
04E2FE60 510C2E51 00000001 000001F4 00000000 04E2FE80 kernel32!WaitForMultipleObjects
04E2FF80 510A2329 000001F4 00000000 00000000 00000000 !<nosymbols>
04E2FFB4 796DB3BC 03171EFC 03170D18 00000023 03171EFC !<nosymbols>
04E2FFEC 00000000 510C38EB 03171EFC 00000000 00000008 kernel32!lstrcmpiW

*----> Bajtový výpis zásobníku <----*
04e2fde4 6d a2 6f 79 01 00 00 00 - 08 fe e2 04 01 00 00 00 m.oy............
04e2fdf4 00 00 00 00 28 fe e2 04 - 00 00 00 00 01 00 00 00 ....(...........
04e2fe04 01 00 00 00 b8 03 00 00 - 01 00 00 00 00 00 00 00 ................
04e2fe14 00 00 00 00 d8 79 17 03 - 00 00 00 00 00 00 00 00 .....y..........
04e2fe24 b4 02 00 00 c0 b4 b3 ff - ff ff ff ff 60 fe e2 04 ............`...
04e2fe34 80 a1 6f 79 08 fe e2 04 - 01 00 00 00 00 00 00 00 ..oy............
04e2fe44 28 fe e2 04 00 00 00 00 - 00 2b 0c 51 01 00 00 00 (........+.Q....
04e2fe54 80 fe e2 04 00 00 00 00 - f4 01 00 00 80 ff e2 04 ................
04e2fe64 51 2e 0c 51 01 00 00 00 - f4 01 00 00 00 00 00 00 Q..Q............
04e2fe74 80 fe e2 04 fc 1e 17 03 - fc 1e 17 03 b8 03 00 00 ................
04e2fe84 00 00 00 00 bc fe e2 04 - c1 37 0c 51 1d a0 6f 79 .........7.Q..oy
04e2fe94 b4 02 00 00 01 00 00 00 - 61 38 0c 51 b4 02 00 00 ........a8.Q....
04e2fea4 e8 1e 17 03 00 00 00 00 - 00 00 00 00 00 00 3f 00 ..............?.
04e2feb4 1d a0 6f 79 b4 02 00 00 - 01 00 00 00 7b 2c 0c 51 ..oy........{,.Q
04e2fec4 b4 02 00 00 05 08 0a 51 - 00 00 00 00 00 00 00 00 .......Q........
04e2fed4 e8 1e 17 03 e8 1e 17 03 - 1d a0 6f 79 b4 02 00 00 ..........oy....
04e2fee4 01 00 00 00 7b 2c 0c 51 - 00 00 00 00 d1 1e 0a 51 ....{,.Q.......Q
04e2fef4 7c 89 6f 79 00 00 00 00 - 6d a2 6f 79 01 00 00 00 |.oy....m.oy....
04e2ff04 20 ff e2 04 01 00 00 00 - 00 00 00 00 40 ff e2 04 ...........@...
04e2ff14 00 00 00 00 fc 1e 17 03 - fc 1e 17 03 b8 03 00 00 ................

Výpis stavu podprocesu ID 0x678

eax=00000001 ebx=00b608d0 ecx=00000101 edx=00000000 esi=77f88398 edi=0531ff90
eip=77f883a3 esp=0531ff7c ebp=0531ff98 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206

funkce: NtDelayExecution
77f88398 b832000000 mov eax,0x32
77f8839d 8d542404 lea edx,[esp+0x4] ss:05df9e63=????????
77f883a1 cd2e int 2e
77f883a3 c20800 ret 0x8
77f883a6 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0531FF98 796FA2CC 00000001 00000000 004EEEB1 00000001 ntdll!NtDelayExecution
0531FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!Sleep

Výpis stavu podprocesu ID 0x178

eax=00000001 ebx=00000000 ecx=80000101 edx=00000000 esi=510d6c00 edi=510d6c00
eip=77f88403 esp=0551fdf8 ebp=0551fe58 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206

funkce: NtDeviceIoControlFile
77f883f8 b838000000 mov eax,0x38
77f883fd 8d542404 lea edx,[esp+0x4] ss:05ff9cdf=ffffffff
77f88401 cd2e int 2e
77f88403 c22800 ret 0x28
77f88406 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0551FE58 510B3A76 000003C4 002F0003 0551FEC0 00000018 ntdll!NtDeviceIoControlFile
0551FE90 510B3B21 000003C4 002F0003 0551FEC0 00000018 !<nosymbols>
0551FED8 510B87C3 000003C4 510847FC 00000005 0551FEFC !<nosymbols>
0551FF0C 510B7EAE 0551FF50 0551FF4C 00000000 031737D8 !<nosymbols>
0551FF28 510A458D 0551FF50 0551FF4C 00000000 03176998 !<nosymbols>
0551FF54 510A7B01 0551FF9C 00000000 FFFFFFF9 FFFFFFFD !DirectSoundCaptureEnumerateW
0551FF6C 004F263F 03176998 0551FF9C 00000000 00B606CC !DirectSoundCaptureEnumerateW
04E30048 02203670 03176998 00000000 00000000 00000000 !<nosymbols>
0085F3F0 004F2550 004F2040 004F19E0 004F1880 004F1D40 <nosymbols>
004F27F0 FFFFFA08 082444F6 56097401 32ECB8E8 04C48300 !<nosymbols>
E8F18B56 00000000 00000000 00000000 00000000 00000000 <nosymbols>

*----> Bajtový výpis zásobníku <----*
0551fdf8 9d 94 6d 79 c4 03 00 00 - 7c 01 00 00 00 00 00 00 ..my....|.......
0551fe08 00 6c 0d 51 00 6c 0d 51 - 03 00 2f 00 c0 fe 51 05 .l.Q.l.Q../...Q.
0551fe18 18 00 00 00 fc fe 51 05 - 10 00 00 00 00 6c 0d 51 ......Q......l.Q
0551fe28 00 6c 0d 51 b0 fe 51 05 - 0c 00 00 00 4c fe 51 05 .l.Q..Q.....L.Q.
0551fe38 09 5d 0c 51 00 00 00 00 - 24 fe 51 05 20 68 17 03 .].Q....$.Q. h..
0551fe48 dc ff 51 05 60 21 72 79 - a8 1e 6d 79 ff ff ff ff ..Q.`!ry..my....
0551fe58 90 fe 51 05 76 3a 0b 51 - c4 03 00 00 03 00 2f 00 ..Q.v:.Q....../.
0551fe68 c0 fe 51 05 18 00 00 00 - fc fe 51 05 10 00 00 00 ..Q.......Q.....
0551fe78 b0 fe 51 05 00 6c 0d 51 - d0 fe 51 05 0c 48 08 51 ..Q..l.Q..Q..H.Q
0551fe88 00 00 00 00 00 00 00 00 - d8 fe 51 05 21 3b 0b 51 ..........Q.!;.Q
0551fe98 c4 03 00 00 03 00 2f 00 - c0 fe 51 05 18 00 00 00 ....../...Q.....
0551fea8 fc fe 51 05 10 00 00 00 - ff ff ff ff 00 00 00 00 ..Q.............
0551feb8 4c ff 51 05 48 37 17 03 - a0 aa ff 45 1b 6e d0 11 L.Q.H7.....E.n..
0551fec8 bc f2 44 45 53 54 00 00 - 05 00 00 00 01 00 00 00 ..DEST..........
0551fed8 0c ff 51 05 c3 87 0b 51 - c4 03 00 00 fc 47 08 51 ..Q....Q.....G.Q
0551fee8 05 00 00 00 fc fe 51 05 - 10 00 00 00 00 00 00 00 ......Q.........
0551fef8 48 37 17 03 44 34 01 00 - 00 00 00 00 80 48 01 00 H7..D4.......H..
0551ff08 00 00 00 00 28 ff 51 05 - ae 7e 0b 51 50 ff 51 05 ....(.Q..~.QP.Q.
0551ff18 4c ff 51 05 00 00 00 00 - d8 37 17 03 00 00 00 00 L.Q......7......
0551ff28 54 ff 51 05 8d 45 0a 51 - 50 ff 51 05 4c ff 51 05 T.Q..E.QP.Q.L.Q.

Výpis stavu podprocesu ID 0x514

eax=778021fe ebx=00000003 ecx=01582b38 edx=00000000 esi=77f88ef8 edi=00000003
eip=77f88f03 esp=09dbfd24 ebp=09dbfd70 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246

funkce: NtWaitForMultipleObjects
77f88ef8 b8e9000000 mov eax,0xe9
77f88efd 8d542404 lea edx,[esp+0x4] ss:0a899c0b=11111abe
77f88f01 cd2e int 2e
77f88f03 c21400 ret 0x14
77f88f06 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
09DBFD70 796FA180 09DBFD48 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
09DBFFB4 796DB3BC 00000004 77F8C618 00000000 08DD4770 kernel32!WaitForMultipleObjects
09DBFFEC 00000000 778021FE 08DD4770 00000000 00000000 kernel32!lstrcmpiW

*----> Bajtový výpis zásobníku <----*
09dbfd24 6d a2 6f 79 03 00 00 00 - 48 fd db 09 01 00 00 00 m.oy....H.......
09dbfd34 00 00 00 00 00 00 00 00 - 00 00 00 00 70 47 dd 08 ............pG..
09dbfd44 01 00 00 00 a4 04 00 00 - a8 04 00 00 b8 04 00 00 ................
09dbfd54 a0 43 7c 85 40 71 3b 85 - 80 1a 3c 85 e0 ef 17 85 .C|.@q;...<.....
09dbfd64 20 a7 47 85 e0 49 85 85 - 20 d0 56 85 b4 ff db 09 .G..I.. .V.....
09dbfd74 80 a1 6f 79 48 fd db 09 - 01 00 00 00 00 00 00 00 ..oyH...........
09dbfd84 00 00 00 00 00 00 00 00 - b2 22 80 77 03 00 00 00 .........".w....
09dbfd94 b0 fe db 09 00 00 00 00 - ff ff ff ff 70 47 dd 08 ............pG..
09dbfda4 00 00 00 00 18 c6 f8 77 - 40 cf 0b 85 00 00 00 00 .......w@.......
09dbfdb4 00 00 00 00 00 00 00 00 - 00 00 00 00 38 00 00 00 ............8...
09dbfdc4 23 00 00 00 23 00 00 00 - 18 c6 f8 77 00 00 00 00 #...#......w....
09dbfdd4 70 47 dd 08 7c c6 f8 77 - 38 2b 58 01 fe 21 80 77 pG..|..w8+X..!.w
09dbfde4 9c 80 35 79 40 b7 6d 79 - 1b 00 00 00 00 02 00 00 ..5y@.my........
09dbfdf4 fc ff db 09 23 00 00 00 - 95 46 45 80 80 3b fb bb ....#....FE..;..
09dbfe04 08 10 0d 85 08 10 0d 85 - 20 00 00 00 00 00 00 00 ........ .......
09dbfe14 a0 22 48 80 00 07 00 00 - c2 cf 44 80 00 70 99 85 ."H.......D..p..
09dbfe24 9e 56 00 00 01 00 00 00 - 21 8e 01 00 18 13 12 86 .V......!.......
09dbfe34 00 07 00 00 34 c4 44 80 - 21 8e 01 00 18 13 12 86 ....4.D.!.......
09dbfe44 21 8e 01 00 18 13 12 86 - 01 72 fa 7f e4 0e 00 00 !........r......
09dbfe54 65 cd 44 80 e4 0e 00 00 - 10 ee 59 85 00 70 fa 7f e.D.......Y..p..

Výpis stavu podprocesu ID 0x158

eax=00000004 ebx=02b5f0f0 ecx=00000000 edx=00000000 esi=77f88398 edi=09fbff58
eip=77f883a3 esp=09fbff44 ebp=09fbff60 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202

funkce: NtDelayExecution
77f88398 b832000000 mov eax,0x32
77f8839d 8d542404 lea edx,[esp+0x4] ss:0aa99e2b=7fb576bd
77f883a1 cd2e int 2e
77f883a3 c20800 ret 0x8
77f883a6 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
09FBFF60 796FA2CC 0000000A 00000000 023D434B 0000000A ntdll!NtDelayExecution
09FBFFB4 796DB3BC 02B5F0F0 777C00D0 0022F880 02B5F0F0 kernel32!Sleep
09FBFFEC 00000000 023E4F38 02B5F0F0 00000000 432B0000 kernel32!lstrcmpiW

Výpis stavu podprocesu ID 0x5ac

eax=00000000 ebx=00000001 ecx=00010101 edx=00000000 esi=77f88ef8 edi=00000001
eip=77f88f03 esp=06a4fecc ebp=06a4ff18 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246

funkce: NtWaitForMultipleObjects
77f88ef8 b8e9000000 mov eax,0xe9
77f88efd 8d542404 lea edx,[esp+0x4] ss:07529db3=????????
77f88f01 cd2e int 2e
77f88f03 c21400 ret 0x14
77f88f06 8bff mov edi,edi

*----> Zpětné trasování zásobníku <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
06A4FF18 77E1E9DB 06A4FEF0 00000001 00000000 00000000 ntdll!NtWaitForMultipleObjects
06A4FF74 036D8FEE 06A4FF40 00000000 FFFFFFFF 000000FF user32!MsgWaitForMultipleObjectsEx
06A4FFB4 796DB3BC 08D80A68 015ADFB8 7FFDEBF8 08D80A68 !<nosymbols>
06A4FFEC 00000000 036D8F8C 08D80A68 00000000 00000000 kernel32!lstrcmpiW

*----> Bajtový výpis zásobníku <----*
06a4fecc 6d a2 6f 79 01 00 00 00 - f0 fe a4 06 01 00 00 00 m.oy............
06a4fedc 01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
06a4feec 01 00 00 00 10 04 00 00 - fc fe a4 06 28 00 00 00 ............(...
06a4fefc 00 00 0e 00 00 02 00 00 - 70 9d 6d 03 ed 1d e3 77 ........p.m....w
06a4ff0c 84 02 00 00 00 02 00 00 - 00 00 00 00 74 ff a4 06 ............t...
06a4ff1c db e9 e1 77 f0 fe a4 06 - 01 00 00 00 00 00 00 00 ...w............
06a4ff2c 00 00 00 00 01 00 00 00 - 00 00 00 00 57 97 6d 79 ............W.my
06a4ff3c 68 0a d8 08 10 04 00 00 - 68 0a d8 08 74 ff a4 06 h.......h...t...
06a4ff4c af a8 e1 77 98 ff a4 06 - 00 00 00 00 00 00 00 00 ...w............
06a4ff5c 00 00 00 00 01 00 00 00 - 01 00 00 00 cc c6 fd 7f ................
06a4ff6c 00 00 00 00 10 04 00 00 - b4 ff a4 06 ee 8f 6d 03 ..............m.
06a4ff7c 40 ff a4 06 00 00 00 00 - ff ff ff ff ff 00 00 00 @...............
06a4ff8c 02 00 00 00 b8 df 5a 01 - f8 eb fd 7f 00 00 00 00 ......Z.........
06a4ff9c 13 01 00 00 a2 5d 00 00 - 89 8f 6d 03 dc 00 0a 01 .....]....m.....
06a4ffac 80 02 00 00 00 02 00 00 - ec ff a4 06 bc b3 6d 79 ..............my
06a4ffbc 68 0a d8 08 b8 df 5a 01 - f8 eb fd 7f 68 0a d8 08 h.....Z.....h...
06a4ffcc 00 c0 fd 7f 50 00 00 00 - c0 ff a4 06 50 00 00 00 ....P.......P...
06a4ffdc ff ff ff ff 60 21 72 79 - 08 2b 6d 79 00 00 00 00 ....`!ry.+my....
06a4ffec 00 00 00 00 00 00 00 00 - 8c 8f 6d 03 68 0a d8 08 ..........m.h...
06a4fffc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

Shooter · Příspěvekod **Shooter** » 12 lis 2007 00:01

No tak, vi nekdo co s tim?

Neustala generace chyb

Neustala generace chyb

Baron...

Kdo je online