marenqo Posted April 26, 2011 Author Share Posted April 26, 2011 Please find attached, the first time the attaching did not workMini042311-01.rar Link to comment Share on other sites More sharing options...
marenqo Posted April 28, 2011 Author Share Posted April 28, 2011 Any news on this? My pc has been infected now for over a week and I have been posting on my different forums, unfortunately without success of resolving this.... Link to comment Share on other sites More sharing options...
allen2 Posted April 28, 2011 Share Posted April 28, 2011 Of course, you didn't do what MagicAndre1981 asked. If you don't post a full memory dump generated at time the you get the peak of memory usage, then nobody can know what going wrong on your computer. Don't blame on others your lack of knowledge and abilities. Link to comment Share on other sites More sharing options...
Tripredacus Posted April 28, 2011 Share Posted April 28, 2011 configure your system to generate a full crash dump:zip the dump and upload it to mediafire.comHere is the memory dump instructions again.Also, I fixed the typo in the topic title, seeing the word "svshot" was killing me Link to comment Share on other sites More sharing options...
Tarun Posted April 28, 2011 Share Posted April 28, 2011 It would be worthwhile to run sfc /scannow. You could also use Dial-a-fix since you're on XP. Link to comment Share on other sites More sharing options...
marenqo Posted April 29, 2011 Author Share Posted April 29, 2011 Sorry for the delay, I was on the Kaspersky channel. They don't know what it is there either and I uploaded a million of things there. Fortunately I am not the only one and they are working on itPlease find the zipped file here: http://www.mediafire.com/?bm0ztu36736502rBTW: I cant do a sfc /scannow, because I don't have the CD here, windows was preinstalled. Link to comment Share on other sites More sharing options...
marenqo Posted April 29, 2011 Author Share Posted April 29, 2011 Please find the zipped file here: http://www.mediafire.com/?bm0ztu36736502rHere is another dump at the moment of a Generic Host Process WIn32 services errorszAppName : svchost.exe szAppVer : 5.1.2600.5512 szModName : ntdll.dllszModVer : 5.1.2600.6055 offset : 00022235address: http://www.sendspace.com/file/10uiyg* mediashare does not like my browser and crashes Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted April 29, 2011 Share Posted April 29, 2011 the dump is damaged, I can't read the data:Kernel Complete Dump File: Full address space is available************************************************************WARNING: Dump file has been truncated. Data may be missing.Unable to read KLDR_DATA_TABLE_ENTRY at 8b3b33a0 - Win32 error 0n38GetContextState failed, 0x800700260: kd> !vm*** Virtual Memory Usage *** Physical Memory: 783871 ( 3135484 Kb)00000000: Unable to get page file00000000: Unable to get paged pool infounable to get nt!MmTotalFreeSystemPtesunable to get nt!MmTotalPagesForPagingFileunable to get nt!MiSpecialPagesNonPagedunable to get nt!MiSpecialPagesNonPagedMaximum Error reading free nonpaged PTEs 00000004unable to get nt!MmSpecialPagesInUse Available Pages: 666391 ( 2665564 Kb) ResAvail Pages: 695793 ( 2783172 Kb) Locked IO Pages: 0 ( 0 Kb) Free System PTEs: 0 ( 0 Kb) ********** Running out of system PTEs ************** Free NP PTEs: 0 ( 0 Kb) Free Special NP: 0 ( 0 Kb) Modified Pages: 4353 ( 17412 Kb) Modified PF Pages: 0 ( 0 Kb)80564d20: Unable to get pool descriptor NonPagedPool Usage: 0 ( 0 Kb) NonPagedPool Max: 65536 ( 262144 Kb) PagedPool Usage: 0 ( 0 Kb) PagedPool Maximum: 92160 ( 368640 Kb)Unable to get Session WsListEntry Session Commit: 0 ( 0 Kb) Shared Commit: 2278 ( 9112 Kb) Special Pool: 0 ( 0 Kb) Shared Process: 2202 ( 8808 Kb) PagedPool Commit: 10330 ( 41320 Kb) Driver Commit: 4535 ( 18140 Kb) Committed pages: 61417 ( 245668 Kb) Commit limit: 755565 ( 3022260 Kb)ProcessCommitUsage could not be calculatedso I can't see the process memory usage of the svchost.exe. Do you really only have 768MB RAM? Try to upgrade the RAM. Link to comment Share on other sites More sharing options...
marenqo Posted April 29, 2011 Author Share Posted April 29, 2011 so I can't see the process memory usage of the svchost.exe. Do you really only have 768MB RAM? Try to upgrade the RAM.Have you tried both dumps? Were both of them damaged? If so, what to do now? No, I have 3gb but had to limit the size, otherwise the file would be 2gb big Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted April 29, 2011 Share Posted April 29, 2011 don't limit the size. Compress it with 7z (LZMA2 - ultra). This reduces the size a lot. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now