ساعدونى (الشاشة الزرقاء)

[mahmoud&m]

ياريت تساعدونى عايز اعرف عيب اية دة رامة ولة بروسيسور
والرامة كانت شغاله كويس جداااااااا وصتبت ويندوز مرتين نفس المشكلة والويندوز متأكد منة لانى صتبته على اللاب واجهزة كتير شغال عادى جدا ودرجه حرارة البروسيسور 30 يعنى مش عالية

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

​

 

[format]

وعليكم السلام ورحمة الله

حمل الاداة من هذا الموضوع

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

واعمل سجلات النظام والاخطاء
+
هايجك
------------------

​

​

 

[mahmoud&m]

تقرير السجلات والاخطاء



====== سجل أخطاء النظام ======

Computer Name: MODY-PC
Event Code: 4227
Message: TCP/IP failed to establish an outgoing connection because the selected local endpoint was recently used to connect to the same remote endpoint. This error typically occurs when outgoing connections are opened and closed at a high rate, causing all available local ports to be used and forcing TCP/IP to reuse a local port for an outgoing connection. To minimize the risk of data corruption, the TCP/IP standard requires a minimum time period to elapse between successive connections from a given local endpoint to a given remote endpoint.
Record Number: 920
Source Name: Tcpip
Time Written: 20120306042142.355986-000
Event Type: Warning
User:

Computer Name: MODY-PC
Event Code: 7023
Message:
Record Number: 900
Source Name: Service Control Manager
Time Written: 20120306042010.230524-000
Event Type: Error
User:

Computer Name: MODY-PC
Event Code: 20
Message: Installation Failure: Windows failed to install the following update with error 0x80070005: Intel Corporation - Display - Intel(R) G41 Express Chipset.
Record Number: 777
Source Name: Microsoft-Windows-WindowsUpdateClient
Time Written: 20120306040912.446574-000
Event Type: Error
User: NT AUTHORITY\SYSTEM

Computer Name: MODY-PC
Event Code: 1014
Message: Name resolution for the name ls2web.redmond.corp.microsoft.com timed out after none of the configured DNS servers responded.
Record Number: 685
Source Name: Microsoft-Windows-DNS-Client
Time Written: 20120306040105.562495-000
Event Type: Warning
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: MODY-PC
Event Code: 7031
Message: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
Record Number: 678
Source Name: Service Control Manager
Time Written: 20120306035832.879952-000
Event Type: Error
User:



===== سجل أخطاء البرامج =====

Computer Name: 37L4247F27-08
Event Code: 1130
Message: .NET Runtime Optimization Service (2.0.50727.5446) - Version or flavor did not match with repository: ehExtHost
Record Number: 120
Source Name: .NET Runtime Optimization Service
Time Written: 20120306133437.000000-000
Event Type: Warning
User:

Computer Name: 37L4247F27-08
Event Code: 1130
Message: .NET Runtime Optimization Service (2.0.50727.5446) - Version or flavor did not match with repository: ehiProxy
Record Number: 118
Source Name: .NET Runtime Optimization Service
Time Written: 20120306133433.000000-000
Event Type: Warning
User:

Computer Name: 37L4247F27-08
Event Code: 1130
Message: .NET Runtime Optimization Service (2.0.50727.5446) - Version or flavor did not match with repository: ehCIR
Record Number: 112
Source Name: .NET Runtime Optimization Service
Time Written: 20120306133432.000000-000
Event Type: Warning
User:

Computer Name: 37L4247F27-08
Event Code: 1130
Message: .NET Runtime Optimization Service (2.0.50727.5446) - Version or flavor did not match with repository: BDATunePIA
Record Number: 111
Source Name: .NET Runtime Optimization Service
Time Written: 20120306133424.000000-000
Event Type: Warning
User:

Computer Name: 37L4247F27-08
Event Code: 1130
Message: .NET Runtime Optimization Service (2.0.50727.5446) - Version or flavor did not match with repository: AuditPolicyGPManagedStubs.Interop
Record Number: 110
Source Name: .NET Runtime Optimization Service
Time Written: 20120306133418.000000-000
Event Type: Warning
User:



===== السجل الأمني =====

Computer Name: 37L4247F27-08
Event Code: 4735
Message: A security-enabled local group was changed.

Subject:
Security ID: S-1-5-18
Account Name: 37L4247F27-08$
Account Domain: WORKGROUP
Logon ID: 0x3e7

Group:
Security ID: S-1-5-32-551
Group Name: Backup Operators
Group Domain: Builtin

Changed Attributes:
SAM Account Name: -
SID History: -

Additional Information:
Privileges: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120306133136.796469-000
Event Type: Audit Success
User:

Computer Name: 37L4247F27-08
Event Code: 4731
Message: A security-enabled local group was created.

Subject:
Security ID: S-1-5-18
Account Name: 37L4247F27-08$
Account Domain: WORKGROUP
Logon ID: 0x3e7

New Group:
Security ID: S-1-5-32-551
Group Name: Backup Operators
Group Domain: Builtin

Attributes:
SAM Account Name: Backup Operators
SID History: -

Additional Information:
Privileges: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120306133136.796469-000
Event Type: Audit Success
User:

Computer Name: 37L4247F27-08
Event Code: 4902
Message: The Per-user audit policy table was created.

Number of Elements: 0
Policy ID: 0x25060
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120306133136.484468-000
Event Type: Audit Success
User:

Computer Name: 37L4247F27-08
Event Code: 4624
Message: An account was successfully logged on.

Subject:
Security ID: S-1-0-0
Account Name: -
Account Domain: -
Logon ID: 0x0

Logon Type: 0

New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x4
Process Name:

Network Information:
Workstation Name: -
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: -
Authentication Package: -
Transited Services: -
Package Name (NTLM only): -
Key Length: 0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120306133134.830865-000
Event Type: Audit Success
User:

Computer Name: 37L4247F27-08
Event Code: 4608
Message: Windows is starting up.

This event is logged when LSASS.EXE starts and the auditing subsystem is initialized.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120306133134.768465-000
Event Type: Audit Success
User:



===== تقرير انهيار البرامج =====

==================================================
Process File : svchost.exe
Event Name : Windows Update installation problem
Event Time : 3/9/2012 5:22:30 AM
User Name : All Users
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Windows\System32\svchost.exe
Report File Size : 2,086
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_7.5.7601.17514_fb14142891a054e91a40bb72a22a1113bbc32_12af9a2c\Report.wer
==================================================

==================================================
Process File : msnmsgr.exe
Event Name : Stopped working
Event Time : 3/9/2012 8:07:24 AM
User Name : MODY
Exception Code : 0xc0000005
Exception Offset : 0x0013a79a
Fault Module Name : RTMPLTFM.dll
Fault Module Version: 4.0.7440.0
Process Path : C:\Program Files\Windows Live\Messenger\msnmsgr.exe
Report File Size : 24,798
Report File Path : C:\Users\MODY\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_msnmsgr.exe_4fb7b5b778977d274417346d455e45797635d_02f8d1a0\Report.wer
==================================================

==================================================
Process File : msnmsgr.exe
Event Name : Stopped working
Event Time : 3/9/2012 7:56:03 AM
User Name : MODY
Exception Code : 0xc0000005
Exception Offset : 0x0013a79a
Fault Module Name : RTMPLTFM.dll
Fault Module Version: 4.0.7440.0
Process Path : C:\Program Files\Windows Live\Messenger\msnmsgr.exe
Report File Size : 25,006
Report File Path : C:\Users\MODY\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_msnmsgr.exe_4fb7b5b778977d274417346d455e45797635d_11b277be\Report.wer
==================================================

==================================================
Process File : msnmsgr.exe
Event Name : Stopped working
Event Time : 3/9/2012 7:32:41 AM
User Name : MODY
Exception Code : 0xc000070a
Exception Offset : 0x0009bdec
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17725
Process Path : C:\Program Files\Windows Live\Messenger\msnmsgr.exe
Report File Size : 18,534
Report File Path : C:\Users\MODY\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_msnmsgr.exe_d03bb07ceea5da42c4767b7b98fb9ff449bf7b_0ef906d3\Report.wer
==================================================

==================================================
Process File : plugin-container.exe
Event Name : Stopped working
Event Time : 3/9/2012 7:55:48 AM
User Name : MODY
Exception Code : 0xc0000005
Exception Offset : 0x000e8b62
Fault Module Name : NPSWF32.dll
Fault Module Version: 11.1.102.63
Process Path : C:\Program Files\Mozilla Firefox\plugin-container.exe
Report File Size : 12,254
Report File Path : C:\Users\MODY\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_plugin-container_d35473b6d2a0c8d033901b6e8a5d14393651b0f5_12a6497e\Report.wer
==================================================

==================================================
Process File : Speccy.exe
Event Name : Stopped working
Event Time : 3/9/2012 2:22:10 AM
User Name : MODY
Exception Code : 0xc000000d
Exception Offset : 0x0010c9c4
Fault Module Name : Speccy.exe
Fault Module Version: 1.15.0.309
Process Path : C:\Users\MODY\Desktop\Speccy.exe
Report File Size : 13,960
Report File Path : C:\Users\MODY\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_Speccy.exe_d542968f94bb5f531dfbcd14e9a4c67492f661df_11716161\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped responding and was closed
Event Time : 3/9/2012 9:49:13 AM
User Name : MODY
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Windows\explorer.exe
Report File Size : 23,596
Report File Path : C:\Users\MODY\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppHang_explorer.exe_34b7a52a17404df84e4085b06e55afc253bca2c_174a0d99\Report.wer
==================================================

==================================================
Process File : WerFault.exe
Event Name : Shut down unexpectedly
Event Time : 3/9/2012 7:32:20 AM
User Name : MODY
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Windows\System32\WerFault.exe
Report File Size : 3,338
Report File Path : C:\Users\MODY\AppData\Local\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_093d8e0b\Report.wer
==================================================

==================================================
Process File : svchost.exe
Event Name : Windows Update installation problem
Event Time : 3/9/2012 5:22:30 AM
User Name :
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Windows\System32\svchost.exe
Report File Size : 2,086
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.5.7601.17514_fb14142891a054e91a40bb72a22a1113bbc32_12af9a2c\Report.wer
==================================================




===== تقرير الشاشة الزرقاء =====

==================================================
Dump File : 030912-15631-01.dmp
Crash Time : 3/9/2012 7:31:57 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x946225fd
Parameter 3 : 0xabb6bac0
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+c25fd
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\030912-15631-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7601
Dump File Size : 145,400
==================================================

==================================================
Dump File : 030912-21918-01.dmp
Crash Time : 3/9/2012 12:12:17 AM
Bug Check String : MEMORY_MANAGEMENT
Bug Check Code : 0x0000001a
Parameter 1 : 0x00041284
Parameter 2 : 0x3cfc3001
Parameter 3 : 0x00006164
Parameter 4 : 0xc0802000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+deef4
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7601.17713 (win7sp1_gdr.111025-1505)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\030912-21918-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7601
Dump File Size : 145,384
==================================================

 

[mahmoud&m]

الهايجك
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:22:00 PM, on 3/9/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\wuauclt.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Windows\system32\taskeng.exe
C:\Zyzoom_Forum_Tools\zHijak.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\Windows\PixArt\PAC7302\Monitor.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe

--
End of file - 5013 bytes

 

[format]

 

[mahmoud&m]

شكرا ليك
بس انت بعتلى شرح تصليح الويندوز ولو كان العيب منة كان اتعدل اما صتبت نسخه تانية لانى صتبت نسختين
وشكرااااااااا

 

[mahmoud&m]

ارجوا مساعده المشرفين ايضا لو سمحتواا