1
Recuva freezing while SCAN and the Programmwindow Aera stucks and was
overwritten and draw any other Windowface when open ("Deadzone").
recuva111.gif 5.35K
6 downloads
recuvascreen.gif 110.26K
4 downloads
recuva.exe_26_2_2008_15_15_10.dmp.zip 9.29K
1 downloadsHere the shortended LOG's
Quote
[2008-02-26 15:47:24] [INFO ] Recuva v1.11.257
[2008-02-26 15:47:24] [INFO ] System Info: MS Windows XP SP2, AMD Athlon XP 3200+, 1,0GB RAM, NVIDIA GeForce FX 5500
[2008-02-26 15:47:25] [INFO ] No update available
[2008-02-26 15:47:35] [INFO ] Scanning C drive
[2008-02-26 15:47:35] [INFO ] Opening path \\.\C:
[2008-02-26 15:47:35] [INFO ] Boot sector:
[2008-02-26 15:47:35] [INFO ] Reading MFT
[2008-02-26 15:47:35] [INFO ] Reading files
[2008-02-26 15:47:35] [ERROR] Exception: NtfsFileAttributeImpl.cpp(85) : Ungültiger Dateieintrag gefunden
[2008-02-26 15:47:24] [INFO ] System Info: MS Windows XP SP2, AMD Athlon XP 3200+, 1,0GB RAM, NVIDIA GeForce FX 5500
[2008-02-26 15:47:25] [INFO ] No update available
[2008-02-26 15:47:35] [INFO ] Scanning C drive
[2008-02-26 15:47:35] [INFO ] Opening path \\.\C:
[2008-02-26 15:47:35] [INFO ] Boot sector:
[2008-02-26 15:47:35] [INFO ] Reading MFT
[2008-02-26 15:47:35] [INFO ] Reading files
[2008-02-26 15:47:35] [ERROR] Exception: NtfsFileAttributeImpl.cpp(85) : Ungültiger Dateieintrag gefunden
(DRWTSN32.EXE shows twice in the Taskmanager).
Quote
Microsoft ® DrWtsn32
Copyright © 1985-2001 Microsoft Corp. Alle Rechte vorbehalten.
Anwendungsausnahme aufgetreten:
Anwendung: D:\@1\@sys\=recov=\recuva\recuva.exe (pid=320)
Wann: 26.02.2008 @ 15:47:36.046
Ausnahmenummer: c0000005 (Zugriffsverletzung)
*----> Statusabbild für Threadkennung 0x4a4 <----*
eax=0012ec14 ebx=00000000 ecx=00000001 edx=7c91eb94 esi=006ec200 edi=00000001
eip=7c91eb94 esp=0012f0f0 ebp=0012f124 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\xp1w\system32\ntdll.dll -
Funktion: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e
*----> Stack Back Trace <----*
Copyright © 1985-2001 Microsoft Corp. Alle Rechte vorbehalten.
Anwendungsausnahme aufgetreten:
Anwendung: D:\@1\@sys\=recov=\recuva\recuva.exe (pid=320)
Wann: 26.02.2008 @ 15:47:36.046
Ausnahmenummer: c0000005 (Zugriffsverletzung)
*----> Statusabbild für Threadkennung 0x4a4 <----*
eax=0012ec14 ebx=00000000 ecx=00000001 edx=7c91eb94 esi=006ec200 edi=00000001
eip=7c91eb94 esp=0012f0f0 ebp=0012f124 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\xp1w\system32\ntdll.dll -
Funktion: ntdll!KiFastSystemCallRet
7c91eb89 90 nop
7c91eb8a 90 nop
ntdll!KiFastSystemCall:
7c91eb8b 8bd4 mov edx,esp
7c91eb8d 0f34 sysenter
7c91eb8f 90 nop
7c91eb90 90 nop
7c91eb91 90 nop
7c91eb92 90 nop
7c91eb93 90 nop
ntdll!KiFastSystemCallRet:
7c91eb94 c3 ret
7c91eb95 8da42400000000 lea esp,[esp]
7c91eb9c 8d642400 lea esp,[esp]
7c91eba0 90 nop
7c91eba1 90 nop
7c91eba2 90 nop
7c91eba3 90 nop
7c91eba4 90 nop
ntdll!KiIntSystemCall:
7c91eba5 8d542408 lea edx,[esp+0x8]
7c91eba9 cd2e int 2e
*----> Stack Back Trace <----*
EDIT: I started again wit drive E: seems O.K. (do not wipe some Zerofiles) - and the Freeze Error
occcurs again by Rescan the same Drive.
ciao ^L^
