Security Sphere 2012, HELP please :(

Question

Bonjour, 

Je viens poster un message sur ce forum, désespérément, car depuis hier soir mon pc portable est infecté par Security Sphere 2012... Toute la soirée j'ai essayé de m'en débarasser en suivant la marche à suivre expliquée sur divers forum, mais pas moyen. Security Sphere bloque tous les programmes (avast, advanced system care, et parfois aussi internet). J'ai téléchargé Pre-Scan et Malwarebyte, mais je ne peux en ouvrir aucun des deux, toutes les applications sont bloquées, je vais devenir folle...
Si quelqu'un pouvait m'aider... ce serait vraiment très gentil car je m'acharne sur l'ordinateur sans succès...

Merci d'avance.



Configuration: Windows Vista / Firefox 5.0

Utilisateur anonyme · Answer

salut essaie de lancer pre_scan en mode sans echec avec prise en charge reseau

SaletéDeVirus · Answer

Merci mais comment passer en mode sans échec? :O

Utilisateur anonyme · Answer

tu redemarres ton pc , tu tapotes la touche F5 avant le chargement de windows et tu selectionnes mode sans echec avec les fleches

SaletéDeVirus · Answer

C'est bon j'ai pu lancer pre_scan en mode sans echec, que faire maintenant? Merci

Utilisateur anonyme · Answer

il faudrait que tu postes le rapport comme indiqué via cijoint.fr

SaletéDeVirus · Answer

OK, Voici le lien

http://www.cijoint.fr/cjlink.php?file=cj201111/cijrtRzeJU.txt

Utilisateur anonyme · Answer

fais glisser une icone n'importe quel fichier sur Pre_scan , pre_script va apparaitre

Lance Pre_script , une page vierge va s'ouvrir.

selectionne tout le texte en gras ci-dessous, puis (clic droit/copier ou ctrl+c) :
___________________________________________________
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"SSBkgdUpdate"=-
"PaperPort PTD"=-
"IndexSearch"=-
"ControlCenter3"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}] 
[-HKCU\Software\LdShih]
[-HKCU\Software\Winsudate]
[-HKLM\Software\BrowserChoice]
[-HKLM\Software\Winsudate]

folder::
C:\ProgramData\jO32111DgEpN32111         

attrib::                              

clean::      
___________________________________________________

colle-le ensuite (clic droit/coller ou ctrl+V) dans la page vierge.

puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte

des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille 

poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail 

si ton bureau ne reapparait pas => ctrl+alt+supp , gestionnaire des taches => onglet fichier => nouvelle tache puis tape explorer

SaletéDeVirus · Answer

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
Process iexplore.exe killed successfully!
No active process named firefox.exe was found!
Process msnmsgr.exe killed successfully!
No active process named Teatimer.exe was found!
========== SERVICES/DRIVERS ==========
Error: No service named CLTNetCnService was found to stop!
Service\Driver key CLTNetCnService not found.
========== OTL ==========
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00000000-6E41-4FD3-8538-502F5495E5FC} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ not found.
File C:\Program Files\Ask.com\GenericAskToolbar.dll not found.
Prefs.js: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 removed from extensions.enabledItems
Folder C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ not found.
Folder C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\ not found.
Folder C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\ not found.
Folder C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\ not found.
Folder C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\ not found.
Folder C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{D4027C7F-154A-4066-A1AD-4243D8127440} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files\Ask.com\GenericAskToolbar.dll not found.
File C:\Users\DAVID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ not found.
========== FILES ==========
File\Folder C:\Users\DAVID\AppData\Local\{*} not found.
File\Folder C:\Program Files\Ask.com not found.
File\Folder C:\ProgramData\Ask not found.
========== COMMANDS ==========

 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Marina
->Temp folder emptied: 2813708 bytes
->Temporary Internet Files folder emptied: 24665691 bytes
->Java cache emptied: 74860363 bytes
->FireFox cache emptied: 46388156 bytes
->Flash cache emptied: 405 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 248202 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 142,00 mb
 
 
OTL by OldTimer - Version 3.2.31.0 log created on 11022011_125636

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

SaletéDeVirus · Answer

Voici le rapport :

http://www.cijoint.fr/cjlink.php?file=cj201111/cijP6zFdUd.txt

Utilisateur anonyme · Answer

mmmm..y'eu une erreur

fais glisser une icone n'importe quel fichier sur Pre_scan , pre_script va apparaitre

Lance Pre_script , une page vierge va s'ouvrir.

selectionne tout le texte en gras ci-dessous, puis (clic droit/copier ou ctrl+c) :
___________________________________________________
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"SSBkgdUpdate"=-
"PaperPort PTD"=-
"IndexSearch"=-
"ControlCenter3"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}] 
[-HKCU\Software\LdShih]
[-HKCU\Software\Winsudate]
[-HKLM\Software\BrowserChoice]
[-HKLM\Software\Winsudate]

folder::
C:\ProgramData\jO32111DgEpN32111         

attrib::                              

clean::      
___________________________________________________

colle-le ensuite (clic droit/coller ou ctrl+V) dans la page vierge.

puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte

des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille 

poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail 

si ton bureau ne reapparait pas => ctrl+alt+supp , gestionnaire des taches => onglet fichier => nouvelle tache puis tape explorer

SaletéDeVirus · Answer

Merci, j'ai bien fait tout cela, plus de security sphere en apparence mais mon ordi rame beaucoup et mon icone de connexion internet affiche une info bulle : "statut de la connexion inconnu / Echec de l'exécution du serveur".

Utilisateur anonyme · Answer

je peux avoir le rapport ?

SaletéDeVirus · Answer

Pardon pour le retard, voici le rapport : 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Script | 1.0.2.96 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤ XP | Vista | Seven - 32/64 bits ¤¤¤¤¤

Mise à jour : 17/10/2011 | 00.40 Par g3n-h@ckm@n
Utilisateur : Marina (Administrateurs)
Ordinateur : PC-DE-MARINA
Système d'exploitation : Windows Vista (TM) Home Basic (32 bits)
Internet Explorer : 8.0.6001.19154
Mozilla Firefox : 5.0 (fr)

Switchs possibles :

processes:: | file:: | folder:: | Registry::
Driver:: | replace:: | DNS:: | Command:: 
attrib:: | txt:: | Host:: | NsLook::
list:: | IP:: | ADS:: | Kill:: | clean::

Script : 13:33:14

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤


Modification du registre effectuée

¤

Supprimé : C:\ProgramData\jO32111DgEpN32111 

¤

Disques externes : 6 Objets réattribués
Disque Local : 13 Objets réattribués
Utilisateurs : 1 Objets réattribués
ProgramFiles : 12 Objets réattribués
Music : 190 Objets réattribués
Pictures : 15 Objets réattribués
Videos : 0 Objets réattribués
Downloads : 0 Objets réattribués
Desktop : 13 Objets réattribués
Links : 0 Objets réattribués
Searches : 0 Objets réattribués
Contacts : 0 Objets réattribués
Saved Games : 0 Objets réattribués
Favorites : 0 Objets réattribués
Documents : 45 Objets réattribués
Windows : 49 Objets réattribués
StartMenu : 2 Objets réattribués
Librairies : 0 Objets réattribués
Quick Launch : 0 Objets réattribués
%AppData% : 17 Objets réattribués

¤


¤¤¤¤¤¤¤¤¤¤ | Nettoyage disque

Nettoyage du disque effectué

¤

Fin : 13:36:47

¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤



Sinon, en plus de l'icone internet qui merdouille, j'ai des messages d'erreurs indiquant que Vista Registration a cessé de fonctionner. Merci.

Utilisateur anonyme · Answer

&#9654 Télécharge Reload_TDSSKiller

&#9654 Lance le 

choisis : lancer le nettoyage

l'outil va automatiquement télécharger la derniere version puis 

TDSSKiller va s'ouvrir , clique sur "Start Scan"

Si TDSS.tdl2 est détecté l''option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté assure toi que Cure est bien cochée.
Si TDSS.tdl4(\HardDisk0\MBR) est détecté assure toi que Cure est bien cochée.
Si Suspicious file est indiqué, laisse l''option cochée sur Skip 
Si Rootkit.Win32.ZAccess.* est détecté règle sur "cure" en haut , et "delete" en bas

une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer

sinon , ferme tdssKiller et le rapport s'affichera sur le bureau

&#9654 Copie/Colle son contenu dans ta prochaine réponse.

SaletéDeVirus · Answer

Résultat : No threats found.

Voici le rapport : 

21:00:11.0678 4840	TDSS rootkit removing tool 2.6.14.0 Oct 28 2011 11:11:01
21:00:11.0974 4840	============================================================
21:00:11.0974 4840	Current date / time: 2011/11/02 21:00:11.0974
21:00:11.0974 4840	SystemInfo:
21:00:11.0974 4840	
21:00:11.0974 4840	OS Version: 6.0.6002 ServicePack: 2.0
21:00:11.0974 4840	Product type: Workstation
21:00:11.0974 4840	ComputerName: PC-DE-MARINA
21:00:11.0974 4840	UserName: Marina
21:00:11.0974 4840	Windows directory: C:\Windows
21:00:11.0974 4840	System windows directory: C:\Windows
21:00:11.0974 4840	Processor architecture: Intel x86
21:00:11.0974 4840	Number of processors: 1
21:00:11.0974 4840	Page size: 0x1000
21:00:11.0974 4840	Boot type: Normal boot
21:00:11.0974 4840	============================================================
21:00:22.0099 4840	Initialize success
21:17:10.0124 4684	============================================================
21:17:10.0124 4684	Scan started
21:17:10.0124 4684	Mode: Manual; 
21:17:10.0124 4684	============================================================
21:17:10.0623 4684	ACPI            (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
21:17:10.0639 4684	ACPI - ok
21:17:10.0826 4684	adp94xx         (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
21:17:10.0842 4684	adp94xx - ok
21:17:10.0982 4684	adpahci         (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
21:17:10.0982 4684	adpahci - ok
21:17:11.0044 4684	adpu160m        (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
21:17:11.0044 4684	adpu160m - ok
21:17:11.0091 4684	adpu320         (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
21:17:11.0091 4684	adpu320 - ok
21:17:11.0216 4684	AFD             (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
21:17:11.0216 4684	AFD - ok
21:17:11.0388 4684	AgereSoftModem  (ce91b158fa490cf4c4d487a4130f4660) C:\Windows\system32\DRIVERS\AGRSM.sys
21:17:11.0403 4684	AgereSoftModem - ok
21:17:11.0512 4684	agp440          (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
21:17:11.0528 4684	agp440 - ok
21:17:11.0559 4684	aic78xx         (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
21:17:11.0559 4684	aic78xx - ok
21:17:11.0590 4684	aliide          (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
21:17:11.0590 4684	aliide - ok
21:17:11.0731 4684	amdagp          (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
21:17:11.0731 4684	amdagp - ok
21:17:11.0762 4684	amdide          (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
21:17:11.0762 4684	amdide - ok
21:17:11.0793 4684	AmdK7           (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
21:17:11.0793 4684	AmdK7 - ok
21:17:11.0840 4684	AmdK8           (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
21:17:11.0840 4684	AmdK8 - ok
21:17:11.0965 4684	arc             (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
21:17:11.0965 4684	arc - ok
21:17:12.0043 4684	arcsas          (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
21:17:12.0043 4684	arcsas - ok
21:17:12.0105 4684	aswFsBlk        (c47623ffd181a1e7d63574dde2a0a711) C:\Windows\system32\drivers\aswFsBlk.sys
21:17:12.0121 4684	aswFsBlk - ok
21:17:12.0199 4684	aswMonFlt       (4804753a4ec7d67cc22d226bffd1c1e3) C:\Windows\system32\drivers\aswMonFlt.sys
21:17:12.0199 4684	aswMonFlt - ok
21:17:12.0261 4684	aswRdr          (36239e24470a3dd81fae37510953cc6c) C:\Windows\system32\drivers\aswRdr.sys
21:17:12.0277 4684	aswRdr - ok
21:17:12.0386 4684	aswSnx          (caa846e9c83836bdc3d2d700c678db65) C:\Windows\system32\drivers\aswSnx.sys
21:17:12.0386 4684	aswSnx - ok
21:17:12.0480 4684	aswSP           (748ae7f2d7da33adb063fe05704a9969) C:\Windows\system32\drivers\aswSP.sys
21:17:12.0480 4684	aswSP - ok
21:17:12.0620 4684	aswTdi          (ca9925ce1dbd07ffe1eb357752cf5577) C:\Windows\system32\drivers\aswTdi.sys
21:17:12.0620 4684	aswTdi - ok
21:17:12.0729 4684	AsyncMac        (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
21:17:12.0729 4684	AsyncMac - ok
21:17:12.0776 4684	atapi           (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
21:17:12.0776 4684	atapi - ok
21:17:12.0932 4684	athr            (ca6078dda7cf80fec230d9478bbe6c1b) C:\Windows\system32\DRIVERS\athr.sys
21:17:12.0948 4684	athr - ok
21:17:13.0104 4684	Beep            (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
21:17:13.0104 4684	Beep - ok
21:17:13.0182 4684	blbdrive        (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
21:17:13.0182 4684	blbdrive - ok
21:17:13.0244 4684	bowser          (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
21:17:13.0244 4684	bowser - ok
21:17:13.0353 4684	BrFiltLo        (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
21:17:13.0353 4684	BrFiltLo - ok
21:17:13.0400 4684	BrFiltUp        (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
21:17:13.0400 4684	BrFiltUp - ok
21:17:13.0462 4684	Brserid         (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
21:17:13.0462 4684	Brserid - ok
21:17:13.0494 4684	BrSerWdm        (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
21:17:13.0494 4684	BrSerWdm - ok
21:17:13.0603 4684	BrUsbMdm        (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
21:17:13.0603 4684	BrUsbMdm - ok
21:17:13.0650 4684	BrUsbSer        (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
21:17:13.0650 4684	BrUsbSer - ok
21:17:13.0712 4684	BTHMODEM        (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
21:17:13.0712 4684	BTHMODEM - ok
21:17:13.0821 4684	cdfs            (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
21:17:13.0821 4684	cdfs - ok
21:17:13.0899 4684	cdrom           (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
21:17:13.0899 4684	cdrom - ok
21:17:13.0930 4684	circlass        (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
21:17:13.0946 4684	circlass - ok
21:17:14.0024 4684	CLFS            (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
21:17:14.0024 4684	CLFS - ok
21:17:14.0180 4684	CmBatt          (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
21:17:14.0180 4684	CmBatt - ok
21:17:14.0211 4684	cmdide          (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
21:17:14.0227 4684	cmdide - ok
21:17:14.0258 4684	Compbatt        (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
21:17:14.0258 4684	Compbatt - ok
21:17:14.0383 4684	crcdisk         (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
21:17:14.0383 4684	crcdisk - ok
21:17:14.0430 4684	Crusoe          (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
21:17:14.0430 4684	Crusoe - ok
21:17:14.0539 4684	DfsC            (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
21:17:14.0539 4684	DfsC - ok
21:17:14.0695 4684	disk            (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
21:17:14.0695 4684	disk - ok
21:17:14.0835 4684	drmkaud         (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
21:17:14.0851 4684	drmkaud - ok
21:17:14.0898 4684	DXGKrnl         (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
21:17:14.0913 4684	DXGKrnl - ok
21:17:15.0038 4684	E1G60           (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
21:17:15.0038 4684	E1G60 - ok
21:17:15.0132 4684	Ecache          (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
21:17:15.0132 4684	Ecache - ok
21:17:15.0256 4684	elxstor         (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
21:17:15.0272 4684	elxstor - ok
21:17:15.0319 4684	ErrDev          (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
21:17:15.0319 4684	ErrDev - ok
21:17:15.0475 4684	exfat           (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
21:17:15.0475 4684	exfat - ok
21:17:15.0537 4684	fastfat         (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
21:17:15.0537 4684	fastfat - ok
21:17:15.0662 4684	fdc             (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
21:17:15.0662 4684	fdc - ok
21:17:15.0709 4684	FileInfo        (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
21:17:15.0709 4684	FileInfo - ok
21:17:15.0787 4684	Filetrace       (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
21:17:15.0787 4684	Filetrace - ok
21:17:15.0880 4684	flpydisk        (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
21:17:15.0880 4684	flpydisk - ok
21:17:15.0943 4684	FltMgr          (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
21:17:15.0943 4684	FltMgr - ok
21:17:16.0036 4684	Fs_Rec          (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
21:17:16.0052 4684	Fs_Rec - ok
21:17:16.0083 4684	FwLnk           (cbc22823628544735625b280665e434e) C:\Windows\system32\DRIVERS\FwLnk.sys
21:17:16.0099 4684	FwLnk - ok
21:17:16.0146 4684	gagp30kx        (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
21:17:16.0146 4684	gagp30kx - ok
21:17:16.0348 4684	HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
21:17:16.0348 4684	HdAudAddService - ok
21:17:16.0411 4684	HDAudBus        (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
21:17:16.0426 4684	HDAudBus - ok
21:17:16.0536 4684	HidBth          (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
21:17:16.0536 4684	HidBth - ok
21:17:16.0567 4684	HidIr           (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
21:17:16.0567 4684	HidIr - ok
21:17:16.0692 4684	HidUsb          (854ca287ab7faf949617a788306d967e) C:\Windows\system32\DRIVERS\hidusb.sys
21:17:16.0692 4684	HidUsb - ok
21:17:16.0738 4684	HpCISSs         (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
21:17:16.0738 4684	HpCISSs - ok
21:17:16.0816 4684	HSFHWAZL        (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
21:17:16.0816 4684	HSFHWAZL - ok
21:17:16.0926 4684	HSF_DPV         (ec36f1d542ed4252390d446bf6d4dfd0) C:\Windows\system32\DRIVERS\VSTDPV3.SYS
21:17:16.0957 4684	HSF_DPV - ok
21:17:17.0019 4684	HTTP            (0eeeca26c8d4bde2a4664db058a81937) C:\Windows\system32\drivers\HTTP.sys
21:17:17.0035 4684	HTTP - ok
21:17:17.0128 4684	i2omp           (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
21:17:17.0128 4684	i2omp - ok
21:17:17.0253 4684	i8042prt        (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
21:17:17.0253 4684	i8042prt - ok
21:17:17.0331 4684	iaStor          (e5a0034847537eaee3c00349d5c34c5f) C:\Windows\system32\DRIVERS\iaStor.sys
21:17:17.0331 4684	iaStor - ok
21:17:17.0425 4684	iaStorV         (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
21:17:17.0440 4684	iaStorV - ok
21:17:17.0534 4684	igfx            (038815297078d236d8cc064c295a74c6) C:\Windows\system32\DRIVERS\igdkmd32.sys
21:17:17.0565 4684	igfx - ok
21:17:17.0690 4684	iirsp           (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
21:17:17.0690 4684	iirsp - ok
21:17:17.0830 4684	IntcAzAudAddService (8a4341616976e47712b60f18c7049dcc) C:\Windows\system32\drivers\RTKVHDA.sys
21:17:17.0862 4684	IntcAzAudAddService - ok
21:17:17.0986 4684	IntcHdmiAddService (98d303ccb3415e9202e82043b37d66dc) C:\Windows\system32\drivers\IntcHdmi.sys
21:17:17.0986 4684	IntcHdmiAddService - ok
21:17:18.0033 4684	intelide        (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
21:17:18.0033 4684	intelide - ok
21:17:18.0127 4684	intelppm        (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
21:17:18.0127 4684	intelppm - ok
21:17:18.0283 4684	IpFilterDriver  (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:17:18.0283 4684	IpFilterDriver - ok
21:17:18.0298 4684	IpInIp - ok
21:17:18.0345 4684	IPMIDRV         (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
21:17:18.0345 4684	IPMIDRV - ok
21:17:18.0376 4684	IPNAT           (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
21:17:18.0392 4684	IPNAT - ok
21:17:18.0501 4684	IRENUM          (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
21:17:18.0501 4684	IRENUM - ok
21:17:18.0548 4684	isapnp          (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
21:17:18.0548 4684	isapnp - ok
21:17:18.0610 4684	iScsiPrt        (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
21:17:18.0610 4684	iScsiPrt - ok
21:17:18.0813 4684	iteatapi        (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
21:17:18.0813 4684	iteatapi - ok
21:17:18.0938 4684	iteraid         (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
21:17:18.0938 4684	iteraid - ok
21:17:18.0969 4684	kbdclass        (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
21:17:18.0969 4684	kbdclass - ok
21:17:19.0094 4684	kbdhid          (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\DRIVERS\kbdhid.sys
21:17:19.0094 4684	kbdhid - ok
21:17:19.0141 4684	KSecDD          (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
21:17:19.0156 4684	KSecDD - ok
21:17:19.0281 4684	lltdio          (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
21:17:19.0281 4684	lltdio - ok
21:17:19.0344 4684	LSI_FC          (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
21:17:19.0344 4684	LSI_FC - ok
21:17:19.0375 4684	LSI_SAS         (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
21:17:19.0375 4684	LSI_SAS - ok
21:17:19.0531 4684	LSI_SCSI        (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
21:17:19.0531 4684	LSI_SCSI - ok
21:17:19.0562 4684	luafv           (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
21:17:19.0578 4684	luafv - ok
21:17:19.0671 4684	MBAMSwissArmy - ok
21:17:19.0718 4684	megasas         (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
21:17:19.0718 4684	megasas - ok
21:17:19.0765 4684	MegaSR          (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
21:17:19.0765 4684	MegaSR - ok
21:17:19.0827 4684	Modem           (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
21:17:19.0827 4684	Modem - ok
21:17:19.0921 4684	monitor         (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
21:17:19.0921 4684	monitor - ok
21:17:19.0952 4684	mouclass        (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
21:17:19.0952 4684	mouclass - ok
21:17:19.0999 4684	mouhid          (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
21:17:19.0999 4684	mouhid - ok
21:17:20.0108 4684	MountMgr        (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
21:17:20.0108 4684	MountMgr - ok
21:17:20.0186 4684	mpio            (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
21:17:20.0186 4684	mpio - ok
21:17:20.0280 4684	mpsdrv          (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
21:17:20.0280 4684	mpsdrv - ok
21:17:20.0326 4684	Mraid35x        (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
21:17:20.0326 4684	Mraid35x - ok
21:17:20.0404 4684	MRxDAV          (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
21:17:20.0404 4684	MRxDAV - ok
21:17:20.0514 4684	mrxsmb          (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
21:17:20.0514 4684	mrxsmb - ok
21:17:20.0592 4684	mrxsmb10        (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:17:20.0607 4684	mrxsmb10 - ok
21:17:20.0685 4684	mrxsmb20        (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:17:20.0685 4684	mrxsmb20 - ok
21:17:20.0748 4684	msahci          (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
21:17:20.0748 4684	msahci - ok
21:17:20.0794 4684	msdsm           (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
21:17:20.0794 4684	msdsm - ok
21:17:20.0888 4684	Msfs            (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
21:17:20.0888 4684	Msfs - ok
21:17:20.0935 4684	msisadrv        (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
21:17:20.0935 4684	msisadrv - ok
21:17:20.0997 4684	MSKSSRV         (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
21:17:20.0997 4684	MSKSSRV - ok
21:17:21.0091 4684	MSPCLOCK        (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
21:17:21.0091 4684	MSPCLOCK - ok
21:17:21.0153 4684	MSPQM           (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
21:17:21.0153 4684	MSPQM - ok
21:17:21.0216 4684	MsRPC           (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
21:17:21.0231 4684	MsRPC - ok
21:17:21.0294 4684	mssmbios        (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
21:17:21.0294 4684	mssmbios - ok
21:17:21.0356 4684	MSTEE           (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
21:17:21.0356 4684	MSTEE - ok
21:17:21.0403 4684	Mup             (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
21:17:21.0403 4684	Mup - ok
21:17:21.0512 4684	NativeWifiP     (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS
wifi.sys
21:17:21.0528 4684	NativeWifiP - ok
21:17:21.0606 4684	NDIS            (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers
dis.sys
21:17:21.0621 4684	NDIS - ok
21:17:21.0699 4684	NdisTapi        (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS
distapi.sys
21:17:21.0699 4684	NdisTapi - ok
21:17:21.0746 4684	Ndisuio         (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS
disuio.sys
21:17:21.0746 4684	Ndisuio - ok
21:17:21.0808 4684	NdisWan         (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS
diswan.sys
21:17:21.0808 4684	NdisWan - ok
21:17:21.0824 4684	NDProxy         (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
21:17:21.0840 4684	NDProxy - ok
21:17:21.0933 4684	NetBIOS         (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS
etbios.sys
21:17:21.0949 4684	NetBIOS - ok
21:17:22.0011 4684	netbt           (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS
etbt.sys
21:17:22.0027 4684	netbt - ok
21:17:22.0136 4684	nfrd960         (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers
frd960.sys
21:17:22.0136 4684	nfrd960 - ok
21:17:22.0198 4684	Npfs            (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
21:17:22.0214 4684	Npfs - ok
21:17:22.0245 4684	nsiproxy        (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers
siproxy.sys
21:17:22.0245 4684	nsiproxy - ok
21:17:22.0386 4684	Ntfs            (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
21:17:22.0401 4684	Ntfs - ok
21:17:22.0510 4684	ntrigdigi       (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers
trigdigi.sys
21:17:22.0510 4684	ntrigdigi - ok
21:17:22.0557 4684	Null            (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
21:17:22.0557 4684	Null - ok
21:17:22.0588 4684	nvraid          (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers
vraid.sys
21:17:22.0588 4684	nvraid - ok
21:17:22.0713 4684	nvstor          (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers
vstor.sys
21:17:22.0713 4684	nvstor - ok
21:17:22.0744 4684	nv_agp          (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers
v_agp.sys
21:17:22.0760 4684	nv_agp - ok
21:17:22.0776 4684	NwlnkFlt - ok
21:17:22.0791 4684	NwlnkFwd - ok
21:17:22.0916 4684	ohci1394        (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys
21:17:22.0932 4684	ohci1394 - ok
21:17:23.0010 4684	Parport         (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
21:17:23.0010 4684	Parport - ok
21:17:23.0181 4684	partmgr         (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
21:17:23.0181 4684	partmgr - ok
21:17:23.0275 4684	Parvdm          (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
21:17:23.0275 4684	Parvdm - ok
21:17:23.0415 4684	pci             (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
21:17:23.0415 4684	pci - ok
21:17:23.0478 4684	pciide          (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
21:17:23.0478 4684	pciide - ok
21:17:23.0587 4684	pcmcia          (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
21:17:23.0602 4684	pcmcia - ok
21:17:23.0680 4684	PEAUTH          (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
21:17:23.0696 4684	PEAUTH - ok
21:17:23.0977 4684	PptpMiniport    (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERSaspptp.sys
21:17:23.0992 4684	PptpMiniport - ok
21:17:24.0039 4684	Processor       (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
21:17:24.0039 4684	Processor - ok
21:17:24.0133 4684	PSched          (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
21:17:24.0133 4684	PSched - ok
21:17:24.0289 4684	ql2300          (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
21:17:24.0304 4684	ql2300 - ok
21:17:24.0429 4684	ql40xx          (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
21:17:24.0429 4684	ql40xx - ok
21:17:24.0554 4684	QWAVEdrv        (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
21:17:24.0554 4684	QWAVEdrv - ok
21:17:24.0585 4684	RasAcd          (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERSasacd.sys
21:17:24.0585 4684	RasAcd - ok
21:17:24.0757 4684	Rasl2tp         (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERSasl2tp.sys
21:17:24.0757 4684	Rasl2tp - ok
21:17:24.0866 4684	RasPppoe        (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERSaspppoe.sys
21:17:24.0866 4684	RasPppoe - ok
21:17:24.0944 4684	RasSstp         (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERSassstp.sys
21:17:24.0960 4684	RasSstp - ok
21:17:25.0069 4684	rdbss           (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERSdbss.sys
21:17:25.0069 4684	rdbss - ok
21:17:25.0131 4684	RDPCDD          (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
21:17:25.0131 4684	RDPCDD - ok
21:17:25.0350 4684	rdpdr           (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\driversdpdr.sys
21:17:25.0350 4684	rdpdr - ok
21:17:25.0396 4684	RDPENCDD        (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\driversdpencdd.sys
21:17:25.0396 4684	RDPENCDD - ok
21:17:25.0506 4684	RDPWD           (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
21:17:25.0506 4684	RDPWD - ok
21:17:25.0677 4684	rspndr          (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERSspndr.sys
21:17:25.0677 4684	rspndr - ok
21:17:25.0896 4684	RTL8169         (8cca591019216e9523e3cb385ce643e6) C:\Windows\system32\DRIVERS\Rtlh86.sys
21:17:25.0896 4684	RTL8169 - ok
21:17:26.0005 4684	RTL8187B        (b71d269b9ab5417963e986126c12b9fc) C:\Windows\system32\DRIVERS\RTL8187B.sys
21:17:26.0020 4684	RTL8187B - ok
21:17:26.0083 4684	RtlProt         (0d60b8c10a2c5e8dd620b3fdeb1cda64) C:\Windows\system32\DRIVERStlprot.sys
21:17:26.0098 4684	RtlProt - ok
21:17:26.0239 4684	RTSTOR          (01c64783db1f40e1e3df67dd36199b35) C:\Windows\system32\drivers\RTSTOR.SYS
21:17:26.0254 4684	RTSTOR - ok
21:17:26.0301 4684	sbp2port        (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
21:17:26.0317 4684	sbp2port - ok
21:17:26.0364 4684	secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
21:17:26.0379 4684	secdrv - ok
21:17:26.0629 4684	Serenum         (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
21:17:26.0644 4684	Serenum - ok
21:17:26.0691 4684	Serial          (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
21:17:26.0691 4684	Serial - ok
21:17:26.0738 4684	sermouse        (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
21:17:26.0738 4684	sermouse - ok
21:17:26.0863 4684	sffdisk         (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
21:17:26.0878 4684	sffdisk - ok
21:17:26.0941 4684	sffp_mmc        (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
21:17:26.0941 4684	sffp_mmc - ok
21:17:26.0972 4684	sffp_sd         (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
21:17:26.0972 4684	sffp_sd - ok
21:17:27.0019 4684	sfloppy         (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
21:17:27.0019 4684	sfloppy - ok
21:17:27.0128 4684	sisagp          (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
21:17:27.0128 4684	sisagp - ok
21:17:27.0175 4684	SiSRaid2        (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
21:17:27.0175 4684	SiSRaid2 - ok
21:17:27.0222 4684	SiSRaid4        (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
21:17:27.0222 4684	SiSRaid4 - ok
21:17:27.0346 4684	Smb             (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
21:17:27.0362 4684	Smb - ok
21:17:27.0424 4684	spldr           (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
21:17:27.0440 4684	spldr - ok
21:17:27.0534 4684	srv             (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
21:17:27.0549 4684	srv - ok
21:17:27.0596 4684	srv2            (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
21:17:27.0596 4684	srv2 - ok
21:17:27.0627 4684	srvnet          (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
21:17:27.0643 4684	srvnet - ok
21:17:27.0752 4684	swenum          (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
21:17:27.0752 4684	swenum - ok
21:17:27.0814 4684	Symc8xx         (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
21:17:27.0814 4684	Symc8xx - ok
21:17:27.0861 4684	Sym_hi          (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
21:17:27.0861 4684	Sym_hi - ok
21:17:27.0970 4684	Sym_u3          (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
21:17:27.0970 4684	Sym_u3 - ok
21:17:28.0111 4684	SynTP           (55f6e55cc2430ca8713387106fa79817) C:\Windows\system32\DRIVERS\SynTP.sys
21:17:28.0111 4684	SynTP - ok
21:17:28.0204 4684	Tcpip           (2756186e287139310997090797e0182b) C:\Windows\system32\drivers	cpip.sys
21:17:28.0204 4684	Tcpip - ok
21:17:28.0329 4684	Tcpip6          (2756186e287139310997090797e0182b) C:\Windows\system32\DRIVERS	cpip.sys
21:17:28.0329 4684	Tcpip6 - ok
21:17:28.0392 4684	tcpipreg        (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers	cpipreg.sys
21:17:28.0407 4684	tcpipreg - ok
21:17:28.0470 4684	tdcmdpst        (1825bceb47bf41c5a9f0e44de82fc27a) C:\Windows\system32\DRIVERS	dcmdpst.sys
21:17:28.0485 4684	tdcmdpst - ok
21:17:28.0594 4684	TDPIPE          (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers	dpipe.sys
21:17:28.0594 4684	TDPIPE - ok
21:17:28.0626 4684	TDTCP           (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers	dtcp.sys
21:17:28.0626 4684	TDTCP - ok
21:17:28.0750 4684	tdx             (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS	dx.sys
21:17:28.0891 4684	tdx - ok
21:17:29.0031 4684	TermDD          (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS	ermdd.sys
21:17:29.0047 4684	TermDD - ok
21:17:29.0140 4684	tos_sps32       (1ea5f27c29405bf49799feca77186da9) C:\Windows\system32\DRIVERS	os_sps32.sys
21:17:29.0140 4684	tos_sps32 - ok
21:17:29.0265 4684	tssecsrv        (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS	ssecsrv.sys
21:17:29.0265 4684	tssecsrv - ok
21:17:29.0312 4684	tunmp           (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS	unmp.sys
21:17:29.0312 4684	tunmp - ok
21:17:29.0359 4684	tunnel          (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS	unnel.sys
21:17:29.0359 4684	tunnel - ok
21:17:29.0421 4684	TVALZ           (792a8b80f8188aba4b2be271583f3e46) C:\Windows\system32\DRIVERS\TVALZ_O.SYS
21:17:29.0421 4684	TVALZ - ok
21:17:29.0562 4684	uagp35          (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
21:17:29.0562 4684	uagp35 - ok
21:17:29.0608 4684	udfs            (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
21:17:29.0624 4684	udfs - ok
21:17:29.0764 4684	uliagpkx        (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
21:17:29.0764 4684	uliagpkx - ok
21:17:29.0796 4684	uliahci         (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
21:17:29.0811 4684	uliahci - ok
21:17:29.0842 4684	UlSata          (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
21:17:29.0858 4684	UlSata - ok
21:17:29.0983 4684	ulsata2         (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
21:17:29.0983 4684	ulsata2 - ok
21:17:30.0014 4684	umbus           (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
21:17:30.0014 4684	umbus - ok
21:17:30.0076 4684	usbccgp         (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
21:17:30.0076 4684	usbccgp - ok
21:17:30.0201 4684	usbcir          (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
21:17:30.0201 4684	usbcir - ok
21:17:30.0264 4684	usbehci         (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
21:17:30.0264 4684	usbehci - ok
21:17:30.0373 4684	usbhub          (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
21:17:30.0373 4684	usbhub - ok
21:17:30.0420 4684	usbohci         (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
21:17:30.0420 4684	usbohci - ok
21:17:30.0544 4684	usbprint        (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
21:17:30.0560 4684	usbprint - ok
21:17:30.0622 4684	usbscan         (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
21:17:30.0622 4684	usbscan - ok
21:17:30.0732 4684	USBSTOR         (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:17:30.0732 4684	USBSTOR - ok
21:17:30.0763 4684	usbuhci         (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
21:17:30.0763 4684	usbuhci - ok
21:17:30.0872 4684	usbvideo        (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
21:17:30.0888 4684	usbvideo - ok
21:17:30.0934 4684	UVCFTR          (8c5094a8ab24de7496c7c19942f2df04) C:\Windows\system32\Drivers\UVCFTR_S.SYS
21:17:30.0934 4684	UVCFTR - ok
21:17:30.0997 4684	vga             (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
21:17:31.0012 4684	vga - ok
21:17:31.0090 4684	VgaSave         (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
21:17:31.0090 4684	VgaSave - ok
21:17:31.0122 4684	viaagp          (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
21:17:31.0122 4684	viaagp - ok
21:17:31.0184 4684	ViaC7           (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
21:17:31.0184 4684	ViaC7 - ok
21:17:31.0231 4684	viaide          (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
21:17:31.0231 4684	viaide - ok
21:17:31.0324 4684	volmgr          (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
21:17:31.0324 4684	volmgr - ok
21:17:31.0418 4684	volmgrx         (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
21:17:31.0434 4684	volmgrx - ok
21:17:31.0480 4684	volsnap         (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
21:17:31.0480 4684	volsnap - ok
21:17:31.0605 4684	vsmraid         (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
21:17:31.0605 4684	vsmraid - ok
21:17:31.0683 4684	WacomPen        (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
21:17:31.0683 4684	WacomPen - ok
21:17:31.0808 4684	Wanarp          (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
21:17:31.0808 4684	Wanarp - ok
21:17:31.0824 4684	Wanarpv6        (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
21:17:31.0824 4684	Wanarpv6 - ok
21:17:31.0870 4684	Wd              (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
21:17:31.0870 4684	Wd - ok
21:17:31.0933 4684	Wdf01000        (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
21:17:31.0948 4684	Wdf01000 - ok
21:17:32.0104 4684	winachsf        (5c7bdcf5864db00323fe2d90fa26a8a2) C:\Windows\system32\DRIVERS\VSTCNXT3.SYS
21:17:32.0104 4684	winachsf - ok
21:17:32.0229 4684	WmiAcpi         (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\drivers\wmiacpi.sys
21:17:32.0229 4684	WmiAcpi - ok
21:17:32.0385 4684	WpdUsb          (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
21:17:32.0385 4684	WpdUsb - ok
21:17:32.0448 4684	ws2ifsl         (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
21:17:32.0448 4684	ws2ifsl - ok
21:17:32.0588 4684	WUDFRd          (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
21:17:32.0604 4684	WUDFRd - ok
21:17:32.0682 4684	MBR (0x1B8)     (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
21:17:32.0682 4684	\Device\Harddisk0\DR0 - ok
21:17:32.0697 4684	Boot (0x1200)   (72b1f6a5e894e365fb000ae752e045c0) \Device\Harddisk0\DR0\Partition0
21:17:32.0697 4684	\Device\Harddisk0\DR0\Partition0 - ok
21:17:32.0728 4684	Boot (0x1200)   (055c5564e24c2c60a08fc76cab33ef7b) \Device\Harddisk0\DR0\Partition1
21:17:32.0728 4684	\Device\Harddisk0\DR0\Partition1 - ok
21:17:32.0728 4684	============================================================
21:17:32.0728 4684	Scan finished
21:17:32.0728 4684	============================================================
21:17:32.0744 5924	Detected object count: 0
21:17:32.0744 5924	Actual detected object count: 0

Utilisateur anonyme · Answer

explique-moi plus precisement "j'ai mon icone internet qui merdouille" ?

SaletéDeVirus · Answer

Bah en fait c'est l'icone en bas à droite de la barre des tâches, habituellement quand je suis connectée à internet il y a une planète bleue, et là depuis ce virus l'icone reste toujours avec une croix rouge, et alors qu'avant j'avais la liste des connexions disponibles, je n'ai plus rien, juste une info-bulle disant " Statut de la connexion inconnu / Echec de l'exécution du serveur".
Pourtant je suis bien connectée à internet...

Utilisateur anonyme · Answer

regarde ici pour resoudre ce souci

https://forums.commentcamarche.net/forum/affich-4203261-erreur-d-execution-du-serveur-sous-vis

SaletéDeVirus · Answer

OK Merci beaucoup à toi en tout cas, c'super gentil de m'avoir aidé et t'es super compétent jdirais :) ! au revoir

Utilisateur anonyme · Answer

c'est pas fini ^^ 

c'"est bon pour la derniere manip .?

ce souci est réglé aussi ? :

j'ai des messages d'erreurs indiquant que Vista Registration a cessé de fonctionner

SaletéDeVirus · Answer

Bonjour. Alors j'ai essayé en vain de faire cette dernière manip pour que l'icone redevienne comme avant, et pas moyen, j'ai fait tout ce qui était dit ds le forum avec invite de commande etc, et quand je redémarre, l'icone est toujours barrée...

Ensuite concernant Vista registration, j'ai un message d'erreur à l'allumage de l'ordinateur : Vista Registration a cessé de fonctionner, Windows va fermer ce programme et vous indiquer si une solution est possible... Mais n'indique rien...

Merci

juju666 · Answer

Salut,

Gen est banni je reprends avec toi

&#9654 Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu''administrateur)

&#9654 Lance OTL
&#9654 Sous Personnalisation, copie-colle ce qu''il y a dans le cadre ci-dessous :

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\*.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
explorer.exe
winlogon.exe
wininit.exe
/md5stop
CREATERESTOREPOINT
nslookup www.google.fr /c 
&#9654 Clique sur le bouton Analyse.
&#9654 Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer les rapports.
Donnes le liens pjjoint ici ensuite pour pouvoir être consultés.

SaletéDeVirus · Answer

Voici le rapport :

http://pjjoint.malekal.com/files.php?id=u13x10f8j13r9t10n10o6s8e8t8p5e5x6c6s6s15f13w15t13

juju666 · Answer

C'est bizarre car y'a plus rien sur les log.

&#9654 Télécharge sur le bureau RogueKiller  (par tigzy)   

&#9654 &#9654 Sous Windows XP, double clic gauche   

&#9654 &#9654  Sous Vista/Seven, clique droit, lancer en tant qu'administrateur   

&#9654 Quitte tous tes programmes en cours   
&#9654 Lance RogueKiller.exe.   
&#9654 Un scan se lance, puis tu verra d''indiqué dans la fenêtre  
&#9830 1. Recherche (écrit en vert) 
&#9830 2. Suppression(écrit en rouge)  
&#9830 3. Hosts RAZ (écrit en rouge)  
&#9830 4. Proxy RAZ (écrit en rouge) 
&#9830 5. DNS RAZ (écrit en rouge) 
&#9830 6. Raccourcis RAZ (écrit en rouge) 
&#9830 0. Quitter (écrit en vert) 
&#9654  A ce moment tape 1 et valide   

&#9654 Une fois terminé, un rapport (RKreport1.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse.
&#9654 Utilise l'option 0 pour fermer RogueKiller à ce moment là.

&#9654 Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois ou a changer son nom en winlogon.exe

SaletéDeVirus · Answer

Voilà le rapport : RogueKiller V6.1.6 [01/11/2011] par Tigzy mail: tigzyRKgmailcom Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html Blog: http://tigzyrk.blogspot.com Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version Demarrage : Mode normal Utilisateur: Marina [Droits d'admin] Mode: Recherche -- Date : 03/11/2011 15:23:50 Processus malicieux: 0 Entrees de registre: 4 [HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND [HJ] HKLM\[...]\System : EnableLUA (0) -> FOUND [HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND [HJ] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND Fichiers / Dossiers particuliers: Driver: [LOADED] Fichier HOSTS: 127.0.0.1 localhost ::1 localhost Termine : << RKreport[1].txt >> RKreport[1].txt

SaletéDeVirus · Answer

Nouveau bug constaté : je ne peux plus utiliser le lecteur windows media pour écouter de la musique, dès que je lance une musique, j'ai un message d'erreur me disant : "Le Lecteur Windows Media ne peut pas accéder au fichier. Peut-être que ce dernier est en cours d'utilisation, que vous n'avez pas accès à l'ordinateur où il est stocké ou que les paramètres du proxy ne sont pas corrects."

ça ne va donc jamais finir :/

juju666 · Answer

relance rogue killer options 2 4 et 6

SaletéDeVirus · Answer

Rapport 1 : RogueKiller V6.1.6 [01/11/2011] par Tigzy mail: tigzyRKgmailcom Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html Blog: http://tigzyrk.blogspot.com Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version Demarrage : Mode normal Utilisateur: Marina [Droits d'admin] Mode: Suppression -- Date : 03/11/2011 15:56:44 Processus malicieux: 0 Entrees de registre: 2 [HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED () [HJ] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED () Fichiers / Dossiers particuliers: Driver: [LOADED] Fichier HOSTS: 127.0.0.1 localhost ::1 localhost Termine : << RKreport[2].txt >> RKreport[1].txt ; RKreport[2].txt

SaletéDeVirus · Answer

Rapport 2 : RogueKiller V6.1.6 [01/11/2011] par Tigzy mail: tigzyRKgmailcom Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html Blog: http://tigzyrk.blogspot.com Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version Demarrage : Mode normal Utilisateur: Marina [Droits d'admin] Mode: Proxy RAZ -- Date : 03/11/2011 15:57:05 Processus malicieux: 0 Driver: [LOADED] Entrees de registre: 0 Termine : << RKreport[3].txt >> RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

SaletéDeVirus · Answer

Rapport 3 : RogueKiller V6.1.6 [01/11/2011] par Tigzy mail: tigzyRKgmailcom Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html Blog: http://tigzyrk.blogspot.com Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version Demarrage : Mode normal Utilisateur: Marina [Droits d'admin] Mode: Raccourcis RAZ -- Date : 03/11/2011 15:57:50 Processus malicieux: 0 Driver: [LOADED] Attributs de fichiers restaures: Bureau: Success 11 / Fail 0 Lancement rapide: Success 0 / Fail 0 Programmes: Success 3 / Fail 0 Menu demarrer: Success 0 / Fail 0 Dossier utilisateur: Success 310 / Fail 0 Mes documents: Success 40 / Fail 0 Mes favoris: Success 0 / Fail 0 Mes images: Success 0 / Fail 0 Ma musique: Success 196 / Fail 0 Mes videos: Success 0 / Fail 0 Disques locaux: Success 48 / Fail 0 Sauvegarde: [NOT FOUND] Lecteurs: [C:] \Device\HarddiskVolume2 -- 0x3 --> Restored [D:] \Device\HarddiskVolume3 -- 0x3 --> Restored [E:] \Device\CdRom0 -- 0x5 --> Skipped Termine : << RKreport[4].txt >> RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt ; RKreport[4].txt

juju666 · Answer

retente windows media player ?

SaletéDeVirus · Answer

Toujours le même message d'erreur...

juju666 · Answer

ok ben on sort le grand jeu ! ▶ Fais un clic droit sur le lien ci dessous, choisi "Enregistrer la cible du lien sous", comme destination : ton Bureau, change son nom (ton_pseudo.exe par exemple) : http://download.bleepingcomputer.com/sUBs/ComboFix.exe ▶ Double-clique sur ComboFix.exe Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter ▶ ▶ Ne touche à rien (souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC ▶ En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire. ▶ Une fois le scan achevé, un rapport va s''afficher : Poste son contenu Notes: -> Le rapport se trouve également là : C:\ComboFix.txt -> tutoriel combofix

SaletéDeVirus · Answer

Voici le rapport :

ComboFix 11-11-03.01 - Marina 03/11/2011  17:19:32.1.1 - x86
Lancé depuis: c:\users\Marina\Desktop\Marina_S.exe
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Un nouveau point de restauration a été créé
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Marina\AppData\Roaming\Kernel32.exe
c:\users\Marina\AppData\Roaming\Microsoft\Windows\Start Menu\Pages Annuaire.lnk
c:\windows\host32.exe
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2011-10-03 au 2011-11-03  ))))))))))))))))))))))))))))))))))))
.
.
2011-11-03 16:35 . 2011-11-03 16:35	--------	d-----w-	c:\users\Default\AppData\Local	emp
2011-11-03 15:23 . 2011-11-03 15:23	253898	----a-w-	c:\programdata\1320333016.bdinstall.bin
2011-11-03 15:14 . 2011-11-03 15:14	--------	d-----w-	c:\users\Marina\AppData\Roaming\Bitdefender
2011-11-03 15:14 . 2011-11-03 15:17	--------	d-----w-	c:\programdata\Bitdefender
2011-11-03 15:12 . 2011-11-03 15:12	--------	d-----w-	c:\users\Marina\AppData\Roaming\QuickScan
2011-11-03 15:11 . 2011-11-03 15:11	--------	d-----w-	c:\program files\Bitdefender
2011-11-03 15:10 . 2011-10-06 17:19	311248	----a-w-	c:\windows\system32\drivers	rufos.sys
2011-11-03 15:10 . 2011-03-24 14:36	353096	----a-w-	c:\windows\system32\drivers\bdfsfltr.sys
2011-11-03 15:10 . 2011-11-03 15:10	--------	d-----w-	c:\program files\Common Files\Bitdefender
2011-11-02 12:53 . 2011-11-02 12:53	--------	d-----w-	c:\users\Marina\AppData\Roaming\Malwarebytes
2011-11-02 12:48 . 2011-11-02 12:48	--------	d-----w-	c:\programdata\Malwarebytes
2011-11-02 11:56 . 2011-11-02 11:56	--------	d-----w-	C:\_OTL
2011-11-02 10:42 . 2011-11-02 12:36	--------	d-----w-	C:\Kill'em
2011-11-01 17:47 . 2011-10-07 03:48	6668624	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{F60B63BD-E106-478A-9FB9-E8C9E28C4236}\mpengine.dll
2011-10-25 21:03 . 2011-08-13 04:43	6144	----a-w-	c:\program files\Internet Explorer\iecompat.dll
2011-10-16 19:41 . 2011-09-30 21:28	1638912	----a-w-	c:\windows\system32\mshtml.tlb
2011-10-16 19:41 . 2011-09-14 10:51	2409784	----a-w-	c:\program files\Windows Mail\OESpamFilter.dat
2011-10-16 19:40 . 2011-08-25 16:14	238080	----a-w-	c:\windows\system32\oleacc.dll
2011-10-16 19:40 . 2011-08-25 16:15	555520	----a-w-	c:\windows\system32\UIAutomationCore.dll
2011-10-16 19:40 . 2011-08-25 16:14	563712	----a-w-	c:\windows\system32\oleaut32.dll
2011-10-16 19:40 . 2011-08-25 13:31	4096	----a-w-	c:\windows\system32\oleaccrc.dll
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-03 04:06 . 2010-12-17 20:23	472808	----a-w-	c:\windows\system32\deployJava1.dll
2011-09-29 15:09 . 2011-09-29 15:09	63056	----a-w-	c:\windows\system32\drivers\bdsandbox.sys
2011-09-01 10:15 . 2011-09-01 10:15	454960	----a-w-	c:\windows\system32\drivers\avckf.sys
2011-09-01 10:12 . 2011-09-01 10:12	596600	----a-w-	c:\windows\system32\drivers\avc3.sys
2011-09-05 12:53 . 2011-06-13 17:31	142296	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{240373D3-4199-4F41-BB4D-15D5B830C82D}]
2011-03-08 17:06	590616	----a-w-	c:\program files\TF1 CONSO.FR\iGraalBHO.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LtMoh"="c:\program files\ltmoh\Ltmoh.exe" [2007-01-09 191552]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-07 39408]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-05 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-05 154136]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-05 129560]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-29 4911104]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"NDSTray.exe"="NDSTray.exe" [BU]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information	opi.exe" [2007-07-10 581632]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba	raybar.exe" [2007-10-25 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2007-10-31 54608]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2008-01-25 509816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2008-01-22 712704]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-05-04 571024]
"PPort11reminder"="c:\program files\ScanSoft\PaperPort\Ereg\Ereg.exe" [2007-08-31 328992]
"BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2008-02-19 1089536]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"BDAgent"="c:\program files\Bitdefender\Bitdefender 2012\bdagent.exe" [2011-10-07 1146536]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files\TOSHIBA\TRDCReminder\TRDCReminder.exe [2007-7-27 389120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"PromptOnSecureDesktop"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 136176]
R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys [2011-09-01 454960]
R3 bdsandbox;bdsandbox;c:\windows\system32\drivers\bdsandbox.sys [2011-09-29 63056]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 136176]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [2007-06-06 111616]
R3 RTL8187B;Adaptateur réseau USB 2.0 54Mbps, 802.11b/g sans fil Realtek RTL8187B;c:\windows\system32\DRIVERS\RTL8187B.sys [2007-12-26 290304]
R3 Update Server;BitDefender Update Server v2;c:\program files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe [2011-10-06 307544]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys [2011-09-01 596600]
S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2011-03-01 74320]
S1 BDVEDISK;BDVEDISK;c:\windows\system32\DRIVERS\bdvedisk.sys [2010-01-19 85128]
S1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\system32\DRIVERStlprot.sys [2007-04-23 25896]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2007-12-25 40960]
S2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]
S2 UPDATESRV;BitDefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender 2012\updatesrv.exe [2011-10-06 50128]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [2006-11-20 7168]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork	REG_MULTI_SZ   	PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
.
Contenu du dossier 'Tâches planifiées'
.
2011-11-03 c:\windows\Tasks\AWC Startup.job
- c:\program files\IObit\Advanced SystemCare 3\AWC.exe [2009-10-23 07:55]
.
2011-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 18:17]
.
2011-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 18:17]
.
2011-11-02 c:\windows\Tasks\User_Feed_Synchronization-{772699FE-6D1D-4E66-9849-22B4BD2BFBD6}.job
- c:\windows\system32\msfeedssync.exe [2011-10-16 21:29]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.254
FF - ProfilePath - c:\users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\oxg6cbfc.default\
.
- - - - ORPHELINS SUPPRIMES - - - -
.
HKCU-Run-TOSCDSPD - TOSCDSPD.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-03 17:36
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ... 
.
Recherche d'éléments en démarrage automatique cachés ... 
.
Recherche de fichiers cachés ... 
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Heure de fin: 2011-11-03  17:58:31
ComboFix-quarantined-files.txt  2011-11-03 16:58
.
Avant-CF: 14 224 363 520 octets libres
Après-CF: 14 426 710 016 octets libres
.
- - End Of File - - 11AD2B2372ED5642A3F16D14F8836BD8

juju666 · Answer

redémarre.

ça va mieux ?

SaletéDeVirus · Answer

Au risque de te décourager... Non ça ne va toujours pas..
Ni le lecteur windows media,
Ni mon icone internet/centre de réseau
Ni le msg Vista Registration...

ça viendrait de Security Sphere tout ça? :/

juju666 · Answer

possible ... attention c'est une torture ce truc : ▶ Télécharge Dr Web CureIt sur ton Bureau : ▶ XP: double clic ▶ ▶ Vista/7: clic droit, exécuter en tant qu''administrateur ▶ ▶ Vista/7 : l'UAC demande confirmation > valider par Oui ▶ clique 2 fois sur Ok ▶ clique sur Commencer le scan ▶ réponds Oui ==> L''analyse rapide démarre (si un pop up s''ouvre, clique sur la croix pour le fermer) A la fin du scan rapide, il se peut que l''on te demande de restaurer le fichier hosts > Oui Ensuite: touche F9 Onglet Actions Coté Malwares: choisir Quarantaine pour Adwares, Dialers,... [TOUS] Valider par Ok ▶ choisi analyse complète et clique sur le Play vert ▶ De retour à la fenêtre principale : clique pour activer ▶ Clique le bouton avec flèche verte sur la droite, et le scan débutera. ▶ Clique pour tout à l''invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter". >> Si tu as un soucis (la mémoire ne peut pas être Read) clique deux fois sur ok et redémarre en mode sans échec, refais les mêmes manipulations ▶ Lorsque le scan sera complété, regarde si tu peux cliquer sur l'icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l''autre). Si oui, alors clique dessus et ensuite clique sur l''icône , au dessous, et choisis . ▶ Du menu principal de l'outil, au haut à gauche, clique sur le menu et choisis . Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv ▶ Ferme Dr.Web Cureit ▶ Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage). ▶ Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse

SaletéDeVirus · Answer

Pardon pour le retard, mais waou ces analyses sont super longues :o
A la fin de l'analyse complète j'ai voulu enregistrer le rapport et hop écran bleu et l'ordi a redémarré... donc je ne trouve pas le rapport.. Le logiciel avait trouvé un trojan dans le logiciel OTL...

juju666 · Answer

t'avais prévenu que c'était de la torture :p

de l'amélioration ou non ?
c'est quoi le soucis actuel ?

SaletéDeVirus · Answer

ça rameeee beaucoup.. mais bon c'est supportable... En fait cqui est chiant c'est que jpeux toujours lire aucun de mes fichiers avec le lecteur windows media, toujours le msg d'erreur de Vista Registration au démarrage, l'icone internet qui merdouille comme je t'avais expliqué, et puis quand je lance un programme genre windows live messenger, j'ai un msg d'erreur aussi du type "Le programme a cessé de fonctionner"... Nianiania et ça se ferme...
Windows a pris un coup dans l'aile tu crois? 

A oui et quand le virus avait été trouvé par Doctorweb, j'avais mis désinfecter, ça n'a pas marché, c'était juste écrit Irrépable-Mise en quarantaine.

Voilou...

juju666 · Answer

Réparons les fichiers système :

&#9654 Ouvre ton menu démarrer 

-> Si tu es sur XP, ouvre exécuter, tape cmd et valide par pression sur la touche Enter

-> Sur Vista/Seven, dans le champ "Recherche" tape cmd , sur le résultat qui apparait, clic droit > exécuter en tant qu'administrateur

&#9654 Dans la fenêtre noire, tape sfc /scannow et laisse Windows réparer les fichiers.

SaletéDeVirus · Answer

Alors alors, résultat de l'analyse :

La protection des ressources Windows a trouvé des fichiers endommagés, mais n'a pas réussi à tous les réparer. Des détails sont inclus dans le journal CBS.log...

Et quand j'essaye d'ouvrir ce rapport, j'ai accès refusé grrrrr.

juju666 · Answer

lol lance ça : http://dl.dropbox.com/u/22950063/sfcdetails.bat

SaletéDeVirus · Answer

LOL, non mais la poisse... Ca me dit réussi, appuyer sur une touche etc pour afficher le rapport, et là message d'erreur le rapport n'a pas pu être trouvé...

juju666 · Answer

t as lancé en clic droit > exécuter en tant qu'administrateur ? :D

SaletéDeVirus · Answer

Oups, j'suis nulle :) Voila :

2011-11-03 09:30:03, Info                  CSI    0000015d [SR] Cannot repair member file [l:18{9}]"img19.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    0000015e [SR] Cannot repair member file [l:18{9}]"img18.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    0000015f [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000160 [SR] Cannot repair member file [l:18{9}]"img16.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000161 [SR] Cannot repair member file [l:18{9}]"img15.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000162 [SR] Cannot repair member file [l:18{9}]"img35.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000163 [SR] Cannot repair member file [l:18{9}]"img14.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000164 [SR] Cannot repair member file [l:18{9}]"img34.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000165 [SR] Cannot repair member file [l:18{9}]"img13.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000166 [SR] Cannot repair member file [l:18{9}]"img23.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000167 [SR] Cannot repair member file [l:18{9}]"img33.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000168 [SR] Cannot repair member file [l:18{9}]"img12.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000169 [SR] Cannot repair member file [l:18{9}]"img22.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    0000016a [SR] Cannot repair member file [l:18{9}]"img11.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    0000016b [SR] Cannot repair member file [l:18{9}]"img21.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    0000016c [SR] Cannot repair member file [l:18{9}]"img31.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    0000016d [SR] Cannot repair member file [l:18{9}]"img10.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    0000016e [SR] Cannot repair member file [l:18{9}]"img20.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    0000016f [SR] Cannot repair member file [l:18{9}]"img30.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000170 [SR] Cannot repair member file [l:16{8}]"img1.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000171 [SR] Cannot repair member file [l:16{8}]"img3.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000172 [SR] Cannot repair member file [l:16{8}]"img4.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000173 [SR] Cannot repair member file [l:16{8}]"img5.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000174 [SR] Cannot repair member file [l:16{8}]"img6.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000175 [SR] Cannot repair member file [l:16{8}]"img7.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000176 [SR] Cannot repair member file [l:16{8}]"img8.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:04, Info                  CSI    00000177 [SR] Cannot repair member file [l:16{8}]"img9.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:06, Info                  CSI    00000179 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2011-11-03 09:30:10, Info                  CSI    0000017b [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2011-11-03 09:30:12, Info                  CSI    0000017d [SR] Cannot repair member file [l:18{9}]"img19.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    0000017f [SR] Cannot repair member file [l:18{9}]"img18.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000181 [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000183 [SR] Cannot repair member file [l:18{9}]"img16.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000185 [SR] Cannot repair member file [l:18{9}]"img15.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000187 [SR] Cannot repair member file [l:18{9}]"img35.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000189 [SR] Cannot repair member file [l:18{9}]"img14.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    0000018b [SR] Cannot repair member file [l:18{9}]"img34.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    0000018d [SR] Cannot repair member file [l:18{9}]"img13.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    0000018f [SR] Cannot repair member file [l:18{9}]"img23.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000191 [SR] Cannot repair member file [l:18{9}]"img33.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000193 [SR] Cannot repair member file [l:18{9}]"img12.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000195 [SR] Cannot repair member file [l:18{9}]"img22.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000197 [SR] Cannot repair member file [l:18{9}]"img11.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    00000199 [SR] Cannot repair member file [l:18{9}]"img21.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    0000019b [SR] Cannot repair member file [l:18{9}]"img31.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    0000019d [SR] Cannot repair member file [l:18{9}]"img10.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    0000019f [SR] Cannot repair member file [l:18{9}]"img20.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001a1 [SR] Cannot repair member file [l:18{9}]"img30.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001a3 [SR] Cannot repair member file [l:16{8}]"img1.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001a5 [SR] Cannot repair member file [l:16{8}]"img3.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001a7 [SR] Cannot repair member file [l:16{8}]"img4.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001a9 [SR] Cannot repair member file [l:16{8}]"img5.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001ab [SR] Cannot repair member file [l:16{8}]"img6.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001ad [SR] Cannot repair member file [l:16{8}]"img7.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001af [SR] Cannot repair member file [l:16{8}]"img8.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:30:12, Info                  CSI    000001b1 [SR] Cannot repair member file [l:16{8}]"img9.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000015d [SR] Cannot repair member file [l:18{9}]"img19.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000015e [SR] Cannot repair member file [l:18{9}]"img18.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000015f [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000160 [SR] Cannot repair member file [l:18{9}]"img16.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000161 [SR] Cannot repair member file [l:18{9}]"img15.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000162 [SR] Cannot repair member file [l:18{9}]"img35.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000163 [SR] Cannot repair member file [l:18{9}]"img14.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000164 [SR] Cannot repair member file [l:18{9}]"img34.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000165 [SR] Cannot repair member file [l:18{9}]"img13.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000166 [SR] Cannot repair member file [l:18{9}]"img23.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000167 [SR] Cannot repair member file [l:18{9}]"img33.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000168 [SR] Cannot repair member file [l:18{9}]"img12.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000169 [SR] Cannot repair member file [l:18{9}]"img22.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000016a [SR] Cannot repair member file [l:18{9}]"img11.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000016b [SR] Cannot repair member file [l:18{9}]"img21.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000016c [SR] Cannot repair member file [l:18{9}]"img31.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000016d [SR] Cannot repair member file [l:18{9}]"img10.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000016e [SR] Cannot repair member file [l:18{9}]"img20.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    0000016f [SR] Cannot repair member file [l:18{9}]"img30.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000170 [SR] Cannot repair member file [l:16{8}]"img1.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000171 [SR] Cannot repair member file [l:16{8}]"img3.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000172 [SR] Cannot repair member file [l:16{8}]"img4.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000173 [SR] Cannot repair member file [l:16{8}]"img5.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000174 [SR] Cannot repair member file [l:16{8}]"img6.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000175 [SR] Cannot repair member file [l:16{8}]"img7.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000176 [SR] Cannot repair member file [l:16{8}]"img8.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:32, Info                  CSI    00000177 [SR] Cannot repair member file [l:16{8}]"img9.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:34, Info                  CSI    00000179 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2011-11-03 09:58:36, Info                  CSI    0000017b [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2011-11-03 09:58:38, Info                  CSI    0000017d [SR] Cannot repair member file [l:18{9}]"img19.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    0000017f [SR] Cannot repair member file [l:18{9}]"img18.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000181 [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000183 [SR] Cannot repair member file [l:18{9}]"img16.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000185 [SR] Cannot repair member file [l:18{9}]"img15.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000187 [SR] Cannot repair member file [l:18{9}]"img35.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000189 [SR] Cannot repair member file [l:18{9}]"img14.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    0000018b [SR] Cannot repair member file [l:18{9}]"img34.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    0000018d [SR] Cannot repair member file [l:18{9}]"img13.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    0000018f [SR] Cannot repair member file [l:18{9}]"img23.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000191 [SR] Cannot repair member file [l:18{9}]"img33.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000193 [SR] Cannot repair member file [l:18{9}]"img12.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000195 [SR] Cannot repair member file [l:18{9}]"img22.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000197 [SR] Cannot repair member file [l:18{9}]"img11.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    00000199 [SR] Cannot repair member file [l:18{9}]"img21.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    0000019b [SR] Cannot repair member file [l:18{9}]"img31.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    0000019d [SR] Cannot repair member file [l:18{9}]"img10.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    0000019f [SR] Cannot repair member file [l:18{9}]"img20.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001a1 [SR] Cannot repair member file [l:18{9}]"img30.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001a3 [SR] Cannot repair member file [l:16{8}]"img1.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001a5 [SR] Cannot repair member file [l:16{8}]"img3.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001a7 [SR] Cannot repair member file [l:16{8}]"img4.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001a9 [SR] Cannot repair member file [l:16{8}]"img5.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001ab [SR] Cannot repair member file [l:16{8}]"img6.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001ad [SR] Cannot repair member file [l:16{8}]"img7.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001af [SR] Cannot repair member file [l:16{8}]"img8.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 09:58:38, Info                  CSI    000001b1 [SR] Cannot repair member file [l:16{8}]"img9.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000020a [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2011-11-03 10:00:43, Info                  CSI    0000020b [SR] Cannot repair member file [l:18{9}]"img19.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000020c [SR] Cannot repair member file [l:18{9}]"img18.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000020d [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000020e [SR] Cannot repair member file [l:18{9}]"img16.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000020f [SR] Cannot repair member file [l:18{9}]"img15.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000210 [SR] Cannot repair member file [l:18{9}]"img35.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000211 [SR] Cannot repair member file [l:18{9}]"img14.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000212 [SR] Cannot repair member file [l:18{9}]"img34.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000213 [SR] Cannot repair member file [l:18{9}]"img13.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000214 [SR] Cannot repair member file [l:18{9}]"img23.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000215 [SR] Cannot repair member file [l:18{9}]"img33.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000216 [SR] Cannot repair member file [l:18{9}]"img12.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000217 [SR] Cannot repair member file [l:18{9}]"img22.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000218 [SR] Cannot repair member file [l:18{9}]"img11.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000219 [SR] Cannot repair member file [l:18{9}]"img21.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000021a [SR] Cannot repair member file [l:18{9}]"img31.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000021b [SR] Cannot repair member file [l:18{9}]"img10.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000021c [SR] Cannot repair member file [l:18{9}]"img20.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000021d [SR] Cannot repair member file [l:18{9}]"img30.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000021e [SR] Cannot repair member file [l:16{8}]"img1.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000021f [SR] Cannot repair member file [l:16{8}]"img3.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000220 [SR] Cannot repair member file [l:16{8}]"img4.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000221 [SR] Cannot repair member file [l:16{8}]"img5.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000222 [SR] Cannot repair member file [l:16{8}]"img6.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000223 [SR] Cannot repair member file [l:16{8}]"img7.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000224 [SR] Cannot repair member file [l:16{8}]"img8.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000225 [SR] Cannot repair member file [l:16{8}]"img9.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000227 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2011-11-03 10:00:43, Info                  CSI    00000229 [SR] Cannot repair member file [l:18{9}]"img19.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000022b [SR] Cannot repair member file [l:18{9}]"img18.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000022d [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000022f [SR] Cannot repair member file [l:18{9}]"img16.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000231 [SR] Cannot repair member file [l:18{9}]"img15.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000233 [SR] Cannot repair member file [l:18{9}]"img35.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000235 [SR] Cannot repair member file [l:18{9}]"img14.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000237 [SR] Cannot repair member file [l:18{9}]"img34.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000239 [SR] Cannot repair member file [l:18{9}]"img13.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000023b [SR] Cannot repair member file [l:18{9}]"img23.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000023d [SR] Cannot repair member file [l:18{9}]"img33.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000023f [SR] Cannot repair member file [l:18{9}]"img12.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000241 [SR] Cannot repair member file [l:18{9}]"img22.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000243 [SR] Cannot repair member file [l:18{9}]"img11.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000245 [SR] Cannot repair member file [l:18{9}]"img21.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000247 [SR] Cannot repair member file [l:18{9}]"img31.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000249 [SR] Cannot repair member file [l:18{9}]"img10.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000024b [SR] Cannot repair member file [l:18{9}]"img20.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000024d [SR] Cannot repair member file [l:18{9}]"img30.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    0000024f [SR] Cannot repair member file [l:16{8}]"img1.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000251 [SR] Cannot repair member file [l:16{8}]"img3.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2011-11-03 10:00:43, Info                  CSI    00000253 [SR] Cannot repair member file [l:16{8}]"img4.jpg" of Microsoft-Windows-Shell-Wallpaper-Common, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neut

juju666 · Answer

Ouah pinaize c'est long et chiant à lire ^^

SaletéDeVirus · Answer

Ouais c'est quand même assez long.. puis pas intéressant lol..

juju666 · Answer

tout à fait :p

au fait on en est où ? tu me fais un topo des soucis actuels ?

SaletéDeVirus · Answer

Lol, toujours les mêmes...

-icone du net qui merdouille
-message "vista registration a cessé de fonctionner" au démarrage
-windows media qui refuse de lire musiques ou films
-msn qui se ferme dès l'ouverture lol
-pc qui rame 

... rien de neuf quoi

juju666 · Answer

fait ch*er :)
il me donne du fil à retordre ton ordi dis moi ^^

et franchement là je sèche :p

SaletéDeVirus · Answer

Lol bon bah.. y'a plus qu'à ouvrir la fenêtre et lancer le PC dehors je crois bien..

SaletéDeVirus · Answer

Alors en réponse de cette invite de commande j'ai : La syntaxe de cette commande est : [nom_groupe :"texte"] /DOMAIN nom_groupe /DOMAIN nom_groupe nom [...] /DOMAIN

SaletéDeVirus · Answer

L'erreur système 5 s'est produite
Accès refusé

juju666 · Answer

cmd lancé en admin ?

SaletéDeVirus · Answer

Pardon pour cette semaine de retard :S

voila j'ai rentré ce que tu m'as dit dans cmd et "la commande s'est terminée correctement" ...

Donc jvais redémarrer pour voir :).

juju666 · Answer

Nickel ! 

Donc tout est ok ? On finalise ?

juju666 · Answer

on y vient :)

Procédure d'optimisation/d'entretien/de prévention   

&#9654 Télécharge ici : PureRa (par l''editeur de JavaRa) 

&#9654 Lance-le (clic droit "executer en tant qu''administrateur" pour Vista/7) 

=> Configuration en vidéo ( merci gen-hackman ) 

&#9654 clique sur "Clean" 

&#9654 L''outil va faire son scan puis son nettoyage 

&#9654 à la fin du rapport tu auras une ligne comme ca : 

Total space cleaned: 8140878 bytes 

&#9654 transmets juste cette ligne , le reste importe peu  

------ 

&#9654 télécharge et installe Ccleaner 

&#9654 double-clique sur le fichier pour lancer l''installation  

/!\Utilisateur de Vista et windows 7 : Clique droit sur le logo de Ccleaner, « exécuter en tant qu''administrateur »  

&#9654 &#9654 une fois ouvert tu cliques sur option et puis avancé  
&#9654 tu décoches "effacer uniquement les fichiers du dossier temp de windows plus vieux que 24 heures " 
&#9654 &#9654 cliques sur nettoyeur  
&#9654 cliques sur windows et dans la colonne avancé  
&#9654 coches la première case "vieilles données du perfetch"  
&#9654 cliques sur analyse une fois l''analyse terminé  
&#9654 cliques sur "lancer le nettoyage" et sur la demande de confirmation "OK" &#9654 &#9654 cliques maintenant sur registre et puis sur "rechercher les erreurs " 
&#9654 laisses tout cochées et cliques sur "réparer les erreurs sélectionnées"  
&#9654 il te demande de sauvegarder ==> OUI  
&#9654 tu lui donnes un nom pour pouvoir la retrouver et enregistre  
&#9654 cliques sur "corriger toutes les erreurs sélectionnées" et sur la demande de confirmation ==> OK  
&#9654 Vérifie qu''il ne reste plus rien en relançant "rechercher les erreurs"  
&#9654 tu retournes dans option et tu recoches la case "effacer uniquement les fichiers du dossier temp de windows plus vieux que 24 heures" et sur nettoyeur  windows, sous avancé, tu décoches la première case "vieilles données du perfetch"  
&#9654 tu peux fermer Ccleaner  

------  

Fais une recherche des erreurs de disque : 
ouvre Ordinateur/Poste de travail => clic droit sur C: => propriétés => outils => Vérification des erreurs cliquez sur vérifier maintenant. Ensuite cochez les deux cases puis cliquez sur démarrer. Répondez oui pour le message d''avertissement et redémarrez votre système. 

------ 

Défragmente tes disques dur : 
Télécharge Deffragler, et défragmente tes disques.  

------ 

&#9654 Désactivation, puis Réactivation de la restauration système après désinfection :  

Il est nécessaire de désactiver puis réactiver la restauration système pour la purger car les points de restauration peuvent être infectés :  

XP : http://forums-fec.be/entraide/viewtopic.php?f=56&t=54 
Vista : http://forums-fec.be/entraide/viewtopic.php?f=56&t=53
Seven : http://forums-fec.be/entraide/viewtopic.php?f=56&t=52 

------  

&#9654 Maintiens tes logiciels à jour c'est important, utilise ce programme : https://www.commentcamarche.net/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
Absolument à faire.

&#9654 idem pour les Mises à jour Windows :  

Il est très important de maintenir son OS à jour car ceci comble les failles de sécurité par lesquelles les malwares ("virus") s'introduisent ... 

&#9654 Windows Update XP (uniquement avec Internet Explorer): http://update.microsoft.com/windowsupdate/v6/ 


&#9654 Windows Update Vista/Seven : cliquer sur le logo windows, dans la rechercher taper "Windows Update", cliquer sur le résultat. 

----- 

&#9654 Mets à jour Java : https://www.java.com/fr/download/uninstalltool.jsp   

&#9654 Lors de l'installation de la nouvelle version, pense à décocher la toolbar Ask !!!

&#9654 Désinstaller les anciennes versions de Java :   

&#9654 Télécharge JavaRa.zip   

&#9654 Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)   

&#9654 Double-clique sur le répertoire JavaRa obtenu.   

&#9654 Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s''afficher)   

&#9654 Clique sur Remove Older Versions.   

&#9654 Clique sur Oui pour confirmer. L''outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.   

&#9654 Un rapport va s''ouvrir, copie-colle le dans ta prochaine réponse.   

&#9654 Note : le rapport se trouve aussi là : ( C:\JavaRa.log )   

&#9654 Tu peux fermer l''application    

&#9654 &#9654 Met à jour les logiciels Adobe :  

&#9654 Reader : https://get2.adobe.com/fr/reader/otherversions/ 

&#9654 Flash Player: https://get.adobe.com/flashplayer/?loc=fr 

----- 

Si tu utilise FireFox, vérifie que tes plug in sont à jour : https://support.mozilla.org/en-US/kb/npapi-plugins 

----- 

&#9654 &#9654 pour supprimer les outils de désinfection : 

&#9654 Télécharge et exécute Delfix sur ton bureau

&#9654 Clique sur le bouton « Suppression » et poste son rapport sur ton prochain message  
&#9654 &#9654 Pour le désinstaller, il suffit de le relancer et cliquer sur le bouton de désinstallation.  

Tutoriel : http://forums-fec.be/entraide/viewtopic.php?f=55&t=14 
------  

Tu peux garder Malwarebytes pour un scan de temps à autres  

-----  

Les antivirus ne font pas tout en ce qui concerne la sécurité de ta machine (mettre à jour ses logiciels etc etc)
La meilleur protection reste de connaître les infections pour pouvoir les éviter et avoir de bonne habitude.
Donc faut se documenter. 

Tu peux lire ce sujet sur les logiciels recommandés, et les attitudes responsables sur le web  
Et celui ci, sur les logiciels gratuits à éviter  

Si tu utilises Avast! ou AVG - regle le pour détecter les LPIs - voir : https://www.malekal.com/adwares-pup-protection/

Un peu de lecture pour éviter les infections :
- connaitre et éviter les infections : https://www.malekal.com/fichiers/projetantimalwares/ProjetAntiMalware-courte.pdf
- sécuriser son PC : http://forum.malekal.com/comment-securiser-son-ordinateur.html
- lire : http://www.commentcamarche.net/faq/27128-malwares-quels-enjeux-version-synthese

Ce qu'il ne faut pas faire :
Je télécharge n'importe quoi - je m'infecte - evite les programmes par publicités ou sur les liens commerciaux des moteurs de recherche - ce sont des arnaques ::
Les PUPs/LPIs : https://www.malekal.com/adwares-pup-protection/
Exemple de ce qu'il ne faut pas faire :
https://forums.commentcamarche.net/forum/affich-19719198-onglets-pub-intempestifs#14
https://forums.commentcamarche.net/forum/affich-18347759-le-nouveau-avast-sonne-trop-souvent#9
Je télécharge depuis n'importe où - je m'infecte : https://forums.commentcamarche.net/forum/affich-19916973-clickpotato-vlc-virus#6
Recommandations sur la sécurité : https://forums.commentcamarche.net/forum/affich-18680013-windows-7-et-antispyware#1

Fonctionnement de quelques catégories de malwares :
https://forums.commentcamarche.net/forum/affich-17725521-virus-programme-troyen
https://forums.commentcamarche.net/forum/affich-17746390-concernant-la-propagation-des-virus 
------  

&#9654 &#9654 Pense à marquer le fil comme résolu   

------  

Si tu as d'autres questions,
N'hésites pas.
On se quitte si le rapport DelFix est ok... 

@+

Security Sphere 2012, HELP please :(

58 réponses

Discussions similaires

Newsletters