Skocz do zawartości
WAŻNE - Użytkownicy uprawnieni do pomocy
WAŻNE - Zakładanie tematu: obowiązkowe logi
Nadchodzące zmiany w logowaniu

Głęboka infekcja plików wykonywalnych przez wirusa z rodziny polimorficznych + robaki

lopo

Przez lopo
w Dział pomocy doraźnej

Rekomendowane odpowiedzi

lopo

lopo

Opublikowano
Opublikowano

Witam

Proszę o pomoc w zwalczeniu infekcji mojego kompa ,walczę już od 2 tygodni i pomału wyczerpuje się moja cierpliwości oraz moja nikła wiedza w tej domenie . A więc zaczynając od początku podczas kończenia przeglądania str. internetowych wyskoczył alert Avasta 7 o wirusie (nie pamiętam nazwy) omyłkowo kliknąłem na anuluj zamiast bloku lub usuń (nie pamiętam ),no i się zaczęło samoczynny restart kompa. Po wystartowaniu i załogowaniu się pulpit wyglądał normalnie ale komputer się mulił więc zacząłem od razu skanować Avastem ,Syp-botem, oraz mbam ,ale nic nie wykryły .Miałem jeszcze trochę wolnego czasu włączyłem gierkę cod5 mp ,po paru minutach gry na serwerze wyskoczył niebieski ekran śmierci ,po włączeniu zastosowałem taką samą procedurę skanowania i aktualizacji baz ponadto aktualizowałem program Avasta i przeinstalowałem Syp-bota i znowu nic nie wykryły.. Włączyłem menadżera zadań i okazało się że nie mam podglądu wszystkich użytkowników jako administrator , ale było już późno wyłączyłem i poszedłem spać .Na drugi dzień okazało się że nie mogę w ogóle włączyć menadżera zadań przez alt+del+ctrl to spróbowałem z poziomu panelu sterowania przez narzędzia admin. Wyskoczył komunikat o braku uprawnień admin. .Od razu zacząłem ściągać z netu skanery, ots itp. ,ale za każdym razem w internet explorer 9 po zakończeniu pobierania usuwał ze względu na wykrycie wirusa.. Ponowiłem próby z poziomu awaryjnego ale ta sama sytuacja dodatkowo blokada str. z oprogramowaniem antywirusowymi oraz w najlepszym przypadku zawieszaniem się Avasta i pozostałych antywirusów po chwili skanowania ale z reguły restart .lub awaryjne zrzuty pamięci. Na następny dzień z innego kompa zassałem z netu pakiecik skanerów i przekopiowałem na swojego ,ale okazało się że podczas instalacji lub aktywacji skanerów e.x.e wyskakuje czarne okienko dosowe na maksymalnie 2 sekundy tak samo już zainstalowane Syp-bot,MBAM a programy com ,scr- komunikat program nie jest prawidłową aplikacją Windowsa. Dopiero z poziomu awaryjnego za pomocą Remove Fake Antivirus, CCE Comodo a w szczególności Combofixa który naprawił menadżera zadań ,usnąłem nim Rootkit.HiddenDir,HackTollWin32keygen, oraz zainfekowanie pliki .W tej chwili zdałem sobie sprawę że trybie awaryjnym nie jestem wstanie podleczyć kompa .Zassałem i wypaliłem płytkę kasperskiego oraz zrobiłem botowe USB SARDU z całym grupą antywirusów za pomocą ich usunąłem BackDoor.Generic 421155 ;DropperWin32/Dunik!rts ;Win32Nimda.htm oraz zainfekowane pliki .Ponadto używałem Unlockera do masowego odblokowania folderów i plików oraz skanerów w trybie awaryjnym stinger; clamwin-0.97.5; arcavirmicroscan; antizeroaccess(wykrył 1błąd); HitmanPro36(po 8 skanach odinstalowałem ); prevxcsifree; mbr; regassassin; TFC; Autoruns; CSU FREE; aswclear; msert;DrWeb launch ; Kaspersky Virus Removal Tool; windows-kb890830-v4.10; adwcleaner; Defogger; NPECCleaner;TDSSKiller(wykrył UsignedFile.Multi Generic);Revo Unistaller ;OTL:Gmer;OTH;OTS i kilku innych. Zapomniałem nadmienić że odinstalowałem Avasta 7 Home free,Syp-Bota, MBAM; IE9;IE8 i dokonałem 1 przywrócenia systemu .Sytuacja na chwilę obecną wygląda następująco przy wyłączonej funkcji kontroli konta użytkownika ma pełną kontrole oraz dostęp do narzędzi admin.i innych w trybie normalnym ,zainstalowałem murek Comodo , MBAM; Clam Win Antivirus ;uruchomiłem updateWin ,który ściągnął kilka łatek i IE9 oraz AVGFree2012 ale wyskakiwał mi alert że AVG nie jest prawidłową aplikacją pod windowsa (coś w ten deseń )po kilku próbach naprawy odinstalowałem..z panel windowsa. Od wczoraj mogę zrobić obowiązkowe logi na forum prócz OTL nawet przy użyciu OTH i innych programów maskujących jego działanie po kilku minutach skanowania wyskakuje alert Out of memory ,w zamian zrobiłem OTSem

A jeśli chodzi Gmera log dałem rade zrobić tylko podczas skanowania parę dni temu którymś skanerem z SARDU był na liści zainfekowanych Nie wiem czy związku tym jego log nie jest zafałszowany ,a propo przejrzystości logów przez jakiś czas była zmodyfikowana data na rok 2002 i od razu jak za uwarzyłem poprawiłem ją na prawidłową , związku z czym okres modyfikacji plików ustawiony w GMERu na 30 dni może nie pokazać pełnego obrazu jak mniemam nadal istniejącej infekcji .`Dodatkowo załączam inne logi oraz log z weryfikacji spójności Cmd .I na sam koniec objawy które nadal występują;

1)Komunikat błędzie Program Microsoft Windows Search Protcol Host przestał działać.-niezależnie od trybu rozruchu..

2)Podczas próby przeglądania folderu moje dokumenty ,pobierane itp. wyskakuje komunikat błąd explorera przestał działać i uruchamia na nowo niezależnie od trybu rozruchu.

.

.Z góry serdecznie dziękuj za podjęcie tematu .

 

CBS http://speedy.sh/TBffS/CBS.log

Ots http://wklej.org/id/811430/

attach http://wklej.org/id/811438/

gmer http://wklej.org/id/811440/

DDS http://wklej.org/id/811442/

tdsskiller http://wklej.org/id/811446/

błąd e http://wklej.org/id/811448/

błąd w http://wklej.org/id/811450/

Odnośnik do komentarza
Pomoc jest darmowa, ale proszę rozważ przekazanie dotacji na utrzymanie serwisu: klik.
picasso

picasso

Opublikowano
Opublikowano

W bieżących logach nic ciekawego, tylko odpadki po używanych skanerach, w tym grupa usług losowych po uruchomieniu Rootkit Revealer. Na razie jednak nie zadaję żadnych porządków.

 

 

Cytat

a w szczególności Combofixa który naprawił menadżera zadań ,usnąłem nim Rootkit.HiddenDir,HackTollWin32keygen, oraz zainfekowanie pliki (...) Zassałem i wypaliłem płytkę kasperskiego oraz zrobiłem botowe USB SARDU z całym grupą antywirusów za pomocą ich usunąłem BackDoor.Generic 421155 ;DropperWin32/Dunik!rts ;Win32Nimda.htm oraz zainfekowane pliki (...) antizeroaccess(wykrył 1błąd); HitmanPro36(po 8 skanach odinstalowałem ); prevxcsifree; mbr; regassassin; TFC; Autoruns; CSU FREE; aswclear; msert;DrWeb launch ; Kaspersky Virus Removal Tool; windows-kb890830-v4.10; adwcleaner; Defogger; NPECCleaner;TDSSKiller(wykrył UsignedFile.Multi Generic)

 

1. Czy posiadasz zapisane wyniki skanów? Sama nazwa zagrożenia to za mało by ocenić sprawę i by stwierdzić co to faktycznie było, brak tu jakichkolwiek ścieżek dostępu definiujących co było robione. Zaś akcje w TDSSKiller to raczej błąd Twojej oceny. Typ UnsignedFile.Multi.Generic to tylko adnotacja braku sygnatury, ten wynik nie jest jednoznaczny z infekcją i należy go dopiero zanalizować a nie usuwać. Skutki: usunąłeś prawidłowe usługi od Conexant, Hewlett-Packart, Nero, InstallShield.

 

2. Dodatkowa uwaga na temat określonych skanerów, niektórych nie ma sensu stosować w dniu dzisiejszym. C:\SmitfraudFix(dobreprogramy.pl).exe = to kompletnie przestarzały program, do niczego w bieżących warunkach. RootkitRevealer podobnie, zupełnie nieaktualizowany od roku 2006, niezdolny wykrywać nowoczesnych rootkitów. Spybot - Search & Destroy również archaizm, nie ponawiaj instalacji.

 

 

Cytat

zainstalowałem murek Comodo , MBAM; Clam Win Antivirus

 

Czy to na pewno wersja COMODO tylko z firewallem bez antywirusa? W pakiecie wszedł i komponent COMODO GeekBuddy, to funkcja w trialu i zbędna (do deinstalacji). Poza tym, mówisz o ClamWin, ale jest tu i Ad-aware. To za dużo. Zresztą ten ClamWin to słaby antywirus.

 

 

Cytat

Od wczoraj mogę zrobić obowiązkowe logi na forum prócz OTL nawet przy użyciu OTH i innych programów maskujących jego działanie po kilku minutach skanowania wyskakuje alert Out of memory ,w zamian zrobiłem OTSem

 

Czy w Trybie awaryjnym jest ten sam problem?

 

 

Cytat

I na sam koniec objawy które nadal występują;

1)Komunikat błędzie Program Microsoft Windows Search Protcol Host przestał działać.-niezależnie od trybu rozruchu..

2)Podczas próby przeglądania folderu moje dokumenty ,pobierane itp. wyskakuje komunikat błąd explorera przestał działać i uruchamia na nowo niezależnie od trybu rozruchu.

 

1. Zwłaszcza pod kątem błędu SearchProtocolHost.exe zwracają uwagę wyniki filtrowania skanu SFC:

 

  

2012-08-13 14:13:30, Info CSI 00000006 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:13:30, Info CSI 00000007 [sR] Beginning Verify and Repair transaction

2012-08-13 14:13:46, Info CSI 00000009 [sR] Verify complete

2012-08-13 14:13:47, Info CSI 0000000a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:13:47, Info CSI 0000000b [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:05, Info CSI 0000000d [sR] Verify complete

2012-08-13 14:14:07, Info CSI 0000000e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:07, Info CSI 0000000f [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:15, Info CSI 00000011 [sR] Verify complete

2012-08-13 14:14:16, Info CSI 00000012 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:16, Info CSI 00000013 [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:18, Info CSI 00000015 [sR] Verify complete

2012-08-13 14:14:19, Info CSI 00000016 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:19, Info CSI 00000017 [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:22, Info CSI 00000019 [sR] Verify complete

2012-08-13 14:14:23, Info CSI 0000001a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:23, Info CSI 0000001b [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:24, Info CSI 0000001d [sR] Verify complete

2012-08-13 14:14:25, Info CSI 0000001e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:25, Info CSI 0000001f [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:27, Info CSI 00000021 [sR] Verify complete

2012-08-13 14:14:28, Info CSI 00000022 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:28, Info CSI 00000023 [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:30, Info CSI 00000025 [sR] Verify complete

2012-08-13 14:14:30, Info CSI 00000026 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:30, Info CSI 00000027 [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:32, Info CSI 00000029 [sR] Verify complete

2012-08-13 14:14:32, Info CSI 0000002a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:32, Info CSI 0000002b [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:34, Info CSI 0000002d [sR] Verify complete

2012-08-13 14:14:35, Info CSI 0000002e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:35, Info CSI 0000002f [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:36, Info CSI 00000031 [sR] Verify complete

2012-08-13 14:14:37, Info CSI 00000032 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:37, Info CSI 00000033 [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:39, Info CSI 00000035 [sR] Verify complete

2012-08-13 14:14:40, Info CSI 00000036 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:40, Info CSI 00000037 [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:43, Info CSI 00000039 [sR] Verify complete

2012-08-13 14:14:43, Info CSI 0000003a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:43, Info CSI 0000003b [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:46, Info CSI 0000003d [sR] Verify complete

2012-08-13 14:14:47, Info CSI 0000003e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:47, Info CSI 0000003f [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:49, Info CSI 00000041 [sR] Verify complete

2012-08-13 14:14:49, Info CSI 00000042 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:49, Info CSI 00000043 [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:51, Info CSI 00000045 [sR] Verify complete

2012-08-13 14:14:52, Info CSI 00000046 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:52, Info CSI 00000047 [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:55, Info CSI 00000049 [sR] Verify complete

2012-08-13 14:14:55, Info CSI 0000004a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:55, Info CSI 0000004b [sR] Beginning Verify and Repair transaction

2012-08-13 14:14:58, Info CSI 0000004d [sR] Verify complete

2012-08-13 14:14:59, Info CSI 0000004e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:14:59, Info CSI 0000004f [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:01, Info CSI 00000051 [sR] Verify complete

2012-08-13 14:15:02, Info CSI 00000052 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:02, Info CSI 00000053 [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:08, Info CSI 00000055 [sR] Verify complete

2012-08-13 14:15:09, Info CSI 00000056 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:09, Info CSI 00000057 [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:11, Info CSI 00000059 [sR] Verify complete

2012-08-13 14:15:12, Info CSI 0000005a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:12, Info CSI 0000005b [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:17, Info CSI 0000005d [sR] Verify complete

2012-08-13 14:15:18, Info CSI 0000005e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:18, Info CSI 0000005f [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:21, Info CSI 00000061 [sR] Verify complete

2012-08-13 14:15:22, Info CSI 00000062 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:22, Info CSI 00000063 [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:25, Info CSI 00000065 [sR] Verify complete

2012-08-13 14:15:26, Info CSI 00000066 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:26, Info CSI 00000067 [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:29, Info CSI 00000069 [sR] Verify complete

2012-08-13 14:15:30, Info CSI 0000006a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:30, Info CSI 0000006b [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:39, Info CSI 0000006d [sR] Verify complete

2012-08-13 14:15:40, Info CSI 0000006e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:40, Info CSI 0000006f [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:43, Info CSI 00000071 [sR] Verify complete

2012-08-13 14:15:44, Info CSI 00000072 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:44, Info CSI 00000073 [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:47, Info CSI 00000075 [sR] Verify complete

2012-08-13 14:15:47, Info CSI 00000076 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:47, Info CSI 00000077 [sR] Beginning Verify and Repair transaction

2012-08-13 14:15:58, Info CSI 00000079 [sR] Verify complete

2012-08-13 14:15:59, Info CSI 0000007a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:15:59, Info CSI 0000007b [sR] Beginning Verify and Repair transaction

2012-08-13 14:16:16, Info CSI 0000007d [sR] Verify complete

2012-08-13 14:16:18, Info CSI 0000007e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:16:18, Info CSI 0000007f [sR] Beginning Verify and Repair transaction

2012-08-13 14:16:21, Info CSI 00000081 [sR] Cannot repair member file [l:32{16}]"advapi32.dll.mui" of Microsoft-Windows-Advapi32.Resources, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"pl-PL", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:16:31, Info CSI 00000082 [sR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:32{16}]"advapi32.dll.mui" by copying from backup

2012-08-13 14:16:31, Info CSI 00000084 [sR] Repairing corrupted file [ml:520{260},l:58{29}]"\??\C:\Windows\System32\pl-PL"\[l:32{16}]"advapi32.dll.mui" from store

2012-08-13 14:16:31, Info CSI 00000086 [sR] Verify complete

2012-08-13 14:16:33, Info CSI 00000087 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:16:33, Info CSI 00000088 [sR] Beginning Verify and Repair transaction

2012-08-13 14:16:48, Info CSI 0000008b [sR] Verify complete

2012-08-13 14:16:49, Info CSI 0000008c [sR] Verifying 100 (0x00000064) components

2012-08-13 14:16:49, Info CSI 0000008d [sR] Beginning Verify and Repair transaction

2012-08-13 14:16:57, Info CSI 0000008f [sR] Cannot repair member file [l:38{19}]"XpsGdiConverter.dll" of Microsoft-Windows-Component-XpsGdiConverter, Version = 7.0.6002.18409, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:17:01, Info CSI 00000092 [sR] Cannot repair member file [l:38{19}]"XpsGdiConverter.dll" of Microsoft-Windows-Component-XpsGdiConverter, Version = 7.0.6002.18409, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:17:01, Info CSI 00000093 [sR] This component was referenced by [l:156{78}]"Package_24_for_KB2505189~31bf3856ad364e35~x86~~6.0.1.2.2505189-100_neutral_GDR"

2012-08-13 14:17:01, Info CSI 00000096 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:38{19}]"XpsGdiConverter.dll"; source file in store is also corrupted

2012-08-13 14:17:02, Info CSI 00000098 [sR] Verify complete

2012-08-13 14:17:02, Info CSI 00000099 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:17:02, Info CSI 0000009a [sR] Beginning Verify and Repair transaction

2012-08-13 14:17:06, Info CSI 0000009c [sR] Cannot repair member file [l:16{8}]"calc.exe" of Microsoft-Windows-calc, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:17:14, Info CSI 0000009e [sR] Cannot repair member file [l:16{8}]"calc.exe" of Microsoft-Windows-calc, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:17:14, Info CSI 0000009f [sR] This component was referenced by [l:238{119}]"Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~x86~~6.0.6000.16386.Microsoft-Windows-Client-Features-Update"

2012-08-13 14:17:14, Info CSI 000000a2 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:16{8}]"calc.exe"; source file in store is also corrupted

2012-08-13 14:17:15, Info CSI 000000a4 [sR] Verify complete

2012-08-13 14:17:16, Info CSI 000000a5 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:17:16, Info CSI 000000a6 [sR] Beginning Verify and Repair transaction

2012-08-13 14:17:32, Info CSI 000000b0 [sR] Verify complete

2012-08-13 14:17:33, Info CSI 000000b1 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:17:33, Info CSI 000000b2 [sR] Beginning Verify and Repair transaction

2012-08-13 14:17:34, Info CSI 000000b4 [sR] Cannot repair member file [l:22{11}]"console.dll" of Microsoft-Windows-console, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:17:45, Info CSI 000000b6 [sR] Cannot repair member file [l:18{9}]"dfdts.dll" of Microsoft-Windows-Disk-Failure-Diagnostic-Module, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:17:51, Info CSI 000000b8 [sR] Cannot repair member file [l:22{11}]"console.dll" of Microsoft-Windows-console, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:17:51, Info CSI 000000b9 [sR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"

2012-08-13 14:17:51, Info CSI 000000bc [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"console.dll"; source file in store is also corrupted

2012-08-13 14:17:51, Info CSI 000000be [sR] Cannot repair member file [l:18{9}]"dfdts.dll" of Microsoft-Windows-Disk-Failure-Diagnostic-Module, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:17:51, Info CSI 000000bf [sR] This component was referenced by [l:158{79}]"Package_26_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-40_neutral_GDR"

2012-08-13 14:17:51, Info CSI 000000c2 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:18{9}]"dfdts.dll"; source file in store is also corrupted

2012-08-13 14:17:51, Info CSI 000000c4 [sR] Verify complete

2012-08-13 14:17:52, Info CSI 000000c5 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:17:52, Info CSI 000000c6 [sR] Beginning Verify and Repair transaction

2012-08-13 14:18:09, Info CSI 000000c8 [sR] Verify complete

2012-08-13 14:18:10, Info CSI 000000c9 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:18:10, Info CSI 000000ca [sR] Beginning Verify and Repair transaction

2012-08-13 14:18:24, Info CSI 000000cc [sR] Verify complete

2012-08-13 14:18:25, Info CSI 000000cd [sR] Verifying 100 (0x00000064) components

2012-08-13 14:18:25, Info CSI 000000ce [sR] Beginning Verify and Repair transaction

2012-08-13 14:18:31, Info CSI 000000d0 [sR] Cannot repair member file [l:24{12}]"diskpart.exe" of Microsoft-Windows-Diskpart, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:18:35, Info CSI 000000d2 [sR] Cannot repair member file [l:24{12}]"dskquoui.dll" of Microsoft-Windows-dskquoui, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:18:41, Info CSI 000000d4 [sR] Cannot repair member file [l:24{12}]"diskpart.exe" of Microsoft-Windows-Diskpart, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:18:41, Info CSI 000000d5 [sR] This component was referenced by [l:160{80}]"Package_25_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-113_neutral_GDR"

2012-08-13 14:18:41, Info CSI 000000d8 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"diskpart.exe"; source file in store is also corrupted

2012-08-13 14:18:42, Info CSI 000000da [sR] Cannot repair member file [l:24{12}]"dskquoui.dll" of Microsoft-Windows-dskquoui, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:18:42, Info CSI 000000db [sR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"

2012-08-13 14:18:42, Info CSI 000000de [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"dskquoui.dll"; source file in store is also corrupted

2012-08-13 14:18:42, Info CSI 000000e0 [sR] Verify complete

2012-08-13 14:18:43, Info CSI 000000e1 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:18:43, Info CSI 000000e2 [sR] Beginning Verify and Repair transaction

2012-08-13 14:19:22, Info CSI 000000e4 [sR] Cannot repair member file [l:22{11}]"ehshell.exe" of Microsoft-Windows-ehome-ehshell, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:19:26, Info CSI 000000e6 [sR] Cannot repair member file [l:22{11}]"ehshell.exe" of Microsoft-Windows-ehome-ehshell, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:19:26, Info CSI 000000e7 [sR] This component was referenced by [l:172{86}]"Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~x86~~6.0.6000.16386.MediaCenter"

2012-08-13 14:19:26, Info CSI 000000ea [sR] Could not reproject corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\ehome"\[l:22{11}]"ehshell.exe"; source file in store is also corrupted

2012-08-13 14:19:31, Info CSI 000000ec [sR] Verify complete

2012-08-13 14:19:32, Info CSI 000000ed [sR] Verifying 100 (0x00000064) components

2012-08-13 14:19:32, Info CSI 000000ee [sR] Beginning Verify and Repair transaction

2012-08-13 14:20:18, Info CSI 000000f2 [sR] Verify complete

2012-08-13 14:20:19, Info CSI 000000f3 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:20:19, Info CSI 000000f4 [sR] Beginning Verify and Repair transaction

2012-08-13 14:20:29, Info CSI 000000f6 [sR] Cannot repair member file [l:22{11}]"t2embed.dll" of Microsoft-Windows-Font-Embedding, Version = 6.0.6002.18301, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:21:57, Info CSI 000000f7 [sR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:22{11}]"t2embed.dll" by copying from backup

2012-08-13 14:21:57, Info CSI 000000f9 [sR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"t2embed.dll" from store

2012-08-13 14:22:04, Info CSI 000000fb [sR] Verify complete

2012-08-13 14:22:05, Info CSI 000000fc [sR] Verifying 100 (0x00000064) components

2012-08-13 14:22:05, Info CSI 000000fd [sR] Beginning Verify and Repair transaction

2012-08-13 14:22:49, Info CSI 000000ff [sR] Verify complete

2012-08-13 14:22:49, Info CSI 00000100 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:22:49, Info CSI 00000101 [sR] Beginning Verify and Repair transaction

2012-08-13 14:22:56, Info CSI 00000103 [sR] Cannot repair member file [l:20{10}]"hbaapi.dll" of Microsoft-Windows-HbaApi, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:23:08, Info CSI 00000104 [sR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:20{10}]"hbaapi.dll" by copying from backup

2012-08-13 14:23:08, Info CSI 00000106 [sR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"hbaapi.dll" from store

2012-08-13 14:23:08, Info CSI 00000108 [sR] Verify complete

2012-08-13 14:23:09, Info CSI 00000109 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:23:09, Info CSI 0000010a [sR] Beginning Verify and Repair transaction

2012-08-13 14:23:15, Info CSI 0000010c [sR] Verify complete

2012-08-13 14:23:24, Info CSI 0000010d [sR] Verifying 100 (0x00000064) components

2012-08-13 14:23:24, Info CSI 0000010e [sR] Beginning Verify and Repair transaction

2012-08-13 14:23:31, Info CSI 00000110 [sR] Verify complete

2012-08-13 14:23:32, Info CSI 00000111 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:23:32, Info CSI 00000112 [sR] Beginning Verify and Repair transaction

2012-08-13 14:23:54, Info CSI 00000114 [sR] Cannot repair member file [l:28{14}]"msimsg.dll.mui" of Microsoft-Windows-Installer-Engine.Resources, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"sv-SE", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:24:01, Info CSI 00000121 [sR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:28{14}]"msimsg.dll.mui" by copying from backup

2012-08-13 14:24:01, Info CSI 00000123 [sR] Repairing corrupted file [ml:520{260},l:58{29}]"\??\C:\Windows\System32\sv-SE"\[l:28{14}]"msimsg.dll.mui" from store

2012-08-13 14:24:04, Info CSI 00000135 [sR] Verify complete

2012-08-13 14:24:04, Info CSI 00000136 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:24:04, Info CSI 00000137 [sR] Beginning Verify and Repair transaction

2012-08-13 14:24:16, Info CSI 00000139 [sR] Verify complete

2012-08-13 14:24:16, Info CSI 0000013a [sR] Verifying 100 (0x00000064) components

2012-08-13 14:24:16, Info CSI 0000013b [sR] Beginning Verify and Repair transaction

2012-08-13 14:24:26, Info CSI 0000013d [sR] Verify complete

2012-08-13 14:24:27, Info CSI 0000013e [sR] Verifying 100 (0x00000064) components

2012-08-13 14:24:27, Info CSI 0000013f [sR] Beginning Verify and Repair transaction

2012-08-13 14:24:30, Info CSI 00000141 [sR] Cannot repair member file [l:22{11}]"C_10007.NLS" of Microsoft-Windows-International-CodePage-10007, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:24:33, Info CSI 00000143 [sR] Cannot repair member file [l:22{11}]"C_20880.NLS" of Microsoft-Windows-International-CodePage-20880, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:24:35, Info CSI 00000145 [sR] Cannot repair member file [l:22{11}]"C_10007.NLS" of Microsoft-Windows-International-CodePage-10007, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:24:35, Info CSI 00000146 [sR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"

2012-08-13 14:24:35, Info CSI 00000149 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"C_10007.NLS"; source file in store is also corrupted

2012-08-13 14:24:35, Info CSI 0000014b [sR] Cannot repair member file [l:22{11}]"C_20880.NLS" of Microsoft-Windows-International-CodePage-20880, Version = 6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:24:35, Info CSI 0000014c [sR] This component was referenced by [ml:38{19},l:36{18}]"Windows Foundation"

2012-08-13 14:24:35, Info CSI 0000014f [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"C_20880.NLS"; source file in store is also corrupted

2012-08-13 14:24:35, Info CSI 00000151 [sR] Verify complete

2012-08-13 14:24:36, Info CSI 00000152 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:24:36, Info CSI 00000153 [sR] Beginning Verify and Repair transaction

2012-08-13 14:24:52, Info CSI 00000155 [sR] Verify complete

2012-08-13 14:24:53, Info CSI 00000156 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:24:53, Info CSI 00000157 [sR] Beginning Verify and Repair transaction

2012-08-13 14:25:23, Info CSI 0000015a [sR] Verify complete

2012-08-13 14:25:24, Info CSI 0000015b [sR] Verifying 100 (0x00000064) components

2012-08-13 14:25:24, Info CSI 0000015c [sR] Beginning Verify and Repair transaction

2012-08-13 14:25:44, Info CSI 0000015e [sR] Verify complete

2012-08-13 14:25:45, Info CSI 0000015f [sR] Verifying 100 (0x00000064) components

2012-08-13 14:25:45, Info CSI 00000160 [sR] Beginning Verify and Repair transaction

2012-08-13 14:25:54, Info CSI 00000162 [sR] Verify complete

2012-08-13 14:25:55, Info CSI 00000163 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:25:55, Info CSI 00000164 [sR] Beginning Verify and Repair transaction

2012-08-13 14:25:57, Info CSI 00000166 [sR] Cannot repair member file [l:22{11}]"consent.exe" of Microsoft-Windows-LUA, Version = 6.0.6002.18328, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:26:09, Info CSI 00000168 [sR] Cannot repair member file [l:24{12}]"odbcjt32.dll" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ODBC-Jet-jt32, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:26:17, Info CSI 00000169 [sR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:22{11}]"consent.exe" by copying from backup

2012-08-13 14:26:17, Info CSI 0000016b [sR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"consent.exe" from store

2012-08-13 14:26:17, Info CSI 0000016d [sR] Cannot repair member file [l:24{12}]"odbcjt32.dll" of Microsoft-Windows-Microsoft-Data-Access-Components-(MDAC)-ODBC-Jet-jt32, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:26:17, Info CSI 0000016e [sR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"

2012-08-13 14:26:17, Info CSI 00000171 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"odbcjt32.dll"; source file in store is also corrupted

2012-08-13 14:26:17, Info CSI 00000173 [sR] Verify complete

2012-08-13 14:26:18, Info CSI 00000174 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:26:18, Info CSI 00000175 [sR] Beginning Verify and Repair transaction

2012-08-13 14:26:31, Info CSI 00000177 [sR] Verify complete

2012-08-13 14:26:32, Info CSI 00000178 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:26:32, Info CSI 00000179 [sR] Beginning Verify and Repair transaction

2012-08-13 14:26:54, Info CSI 0000017b [sR] Verify complete

2012-08-13 14:26:55, Info CSI 0000017c [sR] Verifying 100 (0x00000064) components

2012-08-13 14:26:55, Info CSI 0000017d [sR] Beginning Verify and Repair transaction

2012-08-13 14:28:10, Info CSI 000001a2 [sR] Verify complete

2012-08-13 14:28:12, Info CSI 000001a3 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:28:12, Info CSI 000001a4 [sR] Beginning Verify and Repair transaction

2012-08-13 14:28:53, Info CSI 000001a6 [sR] Verify complete

2012-08-13 14:28:55, Info CSI 000001a7 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:28:55, Info CSI 000001a8 [sR] Beginning Verify and Repair transaction

2012-08-13 14:32:06, Info CSI 000001aa [sR] Verify complete

2012-08-13 14:32:07, Info CSI 000001ab [sR] Verifying 100 (0x00000064) components

2012-08-13 14:32:07, Info CSI 000001ac [sR] Beginning Verify and Repair transaction

2012-08-13 14:32:48, Info CSI 000001ae [sR] Verify complete

2012-08-13 14:32:50, Info CSI 000001af [sR] Verifying 100 (0x00000064) components

2012-08-13 14:32:50, Info CSI 000001b0 [sR] Beginning Verify and Repair transaction

2012-08-13 14:33:16, Info CSI 000001b2 [sR] Verify complete

2012-08-13 14:33:17, Info CSI 000001b3 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:33:17, Info CSI 000001b4 [sR] Beginning Verify and Repair transaction

2012-08-13 14:33:25, Info CSI 000001b6 [sR] Cannot repair member file [l:30{15}]"PnPUnattend.exe" of Microsoft-Windows-PnpCustomizationsNonWinPE, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:33:33, Info CSI 000001b8 [sR] Cannot repair member file [l:30{15}]"PnPUnattend.exe" of Microsoft-Windows-PnpCustomizationsNonWinPE, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:33:33, Info CSI 000001b9 [sR] This component was referenced by [l:160{80}]"Package_25_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-113_neutral_GDR"

2012-08-13 14:33:33, Info CSI 000001bc [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:30{15}]"PnPUnattend.exe"; source file in store is also corrupted

2012-08-13 14:33:33, Info CSI 000001be [sR] Verify complete

2012-08-13 14:33:35, Info CSI 000001bf [sR] Verifying 100 (0x00000064) components

2012-08-13 14:33:35, Info CSI 000001c0 [sR] Beginning Verify and Repair transaction

2012-08-13 14:33:51, Info CSI 000001c2 [sR] Verify complete

2012-08-13 14:33:53, Info CSI 000001c3 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:33:53, Info CSI 000001c4 [sR] Beginning Verify and Repair transaction

2012-08-13 14:34:04, Info CSI 000001c7 [sR] Verify complete

2012-08-13 14:34:06, Info CSI 000001c8 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:34:06, Info CSI 000001c9 [sR] Beginning Verify and Repair transaction

2012-08-13 14:34:06, Info CSI 000001cb [sR] Cannot repair member file [l:22{11}]"regedit.exe" of Microsoft-Windows-Registry-Editor, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:34:18, Info CSI 000001cd [sR] Cannot repair member file [l:22{11}]"regedit.exe" of Microsoft-Windows-Registry-Editor, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:34:18, Info CSI 000001ce [sR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"

2012-08-13 14:34:18, Info CSI 000001d1 [sR] Could not reproject corrupted file [ml:520{260},l:28{14}]"\??\C:\Windows"\[l:22{11}]"regedit.exe"; source file in store is also corrupted

2012-08-13 14:34:19, Info CSI 000001d3 [sR] Verify complete

2012-08-13 14:34:20, Info CSI 000001d4 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:34:20, Info CSI 000001d5 [sR] Beginning Verify and Repair transaction

2012-08-13 14:34:29, Info CSI 000001d7 [sR] Cannot repair member file [l:30{15}]"secproc_ssp.dll" of Microsoft-Windows-Security-Processor-Native-ServerBox, Version = 6.0.6002.18193, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:34:32, Info CSI 000001d9 [sR] Cannot repair member file [l:30{15}]"secproc_ssp.dll" of Microsoft-Windows-Security-Processor-Native-ServerBox, Version = 6.0.6002.18193, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:34:32, Info CSI 000001da [sR] This component was referenced by [l:148{74}]"Package_3_for_KB979099~31bf3856ad364e35~x86~~6.0.1.1.979099-30_neutral_GDR"

2012-08-13 14:34:32, Info CSI 000001dd [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:30{15}]"secproc_ssp.dll"; source file in store is also corrupted

2012-08-13 14:34:33, Info CSI 000001df [sR] Verify complete

2012-08-13 14:34:34, Info CSI 000001e0 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:34:34, Info CSI 000001e1 [sR] Beginning Verify and Repair transaction

2012-08-13 14:34:45, Info CSI 000001e3 [sR] Cannot repair member file [l:24{12}]"spreview.exe" of Microsoft-Windows-ServicePackCoordinator, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:34:52, Info CSI 000001e5 [sR] Cannot repair member file [l:30{15}]"ActionQueue.dll" of Microsoft-Windows-Setup-Component, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:34:55, Info CSI 000001e7 [sR] Cannot repair member file [l:30{15}]"ActionQueue.dll" of Microsoft-Windows-Setup-Component, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:34:55, Info CSI 000001e8 [sR] This component was referenced by [l:160{80}]"Package_25_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-113_neutral_GDR"

2012-08-13 14:34:55, Info CSI 000001eb [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:30{15}]"ActionQueue.dll"; source file in store is also corrupted

2012-08-13 14:34:56, Info CSI 000001ed [sR] Cannot repair member file [l:24{12}]"spreview.exe" of Microsoft-Windows-ServicePackCoordinator, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:34:56, Info CSI 000001ee [sR] This component was referenced by [l:158{79}]"Package_24_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-67_neutral_GDR"

2012-08-13 14:34:56, Info CSI 000001f1 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"spreview.exe"; source file in store is also corrupted

2012-08-13 14:34:56, Info CSI 000001f3 [sR] Verify complete

2012-08-13 14:34:57, Info CSI 000001f4 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:34:57, Info CSI 000001f5 [sR] Beginning Verify and Repair transaction

2012-08-13 14:35:31, Info CSI 000001f7 [sR] Verify complete

2012-08-13 14:35:33, Info CSI 000001f8 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:35:33, Info CSI 000001f9 [sR] Beginning Verify and Repair transaction

2012-08-13 14:35:53, Info CSI 000001fb [sR] Verify complete

2012-08-13 14:35:54, Info CSI 000001fc [sR] Verifying 100 (0x00000064) components

2012-08-13 14:35:54, Info CSI 000001fd [sR] Beginning Verify and Repair transaction

2012-08-13 14:36:29, Info CSI 000001ff [sR] Verify complete

2012-08-13 14:36:31, Info CSI 00000200 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:36:31, Info CSI 00000201 [sR] Beginning Verify and Repair transaction

2012-08-13 14:37:37, Info CSI 00000204 [sR] Verify complete

2012-08-13 14:37:39, Info CSI 00000205 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:37:39, Info CSI 00000206 [sR] Beginning Verify and Repair transaction

2012-08-13 14:37:41, Info CSI 00000208 [sR] Cannot repair member file [l:22{11}]"taskmgr.exe" of Microsoft-Windows-taskmgr, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:37:50, Info CSI 0000020a [sR] Cannot repair member file [l:22{11}]"taskmgr.exe" of Microsoft-Windows-taskmgr, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:37:50, Info CSI 0000020b [sR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"

2012-08-13 14:37:50, Info CSI 0000020e [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"taskmgr.exe"; source file in store is also corrupted

2012-08-13 14:37:51, Info CSI 00000210 [sR] Verify complete

2012-08-13 14:37:52, Info CSI 00000211 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:37:52, Info CSI 00000212 [sR] Beginning Verify and Repair transaction

2012-08-13 14:38:05, Info CSI 00000214 [sR] Verify complete

2012-08-13 14:38:06, Info CSI 00000215 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:38:06, Info CSI 00000216 [sR] Beginning Verify and Repair transaction

2012-08-13 14:38:07, Info CSI 00000218 [sR] Cannot repair member file [l:22{11}]"msvfw32.dll" of Microsoft-Windows-Video-For-Windows, Version = 6.0.6002.18158, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:38:07, Info CSI 0000021a [sR] Cannot repair member file [l:24{12}]"avicap32.dll" of Microsoft-Windows-Video-For-Windows, Version = 6.0.6002.18158, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:38:25, Info CSI 0000021c [sR] Cannot repair member file [l:22{11}]"msvfw32.dll" of Microsoft-Windows-Video-For-Windows, Version = 6.0.6002.18158, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:38:25, Info CSI 0000021d [sR] This component was referenced by [l:148{74}]"Package_6_for_KB975560~31bf3856ad364e35~x86~~6.0.1.5.975560-21_neutral_GDR"

2012-08-13 14:38:25, Info CSI 0000021f [sR] Cannot repair member file [l:24{12}]"avicap32.dll" of Microsoft-Windows-Video-For-Windows, Version = 6.0.6002.18158, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:38:25, Info CSI 00000220 [sR] This component was referenced by [l:148{74}]"Package_6_for_KB975560~31bf3856ad364e35~x86~~6.0.1.5.975560-21_neutral_GDR"

2012-08-13 14:38:25, Info CSI 00000223 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"msvfw32.dll"; source file in store is also corrupted

2012-08-13 14:38:25, Info CSI 00000226 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"avicap32.dll"; source file in store is also corrupted

2012-08-13 14:38:26, Info CSI 00000228 [sR] Verify complete

2012-08-13 14:38:28, Info CSI 00000229 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:38:28, Info CSI 0000022a [sR] Beginning Verify and Repair transaction

2012-08-13 14:38:34, Info CSI 0000022c [sR] Cannot repair member file [l:24{12}]"wiaacmgr.exe" of Microsoft-Windows-WindowsImageAcquisition-UIComponents, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:38:46, Info CSI 0000022e [sR] Cannot repair member file [l:24{12}]"wiaacmgr.exe" of Microsoft-Windows-WindowsImageAcquisition-UIComponents, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:38:46, Info CSI 0000022f [sR] This component was referenced by [l:158{79}]"Package_20_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-33_neutral_GDR"

2012-08-13 14:38:46, Info CSI 00000232 [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"wiaacmgr.exe"; source file in store is also corrupted

2012-08-13 14:38:48, Info CSI 00000237 [sR] Verify complete

2012-08-13 14:38:50, Info CSI 00000238 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:38:50, Info CSI 00000239 [sR] Beginning Verify and Repair transaction

2012-08-13 14:39:06, Info CSI 0000023b [sR] Cannot repair member file [l:22{11}]"WMIADAP.exe" of Microsoft-Windows-WMI-Core, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:39:09, Info CSI 0000023d [sR] Cannot repair member file [l:22{11}]"WMIADAP.exe" of Microsoft-Windows-WMI-Core, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:39:09, Info CSI 0000023e [sR] This component was referenced by [l:160{80}]"Package_25_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-113_neutral_GDR"

2012-08-13 14:39:09, Info CSI 00000241 [sR] Could not reproject corrupted file [ml:520{260},l:56{28}]"\??\C:\Windows\System32\wbem"\[l:22{11}]"WMIADAP.exe"; source file in store is also corrupted

2012-08-13 14:39:09, Info CSI 00000243 [sR] Verify complete

2012-08-13 14:39:11, Info CSI 00000244 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:39:11, Info CSI 00000245 [sR] Beginning Verify and Repair transaction

2012-08-13 14:39:37, Info CSI 00000247 [sR] Verify complete

2012-08-13 14:39:38, Info CSI 00000248 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:39:38, Info CSI 00000249 [sR] Beginning Verify and Repair transaction

2012-08-13 14:39:58, Info CSI 0000024b [sR] Verify complete

2012-08-13 14:39:59, Info CSI 0000024c [sR] Verifying 100 (0x00000064) components

2012-08-13 14:39:59, Info CSI 0000024d [sR] Beginning Verify and Repair transaction

2012-08-13 14:40:12, Info CSI 0000024f [sR] Verify complete

2012-08-13 14:40:15, Info CSI 00000250 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:40:15, Info CSI 00000251 [sR] Beginning Verify and Repair transaction

2012-08-13 14:40:33, Info CSI 00000253 [sR] Verify complete

2012-08-13 14:40:35, Info CSI 00000254 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:40:35, Info CSI 00000255 [sR] Beginning Verify and Repair transaction

2012-08-13 14:40:47, Info CSI 00000257 [sR] Verify complete

2012-08-13 14:40:48, Info CSI 00000258 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:40:48, Info CSI 00000259 [sR] Beginning Verify and Repair transaction

2012-08-13 14:40:54, Info CSI 0000025b [sR] Cannot repair member file [l:22{11}]"icfupgd.dll" of Networking-MPSSVC-Svc, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:41:05, Info CSI 0000025c [sR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:22{11}]"icfupgd.dll" by copying from backup

2012-08-13 14:41:06, Info CSI 0000025e [sR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"icfupgd.dll" from store

2012-08-13 14:41:07, Info CSI 00000260 [sR] Verify complete

2012-08-13 14:41:08, Info CSI 00000261 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:41:08, Info CSI 00000262 [sR] Beginning Verify and Repair transaction

2012-08-13 14:41:58, Info CSI 00000264 [sR] Cannot repair member file [l:18{9}]"MpOAV.dll" of Security-Malware-Windows-Defender, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:41:59, Info CSI 00000266 [sR] Cannot repair member file [l:18{9}]"MpOAV.dll" of Security-Malware-Windows-Defender, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:41:59, Info CSI 00000267 [sR] This component was referenced by [l:158{79}]"Package_16_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-49_neutral_GDR"

2012-08-13 14:41:59, Info CSI 0000026a [sR] Could not reproject corrupted file [ml:520{260},l:74{37}]"\??\C:\Program Files\Windows Defender"\[l:18{9}]"MpOAV.dll"; source file in store is also corrupted

2012-08-13 14:42:01, Info CSI 0000026c [sR] Verify complete

2012-08-13 14:42:02, Info CSI 0000026d [sR] Verifying 100 (0x00000064) components

2012-08-13 14:42:02, Info CSI 0000026e [sR] Beginning Verify and Repair transaction

2012-08-13 14:42:13, Info CSI 00000270 [sR] Verify complete

2012-08-13 14:42:15, Info CSI 00000271 [sR] Verifying 100 (0x00000064) components

2012-08-13 14:42:15, Info CSI 00000272 [sR] Beginning Verify and Repair transaction

2012-08-13 14:42:28, Info CSI 00000274 [sR] Cannot repair member file [l:24{12}]"msscntrs.dll" of WindowsSearchEngine, Version = 7.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:42:31, Info CSI 00000276 [sR] Cannot repair member file [l:24{12}]"msscntrs.dll" of WindowsSearchEngine, Version = 7.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

2012-08-13 14:42:31, Info CSI 00000277 [sR] This component was referenced by [l:158{79}]"Package_15_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-47_neutral_GDR"

2012-08-13 14:42:32, Info CSI 0000027a [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"msscntrs.dll"; source file in store is also corrupted

2012-08-13 14:42:32, Info CSI 00000285 [sR] Verify complete

2012-08-13 14:42:34, Info CSI 00000286 [sR] Verifying 74 (0x0000004a) components

2012-08-13 14:42:34, Info CSI 00000287 [sR] Beginning Verify and Repair transaction

2012-08-13 14:42:44, Info CSI 00000289 [sR] Verify complete

 

 

 

Wykryte uszkodzone pliki Windows, nie zostały wcale naprawione, bo brak w systemie prawidłowych kopii ("Could not reproject corrupted file ...; source file in store is also corrupted"). Tu jeden z przykładów, właśnie na uszkodzone składniki Windows Search: 

2012-08-13 14:42:28, Info CSI 00000274 [sR] Cannot repair member file [l:24{12}]"msscntrs.dll" of WindowsSearchEngine, Version = 7.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-08-13 14:42:31, Info CSI 00000276 [sR] Cannot repair member file [l:24{12}]"msscntrs.dll" of WindowsSearchEngine, Version = 7.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-08-13 14:42:31, Info CSI 00000277 [sR] This component was referenced by [l:158{79}]"Package_15_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-47_neutral_GDR"
2012-08-13 14:42:32, Info CSI 0000027a [sR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"msscntrs.dll"; source file in store is also corrupted

 

Cóż, wymagana podmiana fabrycznymi plikami Vista zgodnymi co do joty z buildami, które przedstawia skan SFC. Nie wiem czy tu się opłaca sztukować (w domyśle: dosyłam pliki wyekstraktowane z Vista i podmieniamy po kolei). Ten system dużo przeszedł, mam pytanie: jaki rodzaj reinstalatora systemu posiadasz? Czy to normalna płyta instalacyjna Vista czy może jakieś Recovery producenta (z dysku bądź utworzonych oddzielnie dysków DVD)?

 

2. Pod kątem błędu podczas otwierania określonych folderów zrób jeszcze test na rozszerzenia powłoki. Doinstalowałeś aplikacje, które wprowadzają nowe integracje (ClamWin, COMODO AV). Podobnie z WinZip, niezależnie od tego czy był wcześniej, jest cholernie stary (z roku ... 2005!), a to może oznaczać kłopoty w powłoce. Uruchom ShellExView - zaznacz hurtem wszystkie różowe (niedomyślne rozszerzenia) i zdeaktywuj, zresetuj system. Podaj wyniki czy problem nadal występuje.

 

Odnośnik do komentarza
lopo

lopo

Opublikowano
  • Autor
Opublikowano

Na wstępie bardzo dziękuję za podjęcie tematu i :wacko: najmocniej przepraszam jeśli moja ocena jako laika była tak chybiona w ocenie przyczyn i doborze działu pomocy ,ale byłem święcie przekonany że w najlepszym przypadku to ZeroAccess a problemy z plikami Windowsa to skutek agresywnych trybów skanowana . W odpowiedzi na twoje pytanie.

1), Niestety nie znalazłem wszystkich logów między innymi ComboFix próbowałem za pomocą programów do odzyskiwania utraconych danych , ale na razie z mizernym skutkiem, resztę załączam.

2)Dziękuje za uwagę , ale głównym powodem zastosowania teraz co niektórych programów i metod jest zastępczy ( awaryjny Pc) z paroma MB RAMu a co za tym idzie kłopot z przeglądaniem netu, a jeśli chodzi o Spybot - Search & Destroy na pewno nie będę ponawiał instalacji bo od pół roku nosiłem się zamiarem deinstalacji .Odnośnie COMODO tak to tylko firewall z GeekBuddy którego zainstalowałem z ciekawości i już zdeinstalowałem . ClamWin zainstalowałem bo :

1 Ad-aware po zainstalowaniu nie dawał oznak życia .

2 Miałem tylko jego pod ręką jako opcje tymczasową (do deinstalacji )Docelowa konfiguracja jaką chce ustawić AVG 2012 + COMODO firewall +MBAM..

Odnośnie OTL próbowałem po kilka razy w każdym trybie od normalnego po czysty w tym ostatnim 16 procesów uruchomionych ,100MB zajęte pamięci -wolnej 1,9GB .Po kilkunastu minutach pracy OTLu na stabilnym poziomie zaczął pożerać RAMy i wykładał się .

Także próbowałem z OTH w trybie normalnym ,ale po uruchomieniu Killall następował awaryjny zrzut pamięci .(Poniżej załączam)

 

http://wklej.org/id/813579/

 

Ponadto próbowałem ponowić użycie RootRepeal ale wystąpił te sam efekt co w OTLu z tym że dodatkowo okienko programu i błędu stały się przeźroczyste (ala program lupa )

Odnośnie drugiej części:

1)Pakiet -Windows Vista Home Premium OEM

 

Dokładne parametry płytki instalacyjnej.

Windows Vista Home Prem 32-bit Polish 1pk DSP OEI DVD

 

2)Wykonane - po pierwszych rozruchach wyskakiwał w następnym nie .

Próby z OTL wykonałem bezpośrednio po procedurze z ShellExView. :)

 

 

kaspersky http://wklej.org/id/813587/

CCE Comodo http://wklej.org/id/813594/

CCE Comodo http://wklej.org/id/813598/

CCE Comodo http://wklej.org/id/813603/

CCE Comodo http://wklej.org/id/813604/

msert http://wklej.org/id/813607/

DrWeb CureIt http://www.speedysha...S9zP/CureIt.txt

Skan http://wklej.org/id/813646/

DRWeb http://wklej.org/id/813657/

Skan http://wklej.org/id/813660/

ClamWin http://wklej.org/id/813674/

Odnośnik do komentarza
Gość
Ten temat został zamknięty. Brak możliwości dodania odpowiedzi.
Tematy

  • Ostatnio przeglądający   0 użytkowników

    • Brak zarejestrowanych użytkowników przeglądających tę stronę.
×
×
  • Dodaj nową pozycję...