Search the Community

Anyone help me with this?.I'm trying to figure out what was being attempted. I came into my home office this morning and found my computer up an running but the main monitor off but one of my adjadent monitor was on. I have three. I have one running from a matrox dualhead2 go along with my main monitor for an extra long screen. Both are set for the reading on tall papers..The other I am running from my HDMI cable connection..------------------------------------------------------------------------------------------------------.HEREs the problem - I found my command console open with Windows booted up..Regedit was last command entered (I used the F3 Key).Went to regedit and found it already set to view @.HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain.The Disable Script Debugger was reading:0000 I 79 00 65 00 73 00 00 00 y.e.s...0008.Other indications were found this using a split window of arseURLFromOutsideSource" along with a code change in my a code change in URLSubRegQuery..I found my start page value now had two extra keys. It looked like this.HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInternet ExplorerMainHKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerMainHKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainHKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain.I also found that my lavasoft antivirus was disabled for scan on startup..I keep Microsoft Security Essentials unactive so I attempted to run a scan using it..It aborted within ten seconds and my computer got a pop-up windows that indicated my Microsoft Outlook was preventing the computer from shutting down..When I checked my network map my computer saw that my computer had two computers showing access..One was my regular hard-wired internet connection running thru my netgear and the other was using the same name but was running thru a wireless connection..It was then that my sleep fogged mind realized that the hacker was still in my system and was trying to back out..I unplugged the internet hard wire but the commands kept coming so I turned off the netgear wireless and they stopped..My netgear is WPA2-PSK Security-enabled but my 2.4ghz was not an that provided the entry..I had left it unpassword protected and with that lesson driven home, I've now corrected that problem..I also restored my hard drive to wipe the hacker's effort..------------------------------------------------------------------------------------------------------.My query is: Does anyone have any insight as to what were they attempting?

My current computer is at least 5 or 6 years out of date (it's a hand-me-down from my uncle, and wasn't even that great 5 or 6 years ago), and so I have decided that enough is enough. I've always wanted to be able to play games at my own place and not need to go visit friends just to get some good gaming in and I've decided it's time to build my own gaming computer. Now, gaming isn't my only goal, I also just plain will need a computer for university that will handle 3D rendering (with programs like Maya or Blender), as well as run Adobe software such as Photoshop, Illustrator, After Effects, etc. So I plan on building a computer, and I want to go BIG. Now I don't mean I plan on getting the best of the best for every component, mostly by big I just mean my goal is to have a decent computer that can run games smoothly on high video settings, and I want to make my own case. The dream here is to have a Christmas themed case (don't ask, I just think it would be cool - I plan to call it Rudolph), made out of wood primarily (if possible), with a window in the side panel area, some red LED lights throughout, etc. (I have a couple designs that I can upload later). So really my point in all this is that I was hoping that somewhere I could find someone - or multiple people - who would be able to help me figure out what is and isn't possible, what parts I should be looking at getting, and just help me figure it all out in general.

TRC_Initialize 2012-06-07 07:57:52.783 PID:0xf78 TID:0xf7c L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-07 07:57:52.783 PID:0xf78 TID:0xf7c L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-07 07:57:52.783 PID:0xf78 TID:0xf7c L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-07 07:57:52.783 PID:0xf78 TID:0xf7c L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-07 07:57:52.783 PID:0xf78 TID:0xf88 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-07 07:57:52.783 PID:0xf78 TID:0xf88 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-07 07:57:52.783 PID:0xf78 TID:0xf88 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-07 07:57:52.798 PID:0xf78 TID:0xf88 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-07 07:57:52.845 PID:0xf78 TID:0xf88 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-07 08:15:11.094 PID:0xde0 TID:0xde4 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-07 08:15:11.094 PID:0xde0 TID:0xde4 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-07 08:15:11.094 PID:0xde0 TID:0xde4 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-07 08:15:11.094 PID:0xde0 TID:0xde4 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-07 08:15:11.110 PID:0xde0 TID:0xe04 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-07 08:15:11.110 PID:0xde0 TID:0xe04 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-07 08:15:11.110 PID:0xde0 TID:0xe04 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-07 08:15:11.110 PID:0xde0 TID:0xe04 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-07 08:15:11.110 PID:0xde0 TID:0xe04 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1208 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1208 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1208 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1208 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1284 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1284 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1284 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1284 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-07 09:39:48.059 PID:0x1204 TID:0x1284 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-07 14:25:18.755 PID:0xfc8 TID:0xfcc L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-07 14:25:18.755 PID:0xfc8 TID:0xfcc L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-07 14:25:18.755 PID:0xfc8 TID:0xc8c L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-07 14:25:18.755 PID:0xfc8 TID:0xc8c L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-07 14:25:18.755 PID:0xfc8 TID:0xc8c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-07 14:25:18.786 PID:0xfc8 TID:0xc8c L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-07 14:25:18.786 PID:0xfc8 TID:0xc8c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-08 02:46:28.011 PID:0xff4 TID:0xff8 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-08 02:46:28.011 PID:0xff4 TID:0xff8 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-08 02:46:28.011 PID:0xff4 TID:0xe28 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-08 02:46:28.011 PID:0xff4 TID:0xe28 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-08 02:46:28.011 PID:0xff4 TID:0xe28 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-08 02:46:28.011 PID:0xff4 TID:0xe28 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-08 02:46:28.011 PID:0xff4 TID:0xe28 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-08 10:46:19.215 PID:0x1098 TID:0x109c L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-08 10:46:19.215 PID:0x1098 TID:0x109c L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-08 10:46:19.215 PID:0x1098 TID:0x10b8 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-08 10:46:19.215 PID:0x1098 TID:0x10b8 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-08 10:46:19.215 PID:0x1098 TID:0x10b8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-08 10:46:19.215 PID:0x1098 TID:0x10b8 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-08 10:46:19.215 PID:0x1098 TID:0x10b8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-09 07:44:56.617 PID:0x1030 TID:0x1034 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-09 07:44:56.617 PID:0x1030 TID:0x1034 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-09 07:44:56.617 PID:0x1030 TID:0x1090 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-09 07:44:56.617 PID:0x1030 TID:0x1090 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-09 07:44:56.617 PID:0x1030 TID:0x1090 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-09 07:44:56.633 PID:0x1030 TID:0x1090 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-09 07:44:56.633 PID:0x1030 TID:0x1090 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1384 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1384 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1384 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1384 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1008 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1008 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1008 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1008 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-09 16:06:40.943 PID:0x1380 TID:0x1008 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-11 04:24:48.647 PID:0x107c TID:0x1080 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-11 04:24:48.647 PID:0x107c TID:0x1080 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-11 04:24:48.647 PID:0x107c TID:0x1098 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-11 04:24:48.647 PID:0x107c TID:0x1098 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-11 04:24:48.647 PID:0x107c TID:0x1098 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-11 04:24:48.662 PID:0x107c TID:0x1098 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-11 04:24:48.662 PID:0x107c TID:0x1098 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-11 06:38:48.044 PID:0x10cc TID:0x10d0 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-11 06:38:48.044 PID:0x10cc TID:0x10d0 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-11 06:38:48.044 PID:0x10cc TID:0x10f4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-11 06:38:48.044 PID:0x10cc TID:0x10f4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-11 06:38:48.044 PID:0x10cc TID:0x10f4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-11 06:38:48.059 PID:0x10cc TID:0x10f4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-11 06:38:48.075 PID:0x10cc TID:0x10f4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-11 08:15:47.510 PID:0x135c TID:0x1360 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-11 08:15:47.510 PID:0x135c TID:0x1360 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-11 08:15:47.510 PID:0x135c TID:0x1360 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-11 08:15:47.510 PID:0x135c TID:0x1360 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-11 08:15:47.510 PID:0x135c TID:0x5ec L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-11 08:15:47.510 PID:0x135c TID:0x5ec L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-11 08:15:47.510 PID:0x135c TID:0x5ec L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-11 08:15:47.525 PID:0x135c TID:0x5ec L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-11 08:15:47.525 PID:0x135c TID:0x5ec L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-13 04:25:34.180 PID:0xf20 TID:0xf24 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-13 04:25:34.180 PID:0xf20 TID:0xf24 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-13 04:25:34.180 PID:0xf20 TID:0xf70 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-13 04:25:34.180 PID:0xf20 TID:0xf70 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-13 04:25:34.180 PID:0xf20 TID:0xf70 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-13 04:25:34.211 PID:0xf20 TID:0xf70 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-13 04:25:34.211 PID:0xf20 TID:0xf70 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-13 15:28:52.814 PID:0xf34 TID:0xf38 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-13 15:28:52.814 PID:0xf34 TID:0xf38 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-13 15:28:52.814 PID:0xf34 TID:0xf78 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-13 15:28:52.814 PID:0xf34 TID:0xf78 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-13 15:28:52.814 PID:0xf34 TID:0xf78 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-13 15:28:52.814 PID:0xf34 TID:0xf78 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-13 15:28:52.830 PID:0xf34 TID:0xf78 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-13 22:35:03.904 PID:0xca4 TID:0xcc0 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-13 22:35:03.904 PID:0xca4 TID:0xcc0 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-13 22:35:03.904 PID:0xca4 TID:0xea8 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-13 22:35:03.904 PID:0xca4 TID:0xea8 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-13 22:35:03.904 PID:0xca4 TID:0xea8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-13 22:35:03.920 PID:0xca4 TID:0xea8 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-13 22:35:03.920 PID:0xca4 TID:0xea8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1348 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1348 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1348 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1348 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1528 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1528 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1528 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1528 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-15 03:20:25.081 PID:0x1344 TID:0x1528 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-15 03:28:51.456 PID:0x10ec TID:0x10f0 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-15 03:28:51.456 PID:0x10ec TID:0x10f0 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-15 03:28:51.456 PID:0x10ec TID:0x10f0 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-15 03:28:51.472 PID:0x10ec TID:0x10f0 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-15 03:28:51.472 PID:0x10ec TID:0x1118 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-15 03:28:51.472 PID:0x10ec TID:0x1118 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-15 03:28:51.472 PID:0x10ec TID:0x1118 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-15 03:28:51.472 PID:0x10ec TID:0x1118 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-15 03:28:51.472 PID:0x10ec TID:0x1118 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-15 18:15:40.318 PID:0xf7c TID:0xf80 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-15 18:15:40.318 PID:0xf7c TID:0xf80 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-15 18:15:40.318 PID:0xf7c TID:0xc18 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-15 18:15:40.318 PID:0xf7c TID:0xc18 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-15 18:15:40.318 PID:0xf7c TID:0xc18 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-15 18:15:40.333 PID:0xf7c TID:0xc18 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-15 18:15:40.349 PID:0xf7c TID:0xc18 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-15 20:13:51.892 PID:0x1420 TID:0x1424 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-15 20:13:51.892 PID:0x1420 TID:0x1424 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-15 20:13:51.892 PID:0x1420 TID:0x1424 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-15 20:13:51.893 PID:0x1420 TID:0x1424 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-15 20:13:51.895 PID:0x1420 TID:0x1450 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-15 20:13:51.895 PID:0x1420 TID:0x1450 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-15 20:13:51.895 PID:0x1420 TID:0x1450 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-15 20:13:51.896 PID:0x1420 TID:0x1450 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-15 20:13:51.897 PID:0x1420 TID:0x1450 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-16 08:07:30.519 PID:0xf38 TID:0xf3c L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-16 08:07:30.519 PID:0xf38 TID:0xf3c L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-16 08:07:30.519 PID:0xf38 TID:0xf60 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-16 08:07:30.519 PID:0xf38 TID:0xf60 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-16 08:07:30.519 PID:0xf38 TID:0xf60 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-16 08:07:30.519 PID:0xf38 TID:0xf60 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-16 08:07:30.519 PID:0xf38 TID:0xf60 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-17 04:10:58.506 PID:0xf2c TID:0xf30 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-17 04:10:58.506 PID:0xf2c TID:0xf30 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-17 04:10:58.506 PID:0xf2c TID:0xf94 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-17 04:10:58.506 PID:0xf2c TID:0xf94 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-17 04:10:58.522 PID:0xf2c TID:0xf94 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-17 04:10:58.537 PID:0xf2c TID:0xf94 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-17 04:10:58.553 PID:0xf2c TID:0xf94 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-17 20:47:30.668 PID:0xdd0 TID:0xe14 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-17 20:47:30.668 PID:0xdd0 TID:0xe14 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-17 20:47:30.668 PID:0xdd0 TID:0xe14 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-17 20:47:30.668 PID:0xdd0 TID:0xe14 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-17 20:47:30.683 PID:0xdd0 TID:0x1044 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-17 20:47:30.683 PID:0xdd0 TID:0x1044 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-17 20:47:30.683 PID:0xdd0 TID:0x1044 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-17 20:47:30.683 PID:0xdd0 TID:0x1044 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-17 20:47:30.683 PID:0xdd0 TID:0x1044 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-18 02:16:32.748 PID:0xed0 TID:0xed4 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-18 02:16:32.748 PID:0xed0 TID:0xed4 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-18 02:16:32.748 PID:0xed0 TID:0xf34 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-18 02:16:32.748 PID:0xed0 TID:0xf34 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-18 02:16:32.748 PID:0xed0 TID:0xf34 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-18 02:16:32.748 PID:0xed0 TID:0xf34 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-18 02:16:32.748 PID:0xed0 TID:0xf34 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-18 22:00:00.435 PID:0xf90 TID:0xf94 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-18 22:00:00.435 PID:0xf90 TID:0xf94 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-18 22:00:00.435 PID:0xf90 TID:0x9f0 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-18 22:00:00.435 PID:0xf90 TID:0x9f0 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-18 22:00:00.435 PID:0xf90 TID:0x9f0 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-18 22:00:00.450 PID:0xf90 TID:0x9f0 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-18 22:00:00.466 PID:0xf90 TID:0x9f0 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-19 02:53:46.260 PID:0x1044 TID:0x1048 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-19 02:53:46.260 PID:0x1044 TID:0x1048 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-19 02:53:46.260 PID:0x1044 TID:0x1048 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-19 02:53:46.260 PID:0x1044 TID:0x1048 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-19 02:53:46.276 PID:0x1044 TID:0x1098 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-19 02:53:46.276 PID:0x1044 TID:0x1098 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-19 02:53:46.276 PID:0x1044 TID:0x1098 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-19 02:53:46.276 PID:0x1044 TID:0x1098 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-19 02:53:46.276 PID:0x1044 TID:0x1098 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-19 04:12:30.192 PID:0xf8c TID:0xf90 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-19 04:12:30.192 PID:0xf8c TID:0xf90 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-19 04:12:30.192 PID:0xf8c TID:0xfd4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-19 04:12:30.192 PID:0xf8c TID:0xfd4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-19 04:12:30.192 PID:0xf8c TID:0xfd4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-19 04:12:30.208 PID:0xf8c TID:0xfd4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-19 04:12:30.208 PID:0xf8c TID:0xfd4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-19 06:51:27.372 PID:0xea4 TID:0xea8 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-19 06:51:27.372 PID:0xea4 TID:0xea8 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-19 06:51:27.372 PID:0xea4 TID:0xed8 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-19 06:51:27.372 PID:0xea4 TID:0xed8 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-19 06:51:27.372 PID:0xea4 TID:0xed8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-19 06:51:27.388 PID:0xea4 TID:0xed8 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-19 06:51:27.388 PID:0xea4 TID:0xed8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-19 08:49:43.544 PID:0xf6c TID:0xf70 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-19 08:49:43.544 PID:0xf6c TID:0xf70 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-19 08:49:43.544 PID:0xf6c TID:0xf94 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-19 08:49:43.544 PID:0xf6c TID:0xf94 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-19 08:49:43.544 PID:0xf6c TID:0xf94 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-19 08:49:43.544 PID:0xf6c TID:0xf94 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-19 08:49:43.544 PID:0xf6c TID:0xf94 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-19 08:51:24.581 PID:0x5e8 TID:0xfe4 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-19 08:51:24.581 PID:0x5e8 TID:0xfe4 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-19 08:51:24.581 PID:0x5e8 TID:0xfe4 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-19 08:51:24.581 PID:0x5e8 TID:0xfe4 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-19 08:51:24.581 PID:0x5e8 TID:0x1044 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-19 08:51:24.581 PID:0x5e8 TID:0x1044 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-19 08:51:24.581 PID:0x5e8 TID:0x1044 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-19 08:51:24.581 PID:0x5e8 TID:0x1044 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-19 08:51:24.581 PID:0x5e8 TID:0x1044 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-19 13:40:53.622 PID:0xf14 TID:0xf18 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-19 13:40:53.622 PID:0xf14 TID:0xf18 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-19 13:40:53.622 PID:0xf14 TID:0xf58 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-19 13:40:53.622 PID:0xf14 TID:0xf58 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-19 13:40:53.622 PID:0xf14 TID:0xf58 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-19 13:40:53.654 PID:0xf14 TID:0xf58 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-19 13:40:53.654 PID:0xf14 TID:0xf58 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-19 17:09:17.904 PID:0xf7c TID:0xf80 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-19 17:09:17.904 PID:0xf7c TID:0xf80 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-19 17:09:17.904 PID:0xf7c TID:0x107c L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-19 17:09:17.904 PID:0xf7c TID:0x107c L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-19 17:09:17.904 PID:0xf7c TID:0x107c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-19 17:09:17.904 PID:0xf7c TID:0x107c L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-19 17:09:17.904 PID:0xf7c TID:0x107c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-20 15:04:42.616 PID:0xf7c TID:0xf80 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-20 15:04:42.616 PID:0xf7c TID:0xf80 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-20 15:04:42.631 PID:0xf7c TID:0xfd4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-20 15:04:42.631 PID:0xf7c TID:0xfd4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-20 15:04:42.631 PID:0xf7c TID:0xfd4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-20 15:04:42.631 PID:0xf7c TID:0xfd4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-20 15:04:42.647 PID:0xf7c TID:0xfd4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-20 17:12:04.013 PID:0xf58 TID:0x1048 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-20 17:12:04.013 PID:0xf58 TID:0x1048 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-20 17:12:04.013 PID:0xf58 TID:0x1048 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-20 17:12:04.013 PID:0xf58 TID:0x1048 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-20 17:12:04.013 PID:0xf58 TID:0x25c L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-20 17:12:04.013 PID:0xf58 TID:0x25c L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-20 17:12:04.013 PID:0xf58 TID:0x25c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-20 17:12:04.013 PID:0xf58 TID:0x25c L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-20 17:12:04.013 PID:0xf58 TID:0x25c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-22 09:16:31.248 PID:0xd00 TID:0xd04 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-22 09:16:31.248 PID:0xd00 TID:0xd04 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-22 09:16:31.263 PID:0xd00 TID:0x1024 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-22 09:16:31.263 PID:0xd00 TID:0x1024 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-22 09:16:31.263 PID:0xd00 TID:0x1024 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-22 09:16:31.263 PID:0xd00 TID:0x1024 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-22 09:16:31.263 PID:0xd00 TID:0x1024 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-22 13:24:12.140 PID:0x11a8 TID:0x11ac L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-22 13:24:12.140 PID:0x11a8 TID:0x11ac L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-22 13:24:12.140 PID:0x11a8 TID:0x11c4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-22 13:24:12.140 PID:0x11a8 TID:0x11c4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-22 13:24:12.140 PID:0x11a8 TID:0x11c4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-22 13:24:12.140 PID:0x11a8 TID:0x11c4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-22 13:24:12.140 PID:0x11a8 TID:0x11c4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-22 20:02:06.773 PID:0xe54 TID:0xe58 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-22 20:02:06.773 PID:0xe54 TID:0xe58 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-22 20:02:06.773 PID:0xe54 TID:0xf10 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-22 20:02:06.773 PID:0xe54 TID:0xf10 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-22 20:02:06.773 PID:0xe54 TID:0xf10 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-22 20:02:06.788 PID:0xe54 TID:0xf10 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-22 20:02:06.804 PID:0xe54 TID:0xf10 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-23 00:34:11.598 PID:0xe38 TID:0xe3c L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-23 00:34:11.598 PID:0xe38 TID:0xe3c L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-23 00:34:11.598 PID:0xe38 TID:0xf30 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-23 00:34:11.598 PID:0xe38 TID:0xf30 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-23 00:34:11.598 PID:0xe38 TID:0xf30 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-23 00:34:11.598 PID:0xe38 TID:0xf30 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-23 00:34:11.598 PID:0xe38 TID:0xf30 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-23 03:14:29.423 PID:0xe9c TID:0xea0 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-23 03:14:29.423 PID:0xe9c TID:0xea0 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-23 03:14:29.439 PID:0xe9c TID:0xecc L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-23 03:14:29.439 PID:0xe9c TID:0xecc L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-23 03:14:29.439 PID:0xe9c TID:0xecc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-23 03:14:29.454 PID:0xe9c TID:0xecc L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-23 03:14:29.454 PID:0xe9c TID:0xecc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-23 15:59:19.828 PID:0xe38 TID:0xe3c L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-23 15:59:19.828 PID:0xe38 TID:0xe3c L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-23 15:59:19.828 PID:0xe38 TID:0xea4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-23 15:59:19.828 PID:0xe38 TID:0xea4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-23 15:59:19.828 PID:0xe38 TID:0xea4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-23 15:59:19.859 PID:0xe38 TID:0xea4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-23 15:59:19.859 PID:0xe38 TID:0xea4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-23 16:28:41.543 PID:0xe48 TID:0xe4c L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-23 16:28:41.543 PID:0xe48 TID:0xe4c L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-23 16:28:41.543 PID:0xe48 TID:0xea4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-23 16:28:41.543 PID:0xe48 TID:0xea4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-23 16:28:41.543 PID:0xe48 TID:0xea4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-23 16:28:41.543 PID:0xe48 TID:0xea4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-23 16:28:41.543 PID:0xe48 TID:0xea4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-24 04:36:59.110 PID:0xe80 TID:0xe84 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-24 04:36:59.110 PID:0xe80 TID:0xe84 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-24 04:36:59.110 PID:0xe80 TID:0xed8 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-24 04:36:59.110 PID:0xe80 TID:0xed8 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-24 04:36:59.110 PID:0xe80 TID:0xed8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-24 04:36:59.110 PID:0xe80 TID:0xed8 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-24 04:36:59.110 PID:0xe80 TID:0xed8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-24 18:22:02.926 PID:0xe40 TID:0xe44 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-24 18:22:02.926 PID:0xe40 TID:0xe44 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-24 18:22:02.926 PID:0xe40 TID:0xe68 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-24 18:22:02.926 PID:0xe40 TID:0xe68 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-24 18:22:02.926 PID:0xe40 TID:0xe68 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-24 18:22:02.926 PID:0xe40 TID:0xe68 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-24 18:22:02.926 PID:0xe40 TID:0xe68 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-25 06:14:33.181 PID:0x100c TID:0x1010 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-25 06:14:33.181 PID:0x100c TID:0x1010 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-25 06:14:33.181 PID:0x100c TID:0x1010 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-25 06:14:33.181 PID:0x100c TID:0x1010 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-25 06:14:33.197 PID:0x100c TID:0x1064 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-25 06:14:33.197 PID:0x100c TID:0x1064 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-25 06:14:33.197 PID:0x100c TID:0x1064 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-25 06:14:33.212 PID:0x100c TID:0x1064 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-25 06:14:33.212 PID:0x100c TID:0x1064 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-25 06:29:16.132 PID:0xf18 TID:0xf1c L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-25 06:29:16.132 PID:0xf18 TID:0xf1c L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-25 06:29:16.132 PID:0xf18 TID:0xf90 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-25 06:29:16.132 PID:0xf18 TID:0xf90 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-25 06:29:16.132 PID:0xf18 TID:0xf90 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-25 06:29:16.132 PID:0xf18 TID:0xf90 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-25 06:29:16.132 PID:0xf18 TID:0xf90 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-26 03:45:43.827 PID:0x12a4 TID:0x12a8 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-26 03:45:43.827 PID:0x12a4 TID:0x12a8 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-26 03:45:43.842 PID:0x12a4 TID:0x12c8 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-26 03:45:43.842 PID:0x12a4 TID:0x12c8 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-26 03:45:43.842 PID:0x12a4 TID:0x12c8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-26 03:45:43.842 PID:0x12a4 TID:0x12c8 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-26 03:45:43.842 PID:0x12a4 TID:0x12c8 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-26 05:13:31.461 PID:0x10c4 TID:0x10c8 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-26 05:13:31.461 PID:0x10c4 TID:0x10c8 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-26 05:13:31.461 PID:0x10c4 TID:0x10c8 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-26 05:13:31.461 PID:0x10c4 TID:0x10c8 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-26 05:13:31.477 PID:0x10c4 TID:0x114c L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-26 05:13:31.477 PID:0x10c4 TID:0x114c L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-26 05:13:31.477 PID:0x10c4 TID:0x114c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-26 05:13:31.477 PID:0x10c4 TID:0x114c L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-26 05:13:31.477 PID:0x10c4 TID:0x114c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-27 05:33:42.927 PID:0x12d0 TID:0x12d4 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-27 05:33:42.927 PID:0x12d0 TID:0x12d4 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-27 05:33:42.927 PID:0x12d0 TID:0x12d4 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-27 05:33:43.067 PID:0x12d0 TID:0x12d4 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-27 05:33:43.145 PID:0x12d0 TID:0x13ec L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-27 05:33:43.145 PID:0x12d0 TID:0x13ec L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-27 05:33:43.161 PID:0x12d0 TID:0x13ec L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-27 05:33:43.176 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 59 more times 2012-06-27 05:33:44.222 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 58 more times 2012-06-27 05:33:45.314 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 57 more times 2012-06-27 05:33:46.374 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 56 more times 2012-06-27 05:33:47.404 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 55 more times 2012-06-27 05:33:48.465 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 54 more times 2012-06-27 05:33:49.494 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 53 more times 2012-06-27 05:33:50.524 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 52 more times 2012-06-27 05:33:51.538 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 51 more times 2012-06-27 05:33:52.583 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 50 more times 2012-06-27 05:33:53.628 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 49 more times 2012-06-27 05:33:54.642 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 48 more times 2012-06-27 05:33:55.656 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 47 more times 2012-06-27 05:33:56.670 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 46 more times 2012-06-27 05:47:45.498 PID:0x12d0 TID:0x13ec L:2104:CRDPENCWin32DesktopProxy::DriverDetachInternal - Detach driver returned BADPARAM, retrying 45 more times 2012-06-27 05:47:49.741 PID:0x12d0 TID:0x13ec L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-27 05:47:49.772 PID:0x12d0 TID:0x13ec L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-28 06:11:31.126 PID:0xee4 TID:0xee8 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-28 06:11:31.126 PID:0xee4 TID:0xee8 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-28 06:11:31.126 PID:0xee4 TID:0xf1c L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-28 06:11:31.126 PID:0xee4 TID:0xf1c L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-28 06:11:31.126 PID:0xee4 TID:0xf1c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-28 06:11:31.157 PID:0xee4 TID:0xf1c L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-28 06:11:31.157 PID:0xee4 TID:0xf1c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-28 12:53:51.824 PID:0x1178 TID:0x117c L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-06-28 12:53:51.824 PID:0x1178 TID:0x117c L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-06-28 12:53:51.824 PID:0x1178 TID:0x117c L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-06-28 12:53:51.840 PID:0x1178 TID:0x117c L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-06-28 12:53:51.840 PID:0x1178 TID:0x11e4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-28 12:53:51.840 PID:0x1178 TID:0x11e4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-28 12:53:51.840 PID:0x1178 TID:0x11e4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-28 12:53:51.855 PID:0x1178 TID:0x11e4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-28 12:53:51.855 PID:0x1178 TID:0x11e4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-28 13:02:02.099 PID:0xc60 TID:0xcd0 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-28 13:02:02.099 PID:0xc60 TID:0xcd0 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-28 13:02:02.099 PID:0xc60 TID:0x10fc L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-28 13:02:02.099 PID:0xc60 TID:0x10fc L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-28 13:02:02.099 PID:0xc60 TID:0x10fc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-28 13:02:02.114 PID:0xc60 TID:0x10fc L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-28 13:02:02.114 PID:0xc60 TID:0x10fc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-06-29 03:09:25.446 PID:0xf50 TID:0xf54 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-06-29 03:09:25.446 PID:0xf50 TID:0xf54 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-06-29 03:09:25.446 PID:0xf50 TID:0xfd4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-06-29 03:09:25.446 PID:0xf50 TID:0xfd4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-06-29 03:09:25.446 PID:0xf50 TID:0xfd4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-06-29 03:09:25.462 PID:0xf50 TID:0xfd4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-06-29 03:09:25.462 PID:0xf50 TID:0xfd4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-01 04:18:22.177 PID:0xfa0 TID:0xfa4 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-07-01 04:18:22.177 PID:0xfa0 TID:0xfa4 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-07-01 04:18:22.192 PID:0xfa0 TID:0xe3c L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-01 04:18:22.192 PID:0xfa0 TID:0xe3c L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-01 04:18:22.192 PID:0xfa0 TID:0xe3c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-01 04:18:22.192 PID:0xfa0 TID:0xe3c L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-01 04:18:22.208 PID:0xfa0 TID:0xe3c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-01 13:17:51.319 PID:0xef8 TID:0xf00 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-07-01 13:17:51.319 PID:0xef8 TID:0xf00 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-07-01 13:17:51.319 PID:0xef8 TID:0x11fc L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-01 13:17:51.319 PID:0xef8 TID:0x11fc L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-01 13:17:51.319 PID:0xef8 TID:0x11fc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-01 13:17:51.319 PID:0xef8 TID:0x11fc L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-01 13:17:51.319 PID:0xef8 TID:0x11fc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-01 16:15:54.014 PID:0xf9c TID:0xfa0 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-07-01 16:15:54.014 PID:0xf9c TID:0xfa0 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-07-01 16:15:54.014 PID:0xf9c TID:0xfc4 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-01 16:15:54.014 PID:0xf9c TID:0xfc4 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-01 16:15:54.014 PID:0xf9c TID:0xfc4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-01 16:15:54.014 PID:0xf9c TID:0xfc4 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-01 16:15:54.014 PID:0xf9c TID:0xfc4 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-05 13:42:30.503 PID:0x12ac TID:0x12b0 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-07-05 13:42:30.503 PID:0x12ac TID:0x12b0 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-07-05 13:42:30.503 PID:0x12ac TID:0x12b0 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-07-05 13:42:30.503 PID:0x12ac TID:0x12b0 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-07-05 13:42:30.503 PID:0x12ac TID:0x12dc L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-05 13:42:30.503 PID:0x12ac TID:0x12dc L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-05 13:42:30.503 PID:0x12ac TID:0x12dc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-05 13:42:30.519 PID:0x12ac TID:0x12dc L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-05 13:42:30.519 PID:0x12ac TID:0x12dc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-05 15:09:43.824 PID:0x11dc TID:0x11e0 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-07-05 15:09:43.824 PID:0x11dc TID:0x11e0 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-07-05 15:09:43.824 PID:0x11dc TID:0x11e0 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-07-05 15:09:46.289 PID:0x11dc TID:0x11e0 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-07-05 15:09:46.304 PID:0x11dc TID:0x1134 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-05 15:09:46.304 PID:0x11dc TID:0x1134 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-05 15:09:46.304 PID:0x11dc TID:0x1134 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-05 15:09:46.320 PID:0x11dc TID:0x1134 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-05 15:09:46.320 PID:0x11dc TID:0x1134 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-06 19:55:17.925 PID:0xdd0 TID:0xddc L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-07-06 19:55:17.925 PID:0xdd0 TID:0xddc L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-07-06 19:55:17.925 PID:0xdd0 TID:0xfcc L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-06 19:55:17.925 PID:0xdd0 TID:0xfcc L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-06 19:55:17.925 PID:0xdd0 TID:0xfcc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-06 19:55:17.925 PID:0xdd0 TID:0xfcc L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-06 19:55:17.941 PID:0xdd0 TID:0xfcc L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-09 05:05:29.758 PID:0x1358 TID:0x135c L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-07-09 05:05:29.758 PID:0x1358 TID:0x135c L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-07-09 05:05:29.758 PID:0x1358 TID:0x135c L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-07-09 05:05:29.758 PID:0x1358 TID:0x135c L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-07-09 05:05:29.758 PID:0x1358 TID:0x1388 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-09 05:05:29.758 PID:0x1358 TID:0x1388 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-09 05:05:29.758 PID:0x1358 TID:0x1388 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-09 05:05:29.758 PID:0x1358 TID:0x1388 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-09 05:05:29.758 PID:0x1358 TID:0x1388 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-09 05:10:35.431 PID:0x11d0 TID:0x11d4 L:0266:CRDPDskExpMgr::SaveDefaultSPIFlags - Saving current SPI flags 2012-07-09 05:10:35.431 PID:0x11d0 TID:0x11d4 L:0733:CRDPDskExpMgr::GetSPIFlags - Entered GetSPIFlags 2012-07-09 05:10:35.431 PID:0x11d0 TID:0x11d4 L:0737:CRDPDskExpMgr::GetSPIFlags - Impersonate logged on user: 1 2012-07-09 05:10:35.431 PID:0x11d0 TID:0x11d4 L:0770:CRDPDskExpMgr::GetSPIFlags - Current wallpaper is (C:\Users\Bill Johnson\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg) 2012-07-09 05:10:35.446 PID:0x11d0 TID:0x125c L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-09 05:10:35.446 PID:0x11d0 TID:0x125c L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-09 05:10:35.446 PID:0x11d0 TID:0x125c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-09 05:10:35.446 PID:0x11d0 TID:0x125c L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-09 05:10:35.446 PID:0x11d0 TID:0x125c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-09 13:03:31.549 PID:0xc38 TID:0xcbc L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-07-09 13:03:31.549 PID:0xc38 TID:0xcbc L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-07-09 13:03:31.549 PID:0xc38 TID:0xe8c L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-09 13:03:31.549 PID:0xc38 TID:0xe8c L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-09 13:03:31.549 PID:0xc38 TID:0xe8c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-09 13:03:31.549 PID:0xc38 TID:0xe8c L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-09 13:03:31.549 PID:0xc38 TID:0xe8c L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-11 07:55:37.330 PID:0xe00 TID:0xf08 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-07-11 07:55:37.330 PID:0xe00 TID:0xf08 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-07-11 07:55:37.330 PID:0xe00 TID:0xc60 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-11 07:55:37.330 PID:0xe00 TID:0xc60 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-11 07:55:37.330 PID:0xe00 TID:0xc60 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-11 07:55:37.330 PID:0xe00 TID:0xc60 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-11 07:55:37.330 PID:0xe00 TID:0xc60 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-14 05:02:01.243 PID:0xfc4 TID:0xfc8 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-07-14 05:02:01.243 PID:0xfc4 TID:0xfc8 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-07-14 05:02:01.259 PID:0xfc4 TID:0xc74 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-14 05:02:01.259 PID:0xfc4 TID:0xc74 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-14 05:02:01.259 PID:0xfc4 TID:0xc74 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-14 05:02:01.274 PID:0xfc4 TID:0xc74 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-14 05:02:01.274 PID:0xfc4 TID:0xc74 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain TRC_Terminate TRC_Initialize 2012-07-16 07:07:51.049 PID:0xebc TID:0xec0 L:0098:GetLoggedOnUserToken - Failed WTSQueryUserToken with error (1008) 2012-07-16 07:07:51.049 PID:0xebc TID:0xec0 L:0331:CRDPDskExpMgr::Initialize - No user logged on 2012-07-16 07:07:51.049 PID:0xebc TID:0x1058 L:1548:CRDPENCWin32DesktopProxy::DskProxyThreadProc - Desktop configuration change detected 2012-07-16 07:07:51.049 PID:0xebc TID:0x1058 L:3005:CRDPENCWin32DesktopProxy::OnDisplayChange - OnDisplayChange 2012-07-16 07:07:51.049 PID:0xebc TID:0x1058 L:3040:CRDPENCWin32DesktopProxy::OnDisableCurtain - OnDisableCurtain 2012-07-16 07:07:51.049 PID:0xebc TID:0x1058 L:2110:CRDPENCWin32DesktopProxy::DriverDetachInternal - Successfully detached driver 2012-07-16 07:07:51.049 PID:0xebc TID:0x1058 L:3040:CRDPENCWin32Deskt

I got the virus System fix and it has caused all kinds of problems. I had lost all my settop programs. My system restore will not work amd my C Runtime library won't let me donload any games. I got rid of the virus finally and somehow got my settop programs back. My adminstrative tools are missing and I also keep getting a runtime error 53. I run windows Xp system 32. Thank you.