Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

unknown infection


  • This topic is locked This topic is locked
16 replies to this topic

#1 535cheetah

535cheetah

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 03 September 2009 - 01:59 PM

was told to run a few programs then post results in here.... along with problems

1. google will redirect to other sites often
2. homepage will sometimes be changed
3. programs that are suppose to run on startup, are not
4. tried to run a adaware program and tells me cannot connect to server or something of the like.
5. internet is sometimes very slow or wont work unless i refresh
6. tried mbam, wouldnt work, started but disapeared like other adaware program.
7. also tried combofix it worked once, but not all the way .... once computer rebooted it didnt finish. after that it wont work anymore.


ran Win32kDiag and heres what i got.......

also they said to put in here that i could not run a DDS but i ran a dds results are below....


Log file is located at: C:\Users\rick\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\Windows'...



Found mount point : C:\Windows\AppPatch\Custom\Custom

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.GpmgmtLib\2.0.0.0__31bf3856ad364e35\2.0.0.0__31bf3856ad364e35

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.Private.GpmgmtpLib\2.0.0.0__31bf3856ad364e35\2.0.0.0__31bf3856ad364e35

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.GPOAdminGrid\2.0.0.0__31bf3856ad364e35\2.0.0.0__31bf3856ad364e35

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5C7F.tmp\ZAP5C7F.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5CA0.tmp\ZAP5CA0.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPAD9C.tmp\ZAPAD9C.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD078.tmp\ZAPD078.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD103.tmp\ZAPD103.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPED1C.tmp\ZAPED1C.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\CSC\v2.0.6\namespace\namespace

Mount point destination : \Device\__max++>\^

Cannot access: C:\Windows\CSC\v2.0.6\pq










DDS (Ver_09-07-30.01) - NTFSx86
Run by rick at 5:53:45.69 on Thu 09/03/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.5.0_12
Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1252.1.1033.18.3326.2043 [GMT -4:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\AASP\1.00.40\aaCenter.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe
C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
C:\Windows\explorer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\Internet Explorer\ieuser.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\rick\Desktop\other installs\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [Steam] "c:\program files\steam\steam.exe" -silent
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Yahoo! Pager] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [igndlm.exe] c:\program files\download manager\DLM.exe /windowsstart /startifwork
uRun: [RGSC] c:\users\rick\desktop\gta\rockstar games social club\RGSCLauncher.exe /silent
uRun: [EA Core] "c:\program files\electronic arts\eadm\Core.exe" -silent
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe"
mRun: [Ai Nap] "c:\program files\asus\ai suite\ainap\AiNap.exe"
mRun: [CPU Power Monitor] "c:\program files\asus\ai suite\aigear3\CpuPowerMonitor.exe"
mRun: [Cpu Level Up help] c:\program files\asus\ai suite\CpuLevelUpHelp.exe
mRun: [UpdReg] *DISABLED*c:\windows\UpdReg.EXE
mRun: [Launch LCDMon] "c:\program files\logitech\gamepanel software\lcd manager\LCDMon.exe"
mRun: [Launch LGDCore] "c:\program files\logitech\gamepanel software\g-series software\LGDCore.exe" /SHOWHIDE
mRun: [Copperhead] c:\program files\razer\copperhead\razerhid.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [Lachesis] c:\program files\razer\lachesis\razerhid.exe
mRun: [CTHelper] *DISABLED*CTHELPER.EXE
mRun: [CTxfiHlp] *DISABLED*CTXFIHLP.EXE
mRun: [VirtualCloneDrive] "c:\users\rick\desktop\virtual clone\virtualclonedrive\VCDDaemon.exe" /s
mRun: [QuickTime Task] *DISABLED*"c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
dRun: [DevconDefaultDB] c:\windows\system32\READREG /SILENT /FAIL=1
dRun: [CtxfiReg] CTXFIREG.exe /FAIL1
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.srtest.com/srl_bin/sysreqlab3.cab
DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_12-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://www.creative.com/su2/CTL_V02002/ocx/15034/CTPID.cab
TCP: {5B5F9EAA-5125-4540-B1FD-D0FBE62197D7} = 192.168.0.1

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-8-31 335240]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-8-31 108552]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-5-14 107256]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2009-5-14 731840]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2009-5-14 93312]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2009-7-14 239648]
R3 LachesisFltr;Lachesis Mouse Driver;c:\windows\system32\drivers\Lachesis.sys [2008-11-28 12032]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\lavasoft\ad-aware\aawservice.exe" --> c:\program files\lavasoft\ad-aware\AAWService.exe [?]
S3 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\avg\avg8\avgemc.exe --> c:\progra~1\avg\avg8\avgemc.exe [?]
S3 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-8-31 297752]
S3 Creative ALchemy AL1 Licensing Service;Creative ALchemy AL1 Licensing Service;c:\program files\common files\creative labs shared\service\AL1Licensing.exe [2008-2-10 79360]
S3 UsbFltr;Razer Copperhead Driver;c:\windows\system32\drivers\copperhd.sys [2005-11-2 11596]

=============== Created Last 30 ================

2009-09-03 05:21 318,976 a------- c:\windows\system32\CF7860.exe
2009-09-03 05:21 318,976 a------- c:\windows\system32\cmd.execf
2009-09-03 05:09 318,976 a------- c:\windows\system32\CF11435.exe
2009-09-03 05:09 <DIR> --ds---- C:\fun.cmd
2009-09-03 05:08 318,976 a------- c:\windows\system32\CF17969.exe
2009-09-03 04:54 318,976 a------- c:\windows\system32\CF20217.exe
2009-09-03 04:54 <DIR> --ds---- C:\run.cmd
2009-09-03 04:52 318,976 a------- c:\windows\system32\CF18074.exe
2009-09-03 04:51 318,976 a------- c:\windows\system32\CF21442.exe
2009-09-03 04:48 318,976 a------- c:\windows\system32\CF29405.exe
2009-09-03 04:37 318,976 a------- c:\windows\system32\CF17770.exe
2009-09-03 04:37 <DIR> --ds---- C:\runner.cmd
2009-09-03 01:08 4,240,384 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-03 01:08 28,672 a------- c:\windows\system32\Apphlpdm.dll
2009-09-03 01:06 15 a------- c:\users\rick\settings.dat
2009-09-02 03:03 318,976 a------- c:\windows\system32\CF5285.exe
2009-09-02 03:01 318,976 a------- c:\windows\system32\CF9165.exe
2009-09-02 01:25 <DIR> --ds---- C:\ComboFix
2009-09-02 01:25 318,976 a------- c:\windows\system32\CF6222.exe
2009-09-02 01:23 <DIR> --d----- c:\users\rick\appdata\roaming\Malwarebytes
2009-09-02 01:23 <DIR> --d----- c:\programdata\Malwarebytes
2009-09-02 01:23 <DIR> --d----- c:\program files\malwarebytes
2009-09-02 01:23 <DIR> --d----- c:\progra~2\Malwarebytes
2009-09-02 01:03 <DIR> --d----- c:\program files\Sophos
2009-09-02 00:39 229,376 a------- c:\windows\PEV.exe
2009-09-02 00:39 161,792 a------- c:\windows\SWREG.exe
2009-09-02 00:39 98,816 a------- c:\windows\sed.exe
2009-09-02 00:39 318,976 a------- c:\windows\system32\CF16744.exe
2009-09-01 03:40 <DIR> --d----- c:\windows\pss
2009-09-01 03:21 <DIR> --d----- c:\program files\Lavasoft
2009-09-01 02:06 7,396 a------- c:\windows\system32\drivers\pctcore.cat
2009-09-01 02:06 <DIR> a-d----- c:\programdata\TEMP
2009-08-31 13:39 <DIR> --d-h--- C:\$AVG8.VAULT$
2009-08-31 12:56 108,552 a------- c:\windows\system32\drivers\avgtdix.sys
2009-08-31 12:56 11,952 a------- c:\windows\system32\avgrsstx.dll.install_backup
2009-08-31 12:56 335,240 a------- c:\windows\system32\drivers\avgldx86.sys
2009-08-31 12:56 <DIR> --d----- c:\windows\system32\drivers\Avg
2009-08-31 12:56 <DIR> --d----- c:\programdata\avg8
2009-08-31 12:56 <DIR> --d----- c:\program files\AVG
2009-08-31 12:56 <DIR> --d----- c:\progra~2\avg8
2009-08-31 12:49 <DIR> --d----- c:\users\rick\appdata\roaming\AVG8
2009-08-28 19:41 1,017,545 a------- c:\windows\system32\cpuz.exe
2009-08-28 19:41 119,056 a------- c:\windows\system32\reg_c3.exe
2009-08-28 19:41 73,728 a------- c:\windows\system32\pv_c3.exe
2009-08-27 12:53 2,048 a------- c:\windows\system32\tzres.dll
2009-08-21 13:18 32,784 a------- c:\programdata\nvModes.dat
2009-08-21 13:18 32,784 a------- c:\progra~2\nvModes.dat
2009-08-21 04:54 <DIR> --d----- c:\program files\NVIDIA Corporation
2009-08-21 04:52 485,920 a------- c:\windows\system32\nvudisp.exe
2009-08-21 04:52 10,854,400 a------- c:\windows\system32\nvoglv32.dll
2009-08-21 04:52 9,557,216 a------- c:\windows\system32\drivers\nvlddmkm.sys
2009-08-21 04:52 3,287,040 a------- c:\windows\system32\nvwgf2um.dll
2009-08-21 04:52 10,161 a------- c:\windows\system32\nvdisp.nvu
2009-08-21 04:52 4,224 a------- c:\windows\system32\drivers\nvBridge.kmd
2009-08-21 04:52 2,169,376 a------- c:\windows\system32\nvcuvid.dll
2009-08-21 04:52 1,983,488 a------- c:\windows\system32\nvcuda.dll
2009-08-21 04:52 1,706,528 a------- c:\windows\system32\nvcuvenc.dll
2009-08-21 04:52 151,552 a------- c:\windows\system32\nvcod157.dll
2009-08-21 04:52 151,552 a------- c:\windows\system32\nvcod.dll
2009-08-20 16:55 <DIR> --d----- c:\program files\Lavalys
2009-08-17 11:43 27,672 a----r-- c:\windows\system32\drivers\Entech.sys
2009-08-17 11:43 <DIR> --d----- c:\windows\system32\Futuremark
2009-08-17 11:43 <DIR> --d----- c:\program files\common files\Futuremark Shared
2009-08-17 11:43 <DIR> --d----- c:\program files\Futuremark
2009-08-15 03:06 105,016 a------- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-08-15 03:06 97,800 a------- c:\windows\system32\infocardapi.dll
2009-08-15 03:06 622,080 a------- c:\windows\system32\icardagt.exe
2009-08-15 03:06 43,544 a------- c:\windows\system32\PresentationHostProxy.dll
2009-08-15 03:06 37,384 a------- c:\windows\system32\infocardcpl.cpl
2009-08-15 03:06 11,264 a------- c:\windows\system32\icardres.dll
2009-08-15 03:06 781,344 a------- c:\windows\system32\PresentationNative_v0300.dll
2009-08-15 03:06 326,160 a------- c:\windows\system32\PresentationHost.exe
2009-08-15 03:00 96,760 a------- c:\windows\system32\dfshim.dll
2009-08-15 03:00 282,112 a------- c:\windows\system32\mscoree.dll
2009-08-15 03:00 41,984 a------- c:\windows\system32\netfxperf.dll
2009-08-15 03:00 158,720 a------- c:\windows\system32\mscorier.dll
2009-08-15 03:00 83,968 a------- c:\windows\system32\mscories.dll
2009-08-12 20:08 71,680 a------- c:\windows\system32\atl.dll
2009-08-12 20:08 160,256 a------- c:\windows\system32\wkssvc.dll
2009-08-12 20:08 2,066,432 a------- c:\windows\system32\mstscax.dll
2009-08-12 20:08 91,136 a------- c:\windows\system32\avifil32.dll
2009-08-12 20:07 313,344 a------- c:\windows\system32\wmpdxm.dll
2009-08-12 20:07 7,680 a------- c:\windows\system32\spwmp.dll
2009-08-12 20:07 4,096 a------- c:\windows\system32\msdxm.ocx
2009-08-12 20:07 4,096 a------- c:\windows\system32\dxmasf.dll
2009-08-12 20:07 8,147,456 a------- c:\windows\system32\wmploc.DLL
2009-08-12 20:07 43,520 a------- c:\windows\system32\msdxm.tlb
2009-08-12 20:07 18,432 a------- c:\windows\system32\amcompat.tlb

==================== Find3M ====================

2009-08-21 04:53 86,016 a------- c:\windows\inf\infstrng.dat
2009-08-21 04:53 51,200 a------- c:\windows\inf\infpub.dat
2009-08-21 04:53 86,016 a------- c:\windows\inf\infstor.dat
2009-08-17 11:44 413,696 a------- c:\windows\system32\wrap_oal.dll
2009-08-17 11:44 110,592 a------- c:\windows\system32\OpenAL32.dll
2009-07-20 20:03 0 a---h--- c:\windows\system32\drivers\Msft_User_WpdRapi_01_00_00.Wdf
2009-07-18 12:06 827,904 a------- c:\windows\system32\wininet.dll
2009-07-18 12:01 78,336 a------- c:\windows\system32\ieencode.dll
2009-07-18 05:46 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-07-14 14:54 7,565,824 a------- c:\windows\system32\nvd3dum.dll
2009-07-14 14:54 1,044,992 a------- c:\windows\system32\nvapi.dll
2009-07-10 07:01 485,920 a------- c:\windows\system32\NVUNINST.EXE
2009-06-15 11:24 156,672 a------- c:\windows\system32\t2embed.dll
2009-06-15 11:20 72,704 a------- c:\windows\system32\fontsub.dll
2009-06-15 11:20 10,240 a------- c:\windows\system32\dciman32.dll
2009-06-15 08:52 289,792 a------- c:\windows\system32\atmfd.dll
2009-06-01 03:19 174 a--sh--- c:\program files\desktop.ini
2009-06-01 03:11 665,600 a------- c:\windows\inf\drvindex.dat
2006-11-02 08:40 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 08:40 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 08:40 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 08:40 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 05:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 05:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 05:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 05:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 5:53:57.43 ===============

BC AdBot (Login to Remove)

 


#2 535cheetah

535cheetah
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 11 September 2009 - 12:37 PM

just wondering if maybe you guys are reallly busy or i got over looked? any way .... i ran sophos anti-rootkit prog. and got this for the sophos log




Sophos Anti-Rootkit Version 1.5.0 © 2009 Sophos Plc
Started logging on 9/11/2009 at 12:46:32 PM
User "rick" on computer "CHEETAH"
Windows version 6.0 SP 1.0 Service Pack 1 build 6001 SM=0x100 PT=0x1 Win32
Info: Starting process scan.
Info: Starting registry scan.
Info: Starting disk scan of C: (NTFS).
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\;del=js;ajax=n;dcopt=ist;ad=pop;heavy=n;pageId=nwswk-id-214989;poe=yes;undefinedfromrss=n;rss=n;front=n;pos=leaderboard;sz=728x90;tile=1;ord=925859015232340200[1]
Hidden: file C:\Windows\System32\mrt.exe
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\ife;ad=170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;undefinedfromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=590710045173607800[1]
Hidden: file C:\Users\rick\AppData\Roaming\SecuROM\UserData\???????????p?????????
Hidden: file C:\Users\rick\AppData\Roaming\SecuROM\UserData\???????????p?????????
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=7763731389;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\;dir=life;ad=170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989;poe=yes;undefinedfromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=925859015232340200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\d-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=742106854;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Windows\System32\drivers\sptd.sys
Hidden: file C:\Program Files\malwarebytes\mbam.exe
Hidden: file C:\Windows\PEV.exe
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\AJHl%2FB%3Dx1X_Btj8fdA-%2FJ%3D1251834041148762%2FK%3DbkjCCc.M.5HMj5sL_OSaLg%2FA%3D5761137%2FR%3D0%2F%2A%24,http%3A%2F%2Fus.mc1125.mail.yahoo.com%2Fmc%2Fmd[1].htm
Hidden: file C:\Users\rick\Desktop\other installs\RootRepeal.exe
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WH6AJJTB\.rC0JCagkrtuPmXH2Q%2FA%3D5761138%2FR%3D0%2F%2A%24,http%3A%2F%2Fus.mc1125.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3Dcp1252,;dcopt=rcl;mtfIFPath=nofile;ord=1251745370
Hidden: file C:\fun.cmd\swxcacls.cfxxe
Hidden: file C:\fun.cmd\PEV.cfxxe
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WH6AJJTB\.ty_X.mC5Tvf7ENVeg%2FA%3D5761138%2FR%3D0%2F%2A%24,http%3A%2F%2Fus.mc1125.mail.yahoo.com%2Fmc%2Fmd[1].php%3Fen%3Dcp1252,;dcopt=rcl;mtfIFPath=nofile;ord=1251779014
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=1247338210;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=1373401691;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=9914219831;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\d-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=617840159;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\ife;ad=300x100;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;undefinedfromrss=n;rss=n;front=n;pos=300x100;sz=300x100;tile=6;ord=590710045173607800[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\health;dir=life;ad=bb;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989;poe=yes;undefinedfromrss=n;rss=n;front=n;pos=bigbox;sz=300x250;tile=3;ord=925859015232340200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;undefinedfromrss=n;rss=n;front=n;pos=articleFlex;sz=300x250,336x850,160x600,300x600;tile=4;ord=590710045173607800[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\ajax=n;heavy=n;pageId=nwswk-id-214989;poe=yes;undefinedfromrss=n;rss=n;front=n;pos=articleFlex;sz=300x250,336x850,160x600,300x600;tile=4;ord=925859015232340200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\ntl;ad=170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=129272168396266770[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\dule;dir=take;ad=88x31;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989;poe=yes;undefinedfromrss=n;rss=n;front=n;pos=88x31_2;sz=88x31;tile=5;ord=925859015232340200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\;dir=life;ad=300x100;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989;poe=yes;undefinedfromrss=n;rss=n;front=n;pos=300x100;sz=300x100;tile=6;ord=925859015232340200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\b;del=js;ajax=n;dcopt=ist;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;undefinedfromrss=n;rss=n;front=n;pos=leaderboard;sz=728x90;tile=1;ord=590710045173607800[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\n;dcopt=ist;ad=pop;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;sz=728x90;tile=1;ord=990813037554861200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=9857194800;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=9805154539;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=990813037554861200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\;dir=life;ad=bb;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;undefinedfromrss=n;rss=n;front=n;pos=bigbox;sz=300x250;tile=3;ord=590710045173607800[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\ir=take;ad=88x31;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;undefinedfromrss=n;rss=n;front=n;pos=88x31_2;sz=88x31;tile=5;ord=590710045173607800[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;sz=300x250,336x850,160x600,300x600;tile=4;ord=990813037554861200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\fe;ad=bb;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=bigbox;sz=300x250;tile=3;ord=990813037554861200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\;ad=88x31;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=88x31_2;sz=88x31;tile=5;ord=990813037554861200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\300x100;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=300x100;sz=300x100;tile=6;ord=990813037554861200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\t;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=4431386009;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\n;dcopt=ist;ad=pop;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;sz=728x90;tile=1;ord=485356525097301950[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\d-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=428309377;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=9148999158;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=3206803838;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\=y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=168354364;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=3346268957;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=1822873156;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=2037229142;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=3457764954;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=3048122452;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=1523996084;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=8048438078;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=2664456653;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=4958641103;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=2414450675;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=4964002315;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=8014381980;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=1654221255;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\=y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=686552573;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=5707124164;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=8956753360;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=6724828852;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=4526930078;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=4806824705;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=1045317641;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=9915991643;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIuQIAAAAAAAIAAwAAAAAA0V2bpyMBAAAAAAAAADM4ODFmZjAwLTllOTUtMTFkZS04MGYyLTAwMzA0ODYzNDAxNAAAAAAAAAA=,,http%3A%2F%2Fwww.myspace[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=7619430231;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=3907858146;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIuQIAAAAAAAIAAwAAAAAAHIGbpyMBAAAAAAAAADNkZTRiYmY0LTllOTUtMTFkZS05Y2Y1LTAwMzA0ODYyZDcxMgAAAAAAAAA=,,http%3A%2F%2Fwww.myspace[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=2198250740;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=1626342208;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=3096419346;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=8045721699;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=3080259326;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIuQIAAAAAAAIAAwAAAAAAzJWbpyMBAAAAAAAAADQxMGNiNjU2LTllOTUtMTFkZS1iZGQ1LTAwMWU2ODM3ZTI2NQAAAAAAAAA=,,http%3A%2F%2Fwww.myspace[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=8986692692;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\d-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=945817573;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=2265419290;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=2933802126;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=5985832903;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=3968521890;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=9836925589;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=6569770760;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=5235332790;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=4101598955;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=4607849222;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\s;ajax=n;dcopt=ist;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;sz=728x90;tile=1;ord=359845025242130300[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=9312234434;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=3849167263;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\=y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=747681386;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\d-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=603849363;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\y;heavy=n;pageId=nwswk-id-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=3991416525;sz=728x90;tile=1;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-214585;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=7300223005;sz=300x250,336x850,160x600,300x600;tile=3;ord=129272168396266770[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=485356525097301950[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\fe;ad=bb;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=bigbox;sz=300x250;tile=3;ord=485356525097301950[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;sz=300x250,336x850,160x600,300x600;tile=4;ord=485356525097301950[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\;ad=88x31;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=88x31_2;sz=88x31;tile=5;ord=485356525097301950[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\300x100;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-3;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=300x100;sz=300x100;tile=6;ord=485356525097301950[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=359845025242130300[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\fe;ad=bb;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=bigbox;sz=300x250;tile=3;ord=359845025242130300[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\;ad=88x31;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=88x31_2;sz=88x31;tile=5;ord=359845025242130300[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;sz=300x250,336x850,160x600,300x600;tile=4;ord=359845025242130300[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\300x100;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=300x100;sz=300x100;tile=6;ord=359845025242130300[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\p;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=9987031368;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\s;ajax=n;dcopt=ist;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;sz=728x90;tile=1;ord=681056234260425200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\nce;ad=170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=144855846939001570[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=8394566707;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=5838076248;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=6035181488;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=9981707980;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=8925208866;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=7134818863;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\d-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=350389076;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=1519863021;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=6333852655;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=7295689909;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=1352915458;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=8448496587;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=6086602978;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=2362518423;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=4276338079;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\=y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=374356588;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\d-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=456782107;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=8192587614;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=3661788558;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=6867028439;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=8938219055;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=1841806634;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=3006499608;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=7144270915;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=1870160366;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Windows\winsxs\x86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.0.6001.18226_none_1053243b8b6fd401\WmiPrvSE.exe
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=8074075038;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=1635612707;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\y;heavy=n;pageId=nwswk-id-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;ajax_ord=7430992709;sz=728x90;tile=1;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\-213478;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;ajax_ord=5823642077;sz=300x250,336x850,160x600,300x600;tile=3;ord=144855846939001570[1].htm
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\s;ajax=n;dcopt=ist;ad=pop;heavy=n;pageId=nwswk-id-214989;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=leaderboard;sz=728x90;tile=1;ord=514333252156054200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=681056234260425200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\fe;ad=bb;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=bigbox;sz=300x250;tile=3;ord=681056234260425200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\151KE5BM\n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=articleFlex;sz=300x250,336x850,160x600,300x600;tile=4;ord=681056234260425200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\;ad=88x31;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=88x31_2;sz=88x31;tile=5;ord=681056234260425200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VIL6IYMJ\300x100;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989-page-2;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=300x100;sz=300x100;tile=6;ord=681056234260425200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G9AGNL6Q\ife;ad=170x113;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=170x113;sz=170x113;tile=2;ord=514333252156054200[1]
Hidden: file C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\E0JWU4NZ\;dir=life;ad=bb;del=js;ajax=n;heavy=n;pageId=nwswk-id-214989;poe=no;rs=B09806_10001;fromrss=n;rss=n;front=n;pos=bigbox;sz=300x250;tile=3;ord=514333252156054200[1]
Hidden: file C:\Windows\System32\cngaudit.dll
Hidden: file C:\Program Files\AVG\AVG8\avgcsrvx.exe
Info: Starting disk scan of H: (NTFS).
Stopped logging on 9/11/2009 at 13:18:52 PM

#3 schrauber

schrauber

    Mr.Mechanic


  • Malware Response Team
  • 24,794 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Munich,Germany
  • Local time:12:51 AM

Posted 19 September 2009 - 06:45 PM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.


Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE
regards,
schrauber

Posted Image
Posted Image

If I've not posted back within 48 hrs., feel free to send a PM with your topic link. Thank you!

If I have helped you then please consider donating to continue the fight against malware Posted Image

#4 535cheetah

535cheetah
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 21 September 2009 - 06:29 PM

hello , thanks for the reply...


i have since ( i think) gotten rid of the problem although i would like some one to take a look and make sure. and the steps that i should take next if any.???? once i got rid of the virus i also turned off restore points then turned them on and created a new restore point. here are the logs



DS (Ver_09-07-30.01) - NTFSx86
Run by rick at 19:23:48.21 on Mon 09/21/2009
Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.5.0_12
Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1252.1.1033.18.3326.2164 [GMT -4:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\AASP\1.00.40\aaCenter.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe
C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Razer\Lachesis\razerhid.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Razer\Lachesis\OSD.exe
C:\Windows\System32\CTHELPER.EXE
C:\Windows\System32\CTXFIHLP.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Steam\Steam.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\SYSTEM32\CTXFISPI.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
C:\Program Files\Razer\Lachesis\razerofa.exe
C:\Program Files\Common Files\Steam\SteamService.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\rick\Desktop\other installs\dds.scr

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [Steam] "c:\program files\steam\steam.exe" -silent
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [igndlm.exe] c:\program files\download manager\DLM.exe /windowsstart /startifwork
uRun: [RGSC] c:\users\rick\desktop\gta\rockstar games social club\RGSCLauncher.exe /silent
uRun: [EA Core] "c:\program files\electronic arts\eadm\Core.exe" -silent
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [Yahoo! Pager] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe"
mRun: [Ai Nap] "c:\program files\asus\ai suite\ainap\AiNap.exe"
mRun: [CPU Power Monitor] "c:\program files\asus\ai suite\aigear3\CpuPowerMonitor.exe"
mRun: [Cpu Level Up help] c:\program files\asus\ai suite\CpuLevelUpHelp.exe
mRun: [UpdReg] *DISABLED*c:\windows\UpdReg.EXE
mRun: [Launch LCDMon] "c:\program files\logitech\gamepanel software\lcd manager\LCDMon.exe"
mRun: [Copperhead] c:\program files\razer\copperhead\razerhid.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [Lachesis] c:\program files\razer\lachesis\razerhid.exe
mRun: [QuickTime Task] *DISABLED*"c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [CTHelper] CTHELPER.EXE
mRun: [CTxfiHlp] CTXFIHLP.EXE
dRun: [DevconDefaultDB] c:\windows\system32\READREG /SILENT /FAIL=1
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.srtest.com/srl_bin/sysreqlab3.cab
DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_12-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://www.creative.com/su2/CTL_V02002/ocx/15034/CTPID.cab
TCP: {5B5F9EAA-5125-4540-B1FD-D0FBE62197D7} = 192.168.0.1

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-8-31 335240]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-8-31 108552]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-5-14 107256]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2009-5-14 731840]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2009-5-14 93312]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2009-7-14 239648]
R3 LachesisFltr;Lachesis Mouse Driver;c:\windows\system32\drivers\Lachesis.sys [2008-11-28 12032]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\lavasoft\ad-aware\aawservice.exe" --> c:\program files\lavasoft\ad-aware\AAWService.exe [?]
S3 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\avg\avg8\avgemc.exe --> c:\progra~1\avg\avg8\avgemc.exe [?]
S3 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-8-31 297752]
S3 Creative ALchemy AL1 Licensing Service;Creative ALchemy AL1 Licensing Service;c:\program files\common files\creative labs shared\service\AL1Licensing.exe [2008-2-10 79360]
S3 UsbFltr;Razer Copperhead Driver;c:\windows\system32\drivers\copperhd.sys [2005-11-2 11596]

=============== Created Last 30 ================

2009-09-20 17:24 2,868,224 a------- c:\windows\system32\mf.dll
2009-09-20 14:56 1,080 a------- c:\windows\system32\settingsbkup.sfm
2009-09-20 14:56 1,080 a------- c:\windows\system32\settings.sfm
2009-09-20 14:53 <DIR> --d----- c:\windows\system32\eu-ES
2009-09-20 14:53 <DIR> --d----- c:\windows\system32\ca-ES
2009-09-20 14:53 <DIR> --d----- c:\windows\system32\vi-VN
2009-09-20 14:51 0 a---h--- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2009-09-20 14:38 <DIR> --d----- c:\windows\system32\EventProviders
2009-09-16 21:45 729,600 a------- c:\windows\system32\IMJP10K.DLL
2009-09-16 21:44 1,856,512 a------- c:\windows\system32\dbgeng.dll
2009-09-16 21:43 1,645,568 a------- c:\windows\system32\connect.dll
2009-09-16 21:42 744,448 a------- c:\windows\system32\wbem\wbemcore.dll
2009-09-16 21:42 614,912 a------- c:\windows\system32\wbem\fastprox.dll
2009-09-16 21:42 265,728 a------- c:\windows\system32\wbem\repdrvfs.dll
2009-09-16 21:42 265,728 a------- c:\windows\system32\wbem\esscli.dll
2009-09-16 21:42 189,440 a------- c:\windows\system32\wbem\mofd.dll
2009-09-16 21:42 83,968 a------- c:\windows\system32\wbem\wmiutils.dll
2009-09-16 21:42 30,208 a------- c:\windows\system32\wbem\wbemprox.dll
2009-09-16 21:42 705,536 a------- c:\windows\system32\SmiEngine.dll
2009-09-16 21:42 218,624 a------- c:\windows\system32\wdscore.dll
2009-09-16 21:42 130,560 a------- c:\windows\system32\PkgMgr.exe
2009-09-16 21:42 247,808 a------- c:\windows\system32\drvstore.dll
2009-09-12 15:32 1,071,088 a------- c:\windows\system32\MSCOMCTL.OCX
2009-09-12 15:32 118,784 a------- c:\windows\system32\MSSTDFMT.DLL
2009-09-12 15:32 <DIR> --d----- c:\program files\SpywareBlaster
2009-09-12 15:21 <DIR> --d----- c:\users\rick\.SunDownloadManager
2009-09-12 03:50 38,224 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-12 03:50 19,160 a------- c:\windows\system32\drivers\mbam.sys
2009-09-12 03:50 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-09-12 03:26 <DIR> --d----- C:\$RECYCLE.BIN
2009-09-11 12:35 <DIR> --d----- c:\program files\BitLocker
2009-09-03 04:54 <DIR> --d----- C:\run.cmd
2009-09-03 04:37 <DIR> --d----- C:\runner.cmd
2009-09-03 01:08 28,672 a------- c:\windows\system32\Apphlpdm.dll
2009-09-03 01:08 4,240,384 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-03 01:06 15 a------- c:\users\rick\settings.dat
2009-09-02 01:25 <DIR> --d----- C:\ComboFix
2009-09-02 01:23 <DIR> --d----- c:\users\rick\appdata\roaming\Malwarebytes
2009-09-02 01:23 <DIR> --d----- c:\programdata\Malwarebytes
2009-09-02 01:23 <DIR> --d----- c:\program files\malwarebytes
2009-09-02 01:23 <DIR> --d----- c:\progra~2\Malwarebytes
2009-09-02 01:03 <DIR> --d----- c:\program files\Sophos
2009-09-02 00:39 230,912 a------- c:\windows\PEV.exe
2009-09-02 00:39 161,792 a------- c:\windows\SWREG.exe
2009-09-02 00:39 98,816 a------- c:\windows\sed.exe
2009-09-01 03:40 <DIR> --d----- c:\windows\pss
2009-09-01 02:06 7,396 a------- c:\windows\system32\drivers\pctcore.cat
2009-09-01 02:06 <DIR> a-d----- c:\programdata\TEMP
2009-08-31 12:56 108,552 a------- c:\windows\system32\drivers\avgtdix.sys
2009-08-31 12:56 11,952 a------- c:\windows\system32\avgrsstx.dll.install_backup
2009-08-31 12:56 335,240 a------- c:\windows\system32\drivers\avgldx86.sys
2009-08-31 12:56 <DIR> --d----- c:\windows\system32\drivers\Avg
2009-08-31 12:56 <DIR> --d----- c:\programdata\avg8
2009-08-31 12:56 <DIR> --d----- c:\program files\AVG
2009-08-31 12:56 <DIR> --d----- c:\progra~2\avg8
2009-08-31 12:49 <DIR> --d----- c:\users\rick\appdata\roaming\AVG8
2009-08-28 19:41 1,017,545 a------- c:\windows\system32\cpuz.exe
2009-08-28 19:41 119,056 a------- c:\windows\system32\reg_c3.exe
2009-08-28 19:41 73,728 a------- c:\windows\system32\pv_c3.exe
2009-08-27 12:53 2,048 a------- c:\windows\system32\tzres.dll
2009-08-26 11:40 1,696,768 a------- c:\windows\system32\gameux.dll

==================== Find3M ====================

2009-09-21 12:51 32,784 a------- c:\programdata\nvModes.dat
2009-09-21 12:51 32,784 a------- c:\progra~2\nvModes.dat
2009-09-20 14:59 143,360 a------- c:\windows\inf\infstrng.dat
2009-09-20 14:59 86,016 a------- c:\windows\inf\infstor.dat
2009-09-20 14:59 51,200 a------- c:\windows\inf\infpub.dat
2009-09-20 14:53 665,600 a------- c:\windows\inf\drvindex.dat
2009-09-20 14:52 413,696 a------- c:\windows\system32\wrap_oal.dll
2009-09-20 14:52 110,592 a------- c:\windows\system32\OpenAL32.dll
2009-08-28 22:30 173,056 a------- c:\windows\apppatch\AcXtrnal.dll
2009-08-28 22:30 458,752 a------- c:\windows\apppatch\AcSpecfc.dll
2009-08-28 22:30 2,159,616 a------- c:\windows\apppatch\AcGenral.dll
2009-08-28 22:30 542,720 a------- c:\windows\apppatch\AcLayers.dll
2009-07-18 12:01 78,336 a------- c:\windows\system32\ieencode.dll
2009-07-18 07:35 828,416 a------- c:\windows\system32\wininet.dll
2009-07-17 09:54 71,680 a------- c:\windows\system32\atl.dll
2009-07-15 08:40 8,147,456 a------- c:\windows\system32\wmploc.DLL
2009-07-15 08:39 313,344 a------- c:\windows\system32\wmpdxm.dll
2009-07-15 08:39 4,096 a------- c:\windows\system32\dxmasf.dll
2009-07-15 08:39 7,680 a------- c:\windows\system32\spwmp.dll
2009-07-14 14:54 10,854,400 a------- c:\windows\system32\nvoglv32.dll
2009-07-14 14:54 7,565,824 a------- c:\windows\system32\nvd3dum.dll
2009-07-14 14:54 3,287,040 a------- c:\windows\system32\nvwgf2um.dll
2009-07-14 14:54 2,169,376 a------- c:\windows\system32\nvcuvid.dll
2009-07-14 14:54 1,983,488 a------- c:\windows\system32\nvcuda.dll
2009-07-14 14:54 1,706,528 a------- c:\windows\system32\nvcuvenc.dll
2009-07-14 14:54 1,044,992 a------- c:\windows\system32\nvapi.dll
2009-07-14 14:54 485,920 a------- c:\windows\system32\nvudisp.exe
2009-07-14 14:54 151,552 a------- c:\windows\system32\nvcod157.dll
2009-07-14 14:54 151,552 a------- c:\windows\system32\nvcod.dll
2009-07-10 07:01 485,920 a------- c:\windows\system32\NVUNINST.EXE
2009-06-01 03:19 174 a--sh--- c:\program files\desktop.ini
2006-11-02 08:40 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 08:40 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 08:40 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 08:40 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 05:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 05:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 05:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 05:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 19:24:02.17 ===============






DDS (Ver_09-07-30.01)

Microsoft® Windows Vista™ Ultimate
Boot Device: \Device\HarddiskVolume1
Install Date: 2/10/2008 3:44:02 PM
System Uptime: 9/21/2009 8:42:26 AM (11 hours ago)

Motherboard: ASUSTeK Computer INC. | | P5E
Processor: Intel® Core™2 Duo CPU E8400 @ 3.00GHz | LGA775 | 2997/333mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 244 GiB total, 123.954 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()
H: is FIXED (NTFS) - 687 GiB total, 673.955 GiB free.

==== Disabled Device Manager Items =============

Class GUID: {4d36e96b-e325-11ce-bfc1-08002be10318}
Description: Standard PS/2 Keyboard
Device ID: ACPI\PNP0303\4&23F9C1E3&0
Manufacturer: (Standard keyboards)
Name: Standard PS/2 Keyboard
PNP Device ID: ACPI\PNP0303\4&23F9C1E3&0
Service: i8042prt

Class GUID: {4D36E97B-E325-11CE-BFC1-08002BE10318}
Description: ADIC07OH IDE Controller
Device ID: ACPI\PNPA000\4&5D18F2DF&0
Manufacturer: (Standard mass storage controllers)
Name: ADIC07OH IDE Controller
PNP Device ID: ACPI\PNPA000\4&5D18F2DF&0
Service: ai4gca7t

==== System Restore Points ===================

RP78: 9/12/2009 3:18:16 PM - day after virus looks gone
RP79: 9/13/2009 3:00:11 AM - Windows Update
RP80: 9/13/2009 5:13:40 PM - Scheduled Checkpoint
RP81: 9/14/2009 3:00:11 AM - Windows Update
RP82: 9/14/2009 1:17:15 PM - Windows Update
RP83: 9/15/2009 3:00:10 AM - Windows Update
RP84: 9/16/2009 3:00:11 AM - Windows Update
RP85: 9/17/2009 6:41:50 AM - Windows Update
RP86: 9/18/2009 2:05:04 AM - Windows Update
RP87: 9/18/2009 3:00:10 AM - Windows Update
RP88: 9/19/2009 12:53:03 AM - Scheduled Checkpoint
RP89: 9/19/2009 3:00:11 AM - Windows Update
RP90: 9/19/2009 10:08:33 PM - Scheduled Checkpoint
RP91: 9/20/2009 3:00:11 AM - Windows Update
RP92: 9/20/2009 2:36:20 PM - Windows Update
RP93: 9/20/2009 2:38:09 PM - Windows Update
RP94: 9/20/2009 3:03:57 PM - Windows Update
RP95: 9/20/2009 3:05:48 PM - Windows Update
RP96: 9/20/2009 4:17:57 PM - Windows Update
RP97: 9/20/2009 5:24:39 PM - Windows Update
RP98: 9/21/2009 8:45:49 AM - Windows Update
RP99: 9/21/2009 4:16:47 PM - Windows Update

==== Installed Programs ======================

3DMark06
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.1
AI Suite
Apple Software Update
Arena 4.0
ASUSUpdate
AVG Free 8.5
Azureus Vuze
BioShock
CMN3
CMN3 4.0
Counter-Strike: Source
Creative ALchemy (X-Fi Edition)
Creative MediaSource 5
Creative Smart Recorder
Creative Software AutoUpdate
Creative System Information
Creative WaveStudio 7
Day of Defeat: Source
Download Manager 2.3.7
Driver Detective
ESET NOD32 Antivirus
Eternal Silence
EVEREST Corporate Edition v5.02
Fallout 3
Futuremark SystemInfo
Geekbench 2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Intel® Matrix Storage Manager
J2SE Runtime Environment 5.0 Update 12
Java™ 6 Update 13
Left 4 Dead
Logitech GamePanel Software 2.02
Malwarebytes' Anti-Malware
Marvell Miniport Driver
Microsoft .NET Framework 3.5 SP1
Microsoft Games for Windows - LIVE Redistributable
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft WSE 3.0 Runtime
mIRC
NVIDIA Drivers
NVIDIA PhysX
NVIDIA Stereoscopic 3D Driver
OpenAL
PC Probe II
Picasa 3
Plants vs. Zombies
Portal
QuickTime
Razer Copperhead
Razer Lachesis
Rockstar Games Social Club
Sophos Anti-Rootkit 1.5.0
Sound Blaster X-Fi
Source SDK
Source SDK Base 2007
SpywareBlaster 4.2
Steam
Synergy
System Requirements Lab
Team Fortress 2
TeamSpeak 2 RC2
The Sims™ 3
Unreal Tournament 3
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Ventrilo Client
VirtualCloneDrive
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WinRAR archiver
Xfire (remove only)
Yahoo! Messenger
Zombie Panic! Source

==== Event Viewer Messages From Past Week ========

9/21/2009 8:44:26 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Lbd
9/21/2009 8:44:26 AM, Error: Service Control Manager [7000] - The Lavasoft Ad-Aware Service service failed to start due to the following error: The system cannot find the path specified.
9/20/2009 4:32:25 AM, Error: Service Control Manager [7016] - The NVIDIA Display Driver Service service has reported an invalid current state 32.
9/20/2009 2:36:44 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80246007: Internet Explorer 8 for Windows Vista.

==== End Of File ===========================

#5 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,688 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:01:51 AM

Posted 25 September 2009 - 02:27 AM

Hi 535cheetah,

Welcome to BC HijackThis forum. I am farbar. I am going to assist you with your problem.

Please refrain from making any changes to your system (updating Windows, installing applications, removing files, etc.) from now on as it might prolong handling your log and make the job for both of us more difficult.

**********

Your log(s) show that you are using so called peer-to-peer or file-sharing programs. These programs allow to share files between users as the name(s) suggest. In today's world the cyber crime has come to an enormous dimension and any means is used to infect personal computers to make use of their stored data or machine power for further propagation of the malware files. A popular means is the use of file-sharing tools as a tremendous amount of prospective victims can be reached through it.

It is therefore possible to be infected by downloading manipulated files via peer-to-peer tools and thus suggested to be used with intense care. Some further readings on this subject, along the included links, are as follows: "File-Sharing, otherwise known as Peer To Peer" and "Risks of File-Sharing Technology."


Removal Instructions
  • Your Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Java components and update:
    • Download the latest version of Java Runtime Environment (JRE) Version 6 and save it to your desktop.
    • Look for "Java Runtime Environment (JRE)" JRE 6 Update 16.
    • Click the Download button to the right.
    • Select your Platform: "Windows".
    • Select your Language: "Multi-language".
    • Read the License Agreement, and then check the box that says: "Accept License Agreement".
    • Click Continue and the page will refresh.
    • Under Required Files, check the box for Windows Offline Installation, click the link below it and save the file to your desktop.
    • Close any programs you may have running - especially your web browser.
    Go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.
    • Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
    • Click the Remove or Change/Remove button and follow the onscreen instructions for the Java uninstaller.
    • Repeat as many times as necessary to remove each Java versions.
    • Reboot your computer once all Java components are removed.
    • Then from your desktop double-click on jre-6u16-windows-i586.exe to install the newest version.
    -- If using Windows Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
    -- If you choose to update via the Java applet in Control Panel, uncheck the option to install the Toolbar unless you want it.
    -- The uninstaller incorporated in this release removes previous Updates 10 and above, but does not remove older versions, so they still need to be removed manually.


    Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click Ok and reboot your computer.

  • You seem to have run ComboFix. ComboFix is a powerful tool and is recommended to run without the supervision of a trained helper. Please post the log normally C:\combofix.txt

  • We need to scan the system with this special tool.
    • Please download Junction.zip and save it.
    • First unzip. If it is extracted/unzipped to a folder open the folder and put junction.exe inside it on the desktop. Make sure the file itself is on the desktop. It should look like this: Posted Image
    • Go to Start => Copy and paste the following command in the search box and click OK:

      cmd /c "%userprofile%\desktop\junction.exe" -s c:\ >log.txt&log.txt

      A command window opens starting to scan the system. Wait until a log file opens. Copy and paste or attach the content of it.


#6 535cheetah

535cheetah
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 25 September 2009 - 08:34 PM

i went to the java site , and looked at the update 16 and it said this = "Bug Fixes
This feature release does not contain any new fixes for security vulnerabilities to its previous release, Java SE 6 Update 15. Users who have Java SE 6 Update 15 have the latest security fixes and do not need to upgrade to this release to be current on security fixes."

i have the update 15 so i should be ok there.

the junction program didnt seem to work or work right ...

ran combofix again and the log you requested will be below.

i had deleted the peer to peer programs long ago ... but for some reason it still showed it in the manager... finished deleting it.


*** combfix log to large to post in here, and also file to big for upload 583k how would you like me to send it ?*********

#7 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,688 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:01:51 AM

Posted 26 September 2009 - 03:07 AM

First:

i have the update 15 so i should be ok there.

This is Java I see on your log.

J2SE Runtime Environment 5.0 Update 12
Java™ 6 Update 13


Next:

You seem to have run ComboFix. ComboFix is a powerful tool and is recommended to run without the supervision of a trained helper. Please post the log normally C:\combofix.txt

I didn't asked you to run ComboFix.

I wanted to remind you my first post:

Please refrain from making any changes to your system (updating Windows, installing applications, removing files, etc.) from now on as it might prolong handling your log and make the job for both of us more difficult.


When you change things and my fix is on the base of the log you have given me it creates confusion and it can go wrong.

Next:

the junction program didnt seem to work or work right ...

This information doesn't help me. I am not there to see what happens. I don't know if you have followed the instruction to the letter. You should better tell me what do you do. Like do you see the file on your desktop like I mentioned? Please give detailed feedback when something doesn't work in order to troubleshoot it.


So I wanted to be clear on that.

1. Java 15 is OK.

2. Open ComboFix log, there is a section under heading "snapshot" and looks like this:

((((((((((((((((((((((((((((( SnapShot@2009-26-09_11.25.08 )))))))))))))))))))))))))))))))))))))))))

Select all the items only in that section and delete them. Then copy and paste the rest to your reply.

3. Also tell me if you have any issues, symptoms? How is your computer running?

Edited by farbar, 26 September 2009 - 03:10 AM.


#8 535cheetah

535cheetah
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 26 September 2009 - 11:49 PM

sorry about the confusion, about the java thing, i must have misread your post on combofix...

junction: downloaded it, saved it, had the icon on desktop and saved to desktop. the black "run" box pops up for a split second then disapeers and nothing else happens. when i tried to run it the way you said to.

combo log below:

computer running fine to me now, i just wanted to make sure i was in the clear and didnt have anything else hidden or tucked away somewhere. and wanted to know any other steps to take.



ComboFix 09-09-25.01 - rick 09/25/2009 20:31.4.2 - NTFSx86
Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1252.1.1033.18.3326.2100 [GMT -4:00]
Running from: c:\users\rick\Desktop\fun.cmd.exe
* Resident AV is active

.

((((((((((((((((((((((((( Files Created from 2009-08-26 to 2009-09-26 )))))))))))))))))))))))))))))))
.

2009-09-26 00:35 . 2009-09-26 00:35 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-09-26 00:35 . 2009-09-26 00:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-26 00:29 . 2009-09-26 00:29 -------- d-----w- C:\fun.cmd
2009-09-23 16:21 . 2009-09-23 16:21 -------- d-----w- c:\users\rick\AppData\Local\capcom
2009-09-20 21:24 . 2009-06-10 11:41 2868224 ----a-w- c:\windows\system32\mf.dll
2009-09-20 18:53 . 2009-09-20 18:54 -------- d-----w- c:\windows\system32\ca-ES
2009-09-20 18:53 . 2009-09-20 18:54 -------- d-----w- c:\windows\system32\eu-ES
2009-09-20 18:53 . 2009-09-20 18:54 -------- d-----w- c:\windows\system32\vi-VN
2009-09-20 18:38 . 2009-09-20 18:38 -------- d-----w- c:\windows\system32\EventProviders
2009-09-17 01:45 . 2009-04-11 06:28 729600 ----a-w- c:\windows\system32\IMJP10K.DLL
2009-09-17 01:44 . 2009-04-11 06:28 1856512 ----a-w- c:\windows\system32\dbgeng.dll
2009-09-17 01:43 . 2009-04-11 06:28 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-09-17 01:42 . 2009-04-11 06:28 83968 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2009-09-17 01:42 . 2009-04-11 06:28 744448 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2009-09-17 01:42 . 2009-04-11 06:28 30208 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2009-09-17 01:42 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2009-09-17 01:42 . 2009-04-11 06:28 189440 ----a-w- c:\windows\system32\wbem\mofd.dll
2009-09-17 01:42 . 2009-04-11 06:28 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-09-17 01:42 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\esscli.dll
2009-09-17 01:42 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-09-17 01:42 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-09-17 01:42 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-09-17 01:42 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-09-12 19:32 . 2005-08-25 23:18 118784 ----a-w- c:\windows\system32\MSSTDFMT.DLL
2009-09-12 19:32 . 2009-09-12 19:32 -------- d-----w- c:\program files\SpywareBlaster
2009-09-12 19:21 . 2009-09-12 19:23 -------- d-----w- c:\users\rick\.SunDownloadManager
2009-09-12 07:50 . 2009-09-10 18:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-12 07:50 . 2009-09-12 07:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-12 07:50 . 2009-09-10 18:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-12 07:23 . 2009-09-26 00:36 -------- d-----w- c:\users\rick\AppData\Local\temp
2009-09-11 16:35 . 2009-09-11 16:35 -------- d-----w- c:\program files\BitLocker
2009-09-11 01:11 . 2009-09-12 05:58 -------- d-----w- c:\users\rick\AppData\Local\temp(167)
2009-09-03 08:54 . 2009-09-03 09:08 -------- d-----w- C:\run.cmd
2009-09-03 08:37 . 2009-09-03 08:48 -------- d-----w- C:\runner.cmd
2009-09-03 05:08 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-09-03 05:08 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-03 05:06 . 2009-09-03 05:08 15 ----a-w- c:\users\rick\settings.dat
2009-09-02 05:25 . 2009-09-03 08:37 -------- d-----w- C:\ComboFix
2009-09-02 05:23 . 2009-09-02 05:23 -------- d-----w- c:\users\rick\AppData\Roaming\Malwarebytes
2009-09-02 05:23 . 2009-09-12 07:44 -------- d-----w- c:\program files\malwarebytes
2009-09-02 05:23 . 2009-09-02 05:23 -------- d-----w- c:\programdata\Malwarebytes
2009-09-02 05:03 . 2009-09-02 05:03 -------- d-----w- c:\program files\Sophos
2009-08-31 16:56 . 2009-08-31 16:56 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-08-31 16:56 . 2009-08-31 16:56 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-08-31 16:56 . 2009-08-31 16:56 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-08-31 16:56 . 2009-08-31 16:56 -------- d-----w- c:\windows\system32\drivers\Avg
2009-08-31 16:56 . 2009-09-12 06:18 -------- d-----w- c:\program files\AVG
2009-08-31 16:56 . 2009-08-31 17:51 -------- d-----w- c:\programdata\avg8
2009-08-31 16:49 . 2009-08-31 16:49 -------- d-----w- c:\users\rick\AppData\Roaming\AVG8
2009-08-28 23:41 . 2007-03-14 01:19 1017545 ----a-w- c:\windows\system32\cpuz.exe
2009-08-28 23:41 . 2007-03-14 00:26 73728 ----a-w- c:\windows\system32\pv_c3.exe
2009-08-28 23:41 . 2006-03-31 22:48 119056 ----a-w- c:\windows\system32\reg_c3.exe
2009-08-27 16:53 . 2009-06-22 10:09 2048 ----a-w- c:\windows\system32\tzres.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-26 00:13 . 2008-02-10 18:34 -------- d-----w- c:\program files\Steam
2009-09-26 00:12 . 2008-02-10 18:17 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-25 16:30 . 2009-08-21 17:18 32784 ----a-w- c:\programdata\nvModes.dat
2009-09-25 16:28 . 2008-02-10 18:17 -------- d-----w- c:\programdata\NVIDIA
2009-09-24 17:07 . 2008-07-16 20:04 -------- d-----w- c:\program files\Java
2009-09-23 04:40 . 2008-02-23 23:37 -------- d-----w- c:\programdata\Media Center Programs
2009-09-22 16:25 . 2008-02-10 18:34 -------- d-----w- c:\program files\Common Files\Steam
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Calendar
2009-09-20 18:54 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Sidebar
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Journal
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Collaboration
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Photo Gallery
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Defender
2009-09-20 18:52 . 2008-02-10 19:11 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2009-09-20 18:52 . 2008-02-10 19:11 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2009-09-20 18:51 . 2009-09-20 18:51 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2009-09-18 03:52 . 2008-02-14 03:29 -------- d-----w- c:\users\rick\AppData\Roaming\mIRC
2009-09-12 06:18 . 2008-03-10 02:44 -------- d-----w- c:\program files\CEVO
2009-09-11 16:35 . 2006-11-02 12:35 -------- d-----w- c:\program files\Microsoft Games
2009-09-01 19:11 . 2009-06-24 23:06 -------- d-----w- c:\programdata\Lavasoft
2009-09-01 07:13 . 2008-11-20 20:08 -------- d-----w- c:\users\rick\AppData\Roaming\uTorrent
2009-08-21 08:54 . 2009-08-21 08:54 -------- d-----w- c:\program files\NVIDIA Corporation
2009-08-21 08:54 . 2008-02-10 19:42 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-08-21 08:54 . 2008-11-16 18:40 -------- d-----w- c:\program files\AGEIA Technologies
2009-08-20 20:55 . 2009-08-20 20:55 -------- d-----w- c:\program files\Lavalys
2009-08-17 15:44 . 2008-02-10 19:11 -------- d-----w- c:\program files\OpenAL
2009-08-17 15:43 . 2009-08-17 15:43 -------- d-----w- c:\program files\Common Files\Futuremark Shared
2009-08-17 15:43 . 2009-08-17 15:43 -------- d-----w- c:\program files\Futuremark
2009-08-14 10:58 . 2009-09-01 06:06 7396 ----a-w- c:\windows\system32\drivers\pctcore.cat
2009-08-09 04:35 . 2008-02-18 06:28 -------- d-----w- c:\users\rick\AppData\Roaming\Bioshock
2009-07-25 09:23 . 2009-05-31 18:17 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-18 16:01 . 2009-07-28 17:30 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-07-18 11:35 . 2009-07-28 17:30 828416 ----a-w- c:\windows\system32\wininet.dll
2009-07-17 13:54 . 2009-08-13 00:08 71680 ----a-w- c:\windows\system32\atl.dll
2009-07-15 12:40 . 2009-08-13 00:07 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-07-15 12:39 . 2009-08-13 00:07 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-15 12:39 . 2009-08-13 00:07 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-07-15 12:39 . 2009-08-13 00:07 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-07-14 18:54 . 2009-08-21 08:52 485920 ----a-w- c:\windows\system32\nvudisp.exe
2009-07-14 18:54 . 2009-08-21 08:52 9557216 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2009-07-14 18:54 . 2009-08-21 08:52 3287040 ----a-w- c:\windows\system32\nvwgf2um.dll
2009-07-14 18:54 . 2009-08-21 08:52 10854400 ----a-w- c:\windows\system32\nvoglv32.dll
2009-07-14 18:54 . 2009-08-21 08:52 2169376 ----a-w- c:\windows\system32\nvcuvid.dll
2009-07-14 18:54 . 2009-08-21 08:52 1983488 ----a-w- c:\windows\system32\nvcuda.dll
2009-07-14 18:54 . 2009-08-21 08:52 1706528 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-07-14 18:54 . 2009-08-21 08:52 151552 ----a-w- c:\windows\system32\nvcod157.dll
2009-07-14 18:54 . 2009-08-21 08:52 151552 ----a-w- c:\windows\system32\nvcod.dll
2009-07-14 18:54 . 2007-12-11 22:06 7565824 ----a-w- c:\windows\system32\nvd3dum.dll
2009-07-14 18:54 . 2007-12-11 22:06 1044992 ----a-w- c:\windows\system32\nvapi.dll
2009-07-10 11:01 . 2008-02-10 18:01 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2008-01-08 22:31 . 2006-11-22 14:58 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((( SnapShot@2009-09-12_07.26.17 )))))))))))))))))))))))))))))))))))))))))
.

-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"Steam"="c:\program files\steam\steam.exe" [2009-09-22 1217784]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"igndlm.exe"="c:\program files\Download Manager\DLM.exe" [2008-08-01 1103216]
"RGSC"="c:\users\rick\Desktop\gta\Rockstar Games Social Club\RGSCLauncher.exe" [BU]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [BU]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"Yahoo! Pager"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 4670704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"Ai Nap"="c:\program files\ASUS\Ai Suite\AiNap\AiNap.exe" [2007-09-06 1426432]
"CPU Power Monitor"="c:\program files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe" [2007-09-07 626688]
"Cpu Level Up help"="c:\program files\ASUS\Ai Suite\CpuLevelUpHelp.exe" [2007-09-11 880640]
"UpdReg"="*DISABLED*c:\windows\UpdReg.EXE" [BU]
"Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2007-12-13 2051096]
"Copperhead"="c:\program files\Razer\Copperhead\razerhid.exe" [2005-11-25 155648]
"Lachesis"="c:\program files\Razer\Lachesis\razerhid.exe" [2007-09-12 172032]
"QuickTime Task"="*DISABLED*c:\program files\QuickTime\QTTask.exe" [BU]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [BU]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"CTHelper"="CTHELPER.EXE" - c:\windows\System32\CTHELPER.EXE [2007-10-25 19456]
"CTxfiHlp"="CTXFIHLP.EXE" - c:\windows\System32\CTXFIHLP.EXE [2007-10-25 19968]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DevconDefaultDB"="c:\windows\system32\READREG" [X]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(:(:9f,b3,04,a4,24,3a,ca,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
"DoNotAllowExceptions"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"TCP Query User{1A1866A5-5D10-44E9-A410-F15D9BE95E33}c:\\program files\\steam\\steamapps\\beer6944\\counter-strike source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\counter-strike source\hl2.exe:hl2
"UDP Query User{2472ADB1-AB49-4006-A8C8-D1B15A83E6C7}c:\\program files\\steam\\steamapps\\beer6944\\counter-strike source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\counter-strike source\hl2.exe:hl2
"TCP Query User{B18F51B3-7990-4E2D-B452-768EFB3E6F1E}c:\\program files\\mirc\\mirc.exe"= UDP:c:\program files\mirc\mirc.exe:mIRC
"UDP Query User{FA698760-667B-43EC-92E5-00B1736817BE}c:\\program files\\mirc\\mirc.exe"= TCP:c:\program files\mirc\mirc.exe:mIRC
"TCP Query User{DDE82C7F-614D-4B8F-9502-8AE94CBAB72C}c:\\program files\\xfire\\xfire.exe"= UDP:c:\program files\xfire\xfire.exe:Xfire
"UDP Query User{571C240A-3082-4C3F-81C6-3F05BF75C857}c:\\program files\\xfire\\xfire.exe"= TCP:c:\program files\xfire\xfire.exe:Xfire
"TCP Query User{5AFCA678-CD3A-4BF1-BF01-C2E5FCA5F45D}c:\\program files\\steam\\steamapps\\wgn_logic\\team fortress 2\\hl2.exe"= UDP:c:\program files\steam\steamapps\wgn_logic\team fortress 2\hl2.exe:hl2
"UDP Query User{0EF1E10A-207D-470B-A650-E2E30232C835}c:\\program files\\steam\\steamapps\\wgn_logic\\team fortress 2\\hl2.exe"= TCP:c:\program files\steam\steamapps\wgn_logic\team fortress 2\hl2.exe:hl2
"{6BAEF226-8E70-42AF-BF14-665E1FBBDB88}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{7094AACA-F236-4CF9-B8FF-4DC208B1AAD1}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{6DC30ED9-AA02-4E83-8A25-62142CF22D32}"= UDP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"{6B09347C-9007-4D23-926B-89DCBB40E41E}"= TCP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"TCP Query User{BDB3816A-0BF2-46B4-AA4C-56906DE06BBA}c:\\program files\\steam\\steamapps\\keffa6969\\counter-strike source\\hl2.exe"= UDP:c:\program files\steam\steamapps\keffa6969\counter-strike source\hl2.exe:hl2
"UDP Query User{F09A4D52-7836-4F85-A59A-A54BFB99153C}c:\\program files\\steam\\steamapps\\keffa6969\\counter-strike source\\hl2.exe"= TCP:c:\program files\steam\steamapps\keffa6969\counter-strike source\hl2.exe:hl2
"TCP Query User{97DE735D-7D18-4C79-8A4A-4A3FEC1660E2}c:\\program files\\steam\\steamapps\\beer6944\\counter-strike source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\counter-strike source\hl2.exe:hl2
"UDP Query User{F68ECCB4-B628-4B34-A792-8B08FAAA8CED}c:\\program files\\steam\\steamapps\\beer6944\\counter-strike source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\counter-strike source\hl2.exe:hl2
"TCP Query User{9BB7F841-FDA6-4DF6-BA11-7C88C4FDE404}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= UDP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"UDP Query User{EAFC4754-FAF0-406C-8FB7-FAD0C72238E4}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= TCP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"TCP Query User{60A4BF3C-742C-442D-A1EC-4C57D90915A3}c:\\program files\\steam\\steamapps\\keffa6969\\counter-strike source\\hl2.exe"= UDP:c:\program files\steam\steamapps\keffa6969\counter-strike source\hl2.exe:hl2
"UDP Query User{9DB0DE72-9EA7-4228-B5B8-824F2E3DD0EC}c:\\program files\\steam\\steamapps\\keffa6969\\counter-strike source\\hl2.exe"= TCP:c:\program files\steam\steamapps\keffa6969\counter-strike source\hl2.exe:hl2
"TCP Query User{1B3D76C0-3C43-4151-AA37-75C1B7ED9755}c:\\program files\\steam\\steamapps\\beer6944\\day of defeat source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\day of defeat source\hl2.exe:hl2
"UDP Query User{9D6EEED7-56EB-4B5B-887D-F68E1CF2C60F}c:\\program files\\steam\\steamapps\\beer6944\\day of defeat source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\day of defeat source\hl2.exe:hl2
"TCP Query User{F265F718-39D8-44FF-B557-DC96CFE1F544}c:\\program files\\xfire\\xfire.exe"= UDP:c:\program files\xfire\xfire.exe:Xfire
"UDP Query User{54A2946D-7D4E-42D7-B519-AC33F3B37496}c:\\program files\\xfire\\xfire.exe"= TCP:c:\program files\xfire\xfire.exe:Xfire
"TCP Query User{4A414638-C7F0-49DD-ABA3-B5992254509C}c:\\program files\\steam\\steamapps\\beer6944\\zombie panic! source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\zombie panic! source\hl2.exe:hl2
"UDP Query User{F9601520-C441-4F96-953F-8C0A207BD703}c:\\program files\\steam\\steamapps\\beer6944\\zombie panic! source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\zombie panic! source\hl2.exe:hl2
"TCP Query User{6A19D6FE-2ECB-471D-9327-D6CEC9CDD427}c:\\program files\\steam\\steamapps\\beer6944\\synergy\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\synergy\hl2.exe:hl2
"UDP Query User{AFFFCF0A-ADD8-4697-8EF0-833CC21A9E9E}c:\\program files\\steam\\steamapps\\beer6944\\synergy\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\synergy\hl2.exe:hl2
"TCP Query User{2F84B801-136F-4247-BE71-20D358BC95C7}c:\\program files\\steam\\steamapps\\common\\left 4 dead demo\\left4dead.exe"= UDP:c:\program files\steam\steamapps\common\left 4 dead demo\left4dead.exe:left4dead
"UDP Query User{694849DD-FF1D-4BD4-BE77-4B6EA3649501}c:\\program files\\steam\\steamapps\\common\\left 4 dead demo\\left4dead.exe"= TCP:c:\program files\steam\steamapps\common\left 4 dead demo\left4dead.exe:left4dead
"TCP Query User{F5225791-33D3-4F19-8978-5BF469058602}c:\\program files\\utorrent\\utorrent.exe"= UDP:c:\program files\utorrent\utorrent.exe:µTorrent
"UDP Query User{B73AAC32-FF50-434F-8BD8-05543D1A16E8}c:\\program files\\utorrent\\utorrent.exe"= TCP:c:\program files\utorrent\utorrent.exe:µTorrent
"TCP Query User{ADF4BDA0-AFDE-47A0-AD99-00533DB5ABC9}c:\\program files\\steam\\steamapps\\beer6944\\zombie panic! source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\zombie panic! source\hl2.exe:hl2
"UDP Query User{0B1D20BB-E96B-40A4-8137-1CC6B3CB7E75}c:\\program files\\steam\\steamapps\\beer6944\\zombie panic! source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\zombie panic! source\hl2.exe:hl2
"TCP Query User{6911970D-DEFB-47A5-90FC-F6597E185C32}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{C9D81B38-C0A7-4BD9-8FE6-BCBBEF354B2F}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"TCP Query User{258B4A06-C623-4590-A021-54758C1DA6AD}c:\\program files\\steam\\steamapps\\beer6944\\team fortress 2\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\team fortress 2\hl2.exe:hl2
"UDP Query User{FF725108-0016-44AF-8001-DE9C0CFBFD6B}c:\\program files\\steam\\steamapps\\beer6944\\team fortress 2\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\team fortress 2\hl2.exe:hl2
"{62F3D7C1-2DEF-4B23-99BA-808637727D05}"= UDP:c:\program files\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe:Unreal Tournament 3
"{082902BC-8543-4C17-BCC4-4069C0EF6DEB}"= TCP:c:\program files\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe:Unreal Tournament 3
"{0AD5B557-6AE2-4831-BE28-CF97137EF8E7}"= UDP:c:\users\rick\Desktop\gta\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club
"{8771E738-446E-4191-936E-65162B06B887}"= TCP:c:\users\rick\Desktop\gta\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club
"{9AABC9F3-9449-4D0F-BE92-AC12101DA063}"= UDP:c:\program files\Activision\Prototype\prototypef.exe:Prototype™
"{071E8B89-53ED-4305-8539-D789BF3D5B0D}"= TCP:c:\program files\Activision\Prototype\prototypef.exe:Prototype™
"{246B38A8-3A4C-4880-B4A5-5A9A68FAD891}"= UDP:990:LocalSubnet:LocalSubnet|IF={550DA66F-FA9F-4C3D-BC67-F222BD49967A}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdSync.exe,-4001
"{F85ED51D-5780-4FFF-914A-764C0AFEA6FA}"= Disabled:c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
"{3DF8514E-3947-4E54-AC41-299ACF6FF61F}"= Disabled:c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
"{44B28176-0AED-4A0A-8799-84182D6E06EF}"= Disabled:c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe
"TCP Query User{B755F282-015B-42B0-AB31-25A22256B62A}c:\\program files\\azureus\\azureus.exe"= Disabled:UDP:c:\program files\azureus\azureus.exe:Azureus
"UDP Query User{B7CC7276-878C-4CAD-B79A-58E0C166B0FA}c:\\program files\\azureus\\azureus.exe"= Disabled:TCP:c:\program files\azureus\azureus.exe:Azureus
"{E2D721F0-6CB3-44F5-BC51-72185E3CAE7E}"= UDP:c:\program files\Steam\steamapps\common\left 4 dead\left4dead.exe:Left 4 Dead
"{8C3EF3B5-0A89-4EB4-AA9B-4D8E12632415}"= TCP:c:\program files\Steam\steamapps\common\left 4 dead\left4dead.exe:Left 4 Dead
"{8E962DC3-46B0-4FE9-AACE-888444DD4717}"= UDP:990:LocalSubnet:LocalSubnet|IF={550DA66F-FA9F-4C3D-BC67-F222BD49967A}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdSync.exe,-4001
"TCP Query User{51BF5114-BB1A-4EEF-995D-E243D39CBB11}c:\\program files\\steam\\steamapps\\beer6944\\eternal-silence\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\eternal-silence\hl2.exe:hl2
"UDP Query User{1A2A264F-2281-4166-8893-A15958E9C5A2}c:\\program files\\steam\\steamapps\\beer6944\\eternal-silence\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\eternal-silence\hl2.exe:hl2
"TCP Query User{A8EF1EE5-8C2E-4352-890A-CAB157B6843D}c:\\program files\\steam\\steamapps\\beer6944\\synergy\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\synergy\hl2.exe:hl2
"UDP Query User{C9555551-2CA0-44B3-BBC0-CABDC7B13694}c:\\program files\\steam\\steamapps\\beer6944\\synergy\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\synergy\hl2.exe:hl2
"{B07DB004-E9B8-4CDF-A8BF-AF4A496A17CA}"= UDP:c:\program files\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe:Lost Planet: Extreme Condition
"{BB9C6961-0123-473D-980B-761D9B953DB8}"= TCP:c:\program files\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe:Lost Planet: Extreme Condition
"{AE0D745E-95F6-42A4-9FA6-D2F3DF0ECC62}"= UDP:c:\program files\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe:Lost Planet: Extreme Condition
"{B0C55180-CC37-4B85-A299-6FF7BF92AB2D}"= TCP:c:\program files\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe:Lost Planet: Extreme Condition

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
"DoNotAllowExceptions"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
"DoNotAllowExceptions"= 0 (0x0)

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [8/31/2009 12:56 PM 335240]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [8/31/2009 12:56 PM 108552]
R1 ehdrv;ehdrv;c:\windows\System32\drivers\ehdrv.sys [5/14/2009 3:47 PM 107256]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [5/14/2009 3:47 PM 731840]
R2 epfwwfpr;epfwwfpr;c:\windows\System32\drivers\epfwwfpr.sys [5/14/2009 3:49 PM 93312]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [7/14/2009 12:28 PM 239648]
R3 LachesisFltr;Lachesis Mouse Driver;c:\windows\System32\drivers\Lachesis.sys [11/28/2008 12:52 PM 12032]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\Lavasoft\Ad-Aware\AAWService.exe" --> c:\program files\Lavasoft\Ad-Aware\AAWService.exe [?]
S3 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe --> c:\progra~1\AVG\AVG8\avgemc.exe [?]
S3 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [8/31/2009 12:56 PM 297752]
S3 Creative ALchemy AL1 Licensing Service;Creative ALchemy AL1 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL1Licensing.exe [2/10/2008 3:30 PM 79360]
S3 UsbFltr;Razer Copperhead Driver;c:\windows\System32\drivers\copperhd.sys [11/2/2005 11:54 AM 11596]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
.
------- Supplementary Scan -------
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: {5B5F9EAA-5125-4540-B1FD-D0FBE62197D7} = 192.168.0.1
.
- - - - ORPHANS REMOVED - - - -

AddRemove-CMN_Deploy_0 - c:\program files\CEVO\CMN3\Uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-25 20:36
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTHelper = CTHELPER.EXE?
CTxfiHlp = CTXFIHLP.EXE?

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\B950.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-2098475800-2551884061-2043411270-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:a2,bb,a6,59,a9,46,a1,af,5c,e4,5b,4f,da,5d,b5,5f,3e,16,21,25,10,1b,13,
10,a0,a7,13,59,b3,f7,ef,b6,90,e6,db,31,55,23,5e,cc,1b,7c,4c,e7,1e,a1,2a,bd,\
"??"=hex:cf,55,c7,95,2b,14,4d,f8,66,7b,0c,1b,19,52,fe,22

[HKEY_USERS\S-1-5-21-2098475800-2551884061-2043411270-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:d6,17,2c,18,50,90,ca,97,cc,7b,bc,d8,60,81,12,6f,14,b5,bc,c6,ca,
d3,8a,f9,1f,f1,ae,b0,36,b5,dd,18,7a,a6,47,ba,fb,16,b1,56,f9,cc,5e,b3,7e,27,\
"rkeysecu"=hex:0c,d7,60,f9,bf,2b,5d,51,0c,88,b6,35,cf,2e,3c,86

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Completion time: 2009-09-26 20:37
ComboFix-quarantined-files.txt 2009-09-26 00:37
ComboFix2.txt 2009-09-12 07:29
ComboFix3.txt 2009-09-11 01:11

Pre-Run: 122,939,625,472 bytes free
Post-Run: 122,987,089,920 bytes free

4212 --- E O F --- 2009-09-25 07:00

#9 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,688 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:01:51 AM

Posted 27 September 2009 - 04:58 AM

Thanks for the feedback. ComboFix log looks good.

Just once more we try to run junction.exe this time with a little difference.

Run Command Prompt as administrator:
  • Click on Start button.
  • Type Cmd in the Start Search text box.
  • Press Ctrl-Shift-Enter keyboard shortcut to run Command Prompt as Administrator.
Copy and paste the following command (the bold text) into the open command window, and press Enter:

"%userprofile%\desktop\junction.exe" -s c:\ >log.txt&log.txt

Wait until a log file opens. Copy and paste or attach the content of it.

#10 535cheetah

535cheetah
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 27 September 2009 - 11:24 PM

junction log:





Junction v1.05 - Windows junction creator and reparse point viewer
Copyright © 2000-2007 Mark Russinovich
Systems Internals - http://www.sysinternals.com

\\?\c:\\Documents and Settings: JUNCTION
Print Name : C:\Users
Substitute Name: C:\Users


Failed to open \\?\c:\\hiberfil.sys: The process cannot access the file because it is being used by another process.



Failed to open \\?\c:\\pagefile.sys: The process cannot access the file because it is being used by another process.



Failed to open \\?\c:\\System Volume Information: Access is denied.


...

.
Failed to open \\?\c:\\Program Files\AVG\AVG8\avgcsrvx.exe: Access is denied.


..

...

...

...

.
Failed to open \\?\c:\\Program Files\malwarebytes\mbam.exe: Access is denied.


..

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

\\?\c:\\ProgramData\Application Data: JUNCTION
Print Name : C:\ProgramData
Substitute Name: C:\ProgramData

\\?\c:\\ProgramData\Desktop: JUNCTION
Print Name : C:\Users\Public\Desktop
Substitute Name: C:\Users\Public\Desktop

\\?\c:\\ProgramData\Documents: JUNCTION
Print Name : C:\Users\Public\Documents
Substitute Name: C:\Users\Public\Documents

\\?\c:\\ProgramData\Favorites: JUNCTION
Print Name : C:\Users\Public\Favorites
Substitute Name: C:\Users\Public\Favorites

\\?\c:\\ProgramData\Start Menu: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Start Menu
Substitute Name: C:\ProgramData\Microsoft\Windows\Start Menu

\\?\c:\\ProgramData\Templates: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Templates
Substitute Name: C:\ProgramData\Microsoft\Windows\Templates

.
Failed to open \\?\c:\\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4a2e1d127b1e9531d4264a34575306f5_3cb8940b-5f94-4ef3-aa33-c6cdf74c0ec6: Access is denied.


..

...\\?\c:\\Users\Default\Application Data: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming
Substitute Name: C:\Users\Default\AppData\Roaming

\\?\c:\\Users\Default\Cookies: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies

\\?\c:\\Users\Default\Local Settings: JUNCTION
Print Name : C:\Users\Default\AppData\Local
Substitute Name: C:\Users\Default\AppData\Local

\\?\c:\\Users\Default\My Documents: JUNCTION
Print Name : C:\Users\Default\Documents
Substitute Name: C:\Users\Default\Documents

\\?\c:\\Users\Default\NetHood: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\?\c:\\Users\Default\PrintHood: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

\\?\c:\\Users\Default\Recent: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent

\\?\c:\\Users\Default\SendTo: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo

\\?\c:\\Users\Default\Start Menu: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu

\\?\c:\\Users\Default\Templates: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates

\\?\c:\\Users\Default\AppData\Local\Application Data: JUNCTION
Print Name : C:\Users\Default\AppData\Local
Substitute Name: C:\Users\Default\AppData\Local

\\?\c:\\Users\Default\AppData\Local\History: JUNCTION
Print Name : C:\Users\Default\AppData\Local\Microsoft\Windows\History
Substitute Name: C:\Users\Default\AppData\Local\Microsoft\Windows\History

\\?\c:\\Users\Default\AppData\Local\Temporary Internet Files: JUNCTION
Print Name : C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files
Substitute Name: C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files

\\?\c:\\Users\Default\Documents\My Music: JUNCTION
Print Name : C:\Users\Default\Music
Substitute Name: C:\Users\Default\Music

\\?\c:\\Users\Default\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Default\Pictures
Substitute Name: C:\Users\Default\Pictures

\\?\c:\\Users\Default\Documents\My Videos: JUNCTION
Print Name : C:\Users\Default\Videos
Substitute Name: C:\Users\Default\Videos

\\?\c:\\Users\Public\Documents\My Music: JUNCTION
Print Name : C:\Users\Public\Music
Substitute Name: C:\Users\Public\Music

\\?\c:\\Users\Public\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Public\Pictures
Substitute Name: C:\Users\Public\Pictures

\\?\c:\\Users\Public\Documents\My Videos: JUNCTION
Print Name : C:\Users\Public\Videos
Substitute Name: C:\Users\Public\Videos

\\?\c:\\Users\rick\Application Data: JUNCTION
Print Name : C:\Users\rick\AppData\Roaming
Substitute Name: C:\Users\rick\AppData\Roaming

\\?\c:\\Users\rick\Cookies: JUNCTION
Print Name : C:\Users\rick\AppData\Roaming\Microsoft\Windows\Cookies
Substitute Name: C:\Users\rick\AppData\Roaming\Microsoft\Windows\Cookies

\\?\c:\\Users\rick\Local Settings: JUNCTION
Print Name : C:\Users\rick\AppData\Local
Substitute Name: C:\Users\rick\AppData\Local

\\?\c:\\Users\rick\My Documents: JUNCTION
Print Name : C:\Users\rick\Documents
Substitute Name: C:\Users\rick\Documents

\\?\c:\\Users\rick\NetHood: JUNCTION
Print Name : C:\Users\rick\AppData\Roaming\Microsoft\Windows\Network Shortcuts
Substitute Name: C:\Users\rick\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\?\c:\\Users\rick\PrintHood: JUNCTION
Print Name : C:\Users\rick\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
Substitute Name: C:\Users\rick\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

\\?\c:\\Users\rick\Recent: JUNCTION
Print Name : C:\Users\rick\AppData\Roaming\Microsoft\Windows\Recent
Substitute Name: C:\Users\rick\AppData\Roaming\Microsoft\Windows\Recent

\\?\c:\\Users\rick\SendTo: JUNCTION
Print Name : C:\Users\rick\AppData\Roaming\Microsoft\Windows\SendTo
Substitute Name: C:\Users\rick\AppData\Roaming\Microsoft\Windows\SendTo

\\?\c:\\Users\rick\Start Menu: JUNCTION
Print Name : C:\Users\rick\AppData\Roaming\Microsoft\Windows\Start Menu
Substitute Name: C:\Users\rick\AppData\Roaming\Microsoft\Windows\Start Menu

\\?\c:\\Users\rick\Templates: JUNCTION
Print Name : C:\Users\rick\AppData\Roaming\Microsoft\Windows\Templates
Substitute Name: C:\Users\rick\AppData\Roaming\Microsoft\Windows\Templates

\\?\c:\\Users\rick\AppData\Local\Application Data: JUNCTION
Print Name : C:\Users\rick\AppData\Local
Substitute Name: C:\Users\rick\AppData\Local

\\?\c:\\Users\rick\AppData\Local\History: JUNCTION
Print Name : C:\Users\rick\AppData\Local\Microsoft\Windows\History
Substitute Name: C:\Users\rick\AppData\Local\Microsoft\Windows\History

\\?\c:\\Users\rick\AppData\Local\Temporary Internet Files: JUNCTION
Print Name : C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files
Substitute Name: C:\Users\rick\AppData\Local\Microsoft\Windows\Temporary Internet Files



...

...

...

...

..
Failed to open \\?\c:\\Users\rick\Desktop\other installs\RootRepeal.exe: Access is denied.


.\\?\c:\\Users\rick\Documents\My Music: JUNCTION
Print Name : C:\Users\rick\Music
Substitute Name: C:\Users\rick\Music

\\?\c:\\Users\rick\Documents\My Pictures: JUNCTION
Print Name : C:\Users\rick\Pictures
Substitute Name: C:\Users\rick\Pictures

\\?\c:\\Users\rick\Documents\My Videos: JUNCTION
Print Name : C:\Users\rick\Videos
Substitute Name: C:\Users\rick\Videos




Failed to open \\?\c:\\Windows\CSC: Access is denied.


...

...

...

...

..\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-a..ltimateed.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a99eca952b478dd1\x86_microsoft-windows-a..ltimateed.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a99eca952b478dd1: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-artuical.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99fb0e2829483a36\x86_microsoft-windows-h..-artuical.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99fb0e2829483a36: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-bckupbas.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2d3fbcc4aaf3be34\x86_microsoft-windows-h..-bckupbas.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2d3fbcc4aaf3be34: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-bckupbus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5c9d3198d5a392c0\x86_microsoft-windows-h..-bckupbus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5c9d3198d5a392c0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-blutooth.resources_31bf3856ad364e35_6.0.6001.18000_en-us_919613b50694961c\x86_microsoft-windows-h..-blutooth.resources_31bf3856ad364e35_6.0.6001.18000_en-us_919613b50694961c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-escalate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a7b046f4aa9d89\x86_microsoft-windows-h..-escalate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a7b046f4aa9d89: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-firewall.resources_31bf3856ad364e35_6.0.6001.18000_en-us_268b1c2d9b7c664b\x86_microsoft-windows-h..-firewall.resources_31bf3856ad364e35_6.0.6001.18000_en-us_268b1c2d9b7c664b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.0.6001.18000_en-us_01aa8bc9d3953d56\x86_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.0.6001.18000_en-us_01aa8bc9d3953d56: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-iisbasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7001e8f963459e76\x86_microsoft-windows-h..-iisbasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7001e8f963459e76: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-medexppr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d9dc804dccbc12a6\x86_microsoft-windows-h..-medexppr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d9dc804dccbc12a6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-medexptv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_85c8d98e01d5a486\x86_microsoft-windows-h..-medexptv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_85c8d98e01d5a486: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-multboot.resources_31bf3856ad364e35_6.0.6001.18000_en-us_89d39ff45ffe9ef5\x86_microsoft-windows-h..-multboot.resources_31bf3856ad364e35_6.0.6001.18000_en-us_89d39ff45ffe9ef5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-safemodc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4d5f6440e35a68a9\x86_microsoft-windows-h..-safemodc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4d5f6440e35a68a9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-winmeetb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bcc802fea2e6f0e\x86_microsoft-windows-h..-winmeetb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bcc802fea2e6f0e: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..cultimate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763ebda6ca2b8bf9\x86_microsoft-windows-h..cultimate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763ebda6ca2b8bf9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-access.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ac2450cda9380fc5\x86_microsoft-windows-help-access.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ac2450cda9380fc5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-activ.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce6dc4eb70cfef16\x86_microsoft-windows-help-activ.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce6dc4eb70cfef16: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-acw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e6a6078590ce8804\x86_microsoft-windows-help-acw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e6a6078590ce8804: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-app3rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5629afc218cd4909\x86_microsoft-windows-help-app3rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5629afc218cd4909: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-appman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_edad3325b8809032\x86_microsoft-windows-help-appman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_edad3325b8809032: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-appwin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fbdec4287c521700\x86_microsoft-windows-help-appwin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fbdec4287c521700: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artcone.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ed1dc4bed07f787f\x86_microsoft-windows-help-artcone.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ed1dc4bed07f787f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_334326ad47f900b7\x86_microsoft-windows-help-artconm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_334326ad47f900b7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artcont.resources_31bf3856ad364e35_6.0.6001.18000_en-us_10a3dc5df08357e8\x86_microsoft-windows-help-artcont.resources_31bf3856ad364e35_6.0.6001.18000_en-us_10a3dc5df08357e8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e22d34d98e61b9f6\x86_microsoft-windows-help-artconv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e22d34d98e61b9f6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4af1e1175d50eafd\x86_microsoft-windows-help-artconw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4af1e1175d50eafd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artico.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9e9bce6f79b80547\x86_microsoft-windows-help-artico.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9e9bce6f79b80547: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f467ab99ca8bd0f9\x86_microsoft-windows-help-artuic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f467ab99ca8bd0f9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d250535d3dba5e7b\x86_microsoft-windows-help-artuie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d250535d3dba5e7b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuiv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b089e55a90c6114c\x86_microsoft-windows-help-artuiv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b089e55a90c6114c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuiw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f7e393c4a5d580d\x86_microsoft-windows-help-artuiw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f7e393c4a5d580d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-auxdisp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6fa4b81637688e4b\x86_microsoft-windows-help-auxdisp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6fa4b81637688e4b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-backup.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763c152dd70bb0f5\x86_microsoft-windows-help-backup.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763c152dd70bb0f5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-basics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4307aacb48f3a60c\x86_microsoft-windows-help-basics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4307aacb48f3a60c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-basics2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_db20390311c23bfc\x86_microsoft-windows-help-basics2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_db20390311c23bfc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-bitlock.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cc616fcad37a3085\x86_microsoft-windows-help-bitlock.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cc616fcad37a3085: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-browser.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cae808618251179b\x86_microsoft-windows-help-browser.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cae808618251179b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-buttons.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bb59e33ff71fb74\x86_microsoft-windows-help-buttons.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bb59e33ff71fb74: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-checkbx.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d4fa565b2c5c1635\x86_microsoft-windows-help-checkbx.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d4fa565b2c5c1635: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-cw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2ba8d4d157e289f\x86_microsoft-windows-help-cw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2ba8d4d157e289f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-desk.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7a40e7bd82d892a6\x86_microsoft-windows-help-desk.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7a40e7bd82d892a6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-deskpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_da07dee83110caa2\x86_microsoft-windows-help-deskpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_da07dee83110caa2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-dgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bbe2ff296b8aac13\x86_microsoft-windows-help-dgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bbe2ff296b8aac13: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-diskcln.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b94f4394c38c2c9d\x86_microsoft-windows-help-diskcln.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b94f4394c38c2c9d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-diskmgt.resources_31bf3856ad364e35_6.0.6001.18000_en-us_284e552d9bc0e01c\x86_microsoft-windows-help-diskmgt.resources_31bf3856ad364e35_6.0.6001.18000_en-us_284e552d9bc0e01c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-domain.resources_31bf3856ad364e35_6.0.6001.18000_en-us_60f111c5bc35c147\x86_microsoft-windows-help-domain.resources_31bf3856ad364e35_6.0.6001.18000_en-us_60f111c5bc35c147: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-dvdburn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ef207e48bb95f4da\x86_microsoft-windows-help-dvdburn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ef207e48bb95f4da: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-efs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1f4dee0527a9f7cf\x86_microsoft-windows-help-efs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1f4dee0527a9f7cf: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-efsfull.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5881e5d04c0752c0\x86_microsoft-windows-help-efsfull.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5881e5d04c0752c0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-errmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_65f020eccb6dbd67\x86_microsoft-windows-help-errmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_65f020eccb6dbd67: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-fax.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c416d51bbbd62316\x86_microsoft-windows-help-fax.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c416d51bbbd62316: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-flicks.resources_31bf3856ad364e35_6.0.6001.18000_en-us_df4717294a11e0c9\x86_microsoft-windows-help-flicks.resources_31bf3856ad364e35_6.0.6001.18000_en-us_df4717294a11e0c9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-fstexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3bd2266a8dd63c7b\x86_microsoft-windows-help-fstexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3bd2266a8dd63c7b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-fus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6356058930fbb507\x86_microsoft-windows-help-fus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6356058930fbb507: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-games.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d66208d4786dcf36\x86_microsoft-windows-help-games.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d66208d4786dcf36: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-gamesp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ae541733ba1f9f34\x86_microsoft-windows-help-gamesp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ae541733ba1f9f34: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-gamest.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6a2566baa07cba38\x86_microsoft-windows-help-gamest.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6a2566baa07cba38: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-harddev.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99d0df67fdb2ec79\x86_microsoft-windows-help-harddev.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99d0df67fdb2ec79: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-helpplc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_beb52d3041f18281\x86_microsoft-windows-help-helpplc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_beb52d3041f18281: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-hhomeue.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f6c37f230094e90\x86_microsoft-windows-help-hhomeue.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f6c37f230094e90: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_614e8e31a0b68330\x86_microsoft-windows-help-ics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_614e8e31a0b68330: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-iis.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fb08857bfa422bb6\x86_microsoft-windows-help-iis.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fb08857bfa422bb6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-iispr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c911b19c5970075a\x86_microsoft-windows-help-iispr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c911b19c5970075a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-inkball.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7c101858ba7520dc\x86_microsoft-windows-help-inkball.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7c101858ba7520dc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-inkwat.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5e1844c84f48697b\x86_microsoft-windows-help-inkwat.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5e1844c84f48697b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-input.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c95e180bcc14a18d\x86_microsoft-windows-help-input.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c95e180bcc14a18d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-instmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bc866f66f4ac0c08\x86_microsoft-windows-help-instmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bc866f66f4ac0c08: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-journal.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9546fbaf73c9cd66\x86_microsoft-windows-help-journal.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9546fbaf73c9cd66: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-langreg.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a17bac9a799c9cb3\x86_microsoft-windows-help-langreg.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a17bac9a799c9cb3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-legapp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_83e23a8835d39ba6\x86_microsoft-windows-help-legapp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_83e23a8835d39ba6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-legapp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5121e68f01f78ccc\x86_microsoft-windows-help-legapp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5121e68f01f78ccc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-library.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce8a9e8edb7254b6\x86_microsoft-windows-help-library.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce8a9e8edb7254b6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-license.resources_31bf3856ad364e35_6.0.6001.18000_en-us_53f1f32b9572fbf6\x86_microsoft-windows-help-license.resources_31bf3856ad364e35_6.0.6001.18000_en-us_53f1f32b9572fbf6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mail.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4de93c5355038d06\x86_microsoft-windows-help-mail.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4de93c5355038d06: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4048d239ff57e0\x86_microsoft-windows-help-medctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4048d239ff57e0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6306a0ec88059358\x86_microsoft-windows-help-medexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6306a0ec88059358: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medexp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6c12b99feb251f7c\x86_microsoft-windows-help-medexp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6c12b99feb251f7c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-migrate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7983c33684ffc3a0\x86_microsoft-windows-help-migrate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7983c33684ffc3a0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mobctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0dc3bba67c095564\x86_microsoft-windows-help-mobctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0dc3bba67c095564: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mobile.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f492fbd1f9f3c3b9\x86_microsoft-windows-help-mobile.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f492fbd1f9f3c3b9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-movie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_24e8d77ce9606621\x86_microsoft-windows-help-movie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_24e8d77ce9606621: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_150c96b39b572cf6\x86_microsoft-windows-help-mreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_150c96b39b572cf6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netproj.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd2516071ee9b199\x86_microsoft-windows-help-netproj.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd2516071ee9b199: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a5834de3e351e6e2\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a5834de3e351e6e2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a2bc1f0ddc6c1c13\x86_microsoft-windows-help-netw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a2bc1f0ddc6c1c13: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netwl.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1128c740adf49eb1\x86_microsoft-windows-help-netwl.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1128c740adf49eb1: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-network.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c1e45cef6a8f8cd1\x86_microsoft-windows-help-network.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c1e45cef6a8f8cd1: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netwpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6958537f7052b429\x86_microsoft-windows-help-netwpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6958537f7052b429: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-offline.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a8c441d60f5d00\x86_microsoft-windows-help-offline.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a8c441d60f5d00: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-parent.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2f9376694c90fd3\x86_microsoft-windows-help-parent.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2f9376694c90fd3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-pencurs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_300acfefe49bd4ab\x86_microsoft-windows-help-pencurs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_300acfefe49bd4ab: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-peopcom.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0745464b1fa2cf18\x86_microsoft-windows-help-peopcom.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0745464b1fa2cf18: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-perf.resources_31bf3856ad364e35_6.0.6001.18000_en-us_330415f06dac7f56\x86_microsoft-windows-help-perf.resources_31bf3856ad364e35_6.0.6001.18000_en-us_330415f06dac7f56: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-persnlz.resources_31bf3856ad364e35_6.0.6001.18000_en-us_13a8748137652bcb\x86_microsoft-windows-help-persnlz.resources_31bf3856ad364e35_6.0.6001.18000_en-us_13a8748137652bcb: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-playing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_733eb86169aed945\x86_microsoft-windows-help-playing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_733eb86169aed945: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-presset.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f34d2d5eec1d8ff5\x86_microsoft-windows-help-presset.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f34d2d5eec1d8ff5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-print.resources_31bf3856ad364e35_6.0.6001.18000_en-us_dfb371bb349391c2\x86_microsoft-windows-help-print.resources_31bf3856ad364e35_6.0.6001.18000_en-us_dfb371bb349391c2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-privacy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_94f8a474b1ac8685\x86_microsoft-windows-help-privacy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_94f8a474b1ac8685: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-pwrmgm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_74032451ce81670d\x86_microsoft-windows-help-pwrmgm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_74032451ce81670d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ra.resources_31bf3856ad364e35_6.0.6001.18000_en-us_44e18a95654213a2\x86_microsoft-windows-help-ra.resources_31bf3856ad364e35_6.0.6001.18000_en-us_44e18a95654213a2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_11be863a9207e7e5\x86_microsoft-windows-help-rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_11be863a9207e7e5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-rdb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bca4f03d1184dfab\x86_microsoft-windows-help-rdb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bca4f03d1184dfab: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-recycle.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4ccf05878e035de6\x86_microsoft-windows-help-recycle.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4ccf05878e035de6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-restore.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e5a87a1b00c5e4dd\x86_microsoft-windows-help-restore.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e5a87a1b00c5e4dd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ripbsyn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e2edd8c0ae2d824a\x86_microsoft-windows-help-ripbsyn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e2edd8c0ae2d824a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-scan.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5fed7d3b38eace24\x86_microsoft-windows-help-scan.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5fed7d3b38eace24: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-seccntr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4066b76580ad78d9\x86_microsoft-windows-help-seccntr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4066b76580ad78d9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-secpol.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3193379bb2c06b67\x86_microsoft-windows-help-secpol.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3193379bb2c06b67: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-secpriv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f0ded06d767324d1\x86_microsoft-windows-help-secpriv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f0ded06d767324d1: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sharing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_64a7636b3441bca5\x86_microsoft-windows-help-sharing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_64a7636b3441bca5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_79ce6474f21869b0\x86_microsoft-windows-help-shgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_79ce6474f21869b0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_49d67d91163d650e\x86_microsoft-windows-help-shreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_49d67d91163d650e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shutdwn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2515bfc5ff753924\x86_microsoft-windows-help-shutdwn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2515bfc5ff753924: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sidebar.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4e074d9fc89b21ed\x86_microsoft-windows-help-sidebar.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4e074d9fc89b21ed: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sniptoo.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9a3b1304b88cbfc5\x86_microsoft-windows-help-sniptoo.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9a3b1304b88cbfc5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-speech.resources_31bf3856ad364e35_6.0.6001.18000_en-us_643cb9ff7ed95351\x86_microsoft-windows-help-speech.resources_31bf3856ad364e35_6.0.6001.18000_en-us_643cb9ff7ed95351: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-stknote.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5efebaed4bc18885\x86_microsoft-windows-help-stknote.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5efebaed4bc18885: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-storage.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b0a96e233ddd881a\x86_microsoft-windows-help-storage.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b0a96e233ddd881a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sync.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b3299bd4eeec268e\x86_microsoft-windows-help-sync.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b3299bd4eeec268e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sysman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4c75d5a787362636\x86_microsoft-windows-help-sysman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4c75d5a787362636: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-tablet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0ec3218c67003501\x86_microsoft-windows-help-tablet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0ec3218c67003501: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-tcpch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4ea900bef19c15\x86_microsoft-windows-help-tcpch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4ea900bef19c15: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-touch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f4a1e2c5b82ee1a6\x86_microsoft-windows-help-touch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f4a1e2c5b82ee1a6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-vidclip.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ba5ea3dae306ba68\x86_microsoft-windows-help-vidclip.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ba5ea3dae306ba68: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-video.resources_31bf3856ad364e35_6.0.6001.18000_en-us_93eb5676c5b1f3f8\x86_microsoft-windows-help-video.resources_31bf3856ad364e35_6.0.6001.18000_en-us_93eb5676c5b1f3f8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-videos.resources_31bf3856ad364e35_6.0.6001.18000_en-us_38ba607b34299839\x86_microsoft-windows-help-videos.resources_31bf3856ad364e35_6.0.6001.18000_en-us_38ba607b34299839: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wasw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_231817bdb6a89c41\x86_microsoft-windows-help-wasw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_231817bdb6a89c41: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wer.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8a78d11789562e69\x86_microsoft-windows-help-wer.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8a78d11789562e69: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-winmeet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2dc878e279bbddc8\x86_microsoft-windows-help-winmeet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2dc878e279bbddc8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wnewue.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8cb975b259788360\x86_microsoft-windows-help-wnewue.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8cb975b259788360: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wu.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f3af7e71fb54efe9\x86_microsoft-windows-help-wu.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f3af7e71fb54efe9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.eventviewer_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_234aec155b534bab\x86_server-help-chm.eventviewer_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_234aec155b534bab: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.file_srv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2c4685e9d0a11f8\x86_server-help-chm.file_srv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2c4685e9d0a11f8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.inetsrvmmcvp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b56d5ab3a8fc02d8\x86_server-help-chm.inetsrvmmcvp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b56d5ab3a8fc02d8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.ipsecmonitor.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bf205f8412702dd0\x86_server-help-chm.ipsecmonitor.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bf205f8412702dd0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.ipsecpolicy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_573e3ba8900afcd8\x86_server-help-chm.ipsecpolicy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_573e3ba8900afcd8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.nfs_client.resources_31bf3856ad364e35_6.0.6001.18000_en-us_92efe27ed06c901b\x86_server-help-chm.nfs_client.resources_31bf3856ad364e35_6.0.6001.18000_en-us_92efe27ed06c901b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.saf..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2615b43dd4da4955\x86_server-help-chm.saf..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2615b43dd4da4955: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.spo..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd467ae189f90651\x86_server-help-chm.spo..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd467ae189f90651: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.tas..eduler_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_69ecb5113447c1a9\x86_server-help-chm.tas..eduler_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_69ecb5113447c1a9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.tpmadmin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_98ad291fe3e28ed6\x86_server-help-chm.tpmadmin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_98ad291fe3e28ed6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-h1s.itprobasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e9f3fffafda13b34\x86_server-help-h1s.itprobasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e9f3fffafda13b34: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.16908_en-us_80aa46aabe6988cc\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.16908_en-us_80aa46aabe6988cc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.21108_en-us_8133bb97d7875bd8\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.21108_en-us_8133bb97d7875bd8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.18311_en-us_827eb35ebb9e844d\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.18311_en-us_827eb35ebb9e844d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.22497_en-us_82b7d285d4f79ba9\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.22497_en-us_82b7d285d4f79ba9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.18091_en-us_840ea5e6b905b8f9\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.18091_en-us_840ea5e6b905b8f9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.22200_en-us_84f89399d1db411a\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.22200_en-us_84f89399d1db411a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.16908_en-us_f28bf998a1c9cb0c\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.16908_en-us_f28bf998a1c9cb0c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.21108_en-us_f3156e85bae79e18\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.21108_en-us_f3156e85bae79e18: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.18311_en-us_f460664c9efec68d\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.18311_en-us_f460664c9efec68d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.22497_en-us_f4998573b857dde9\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.22497_en-us_f4998573b857dde9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.18091_en-us_f5f058d49c65fb39\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.18091_en-us_f5f058d49c65fb39: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.22200_en-us_f6da4687b53b835a\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.22200_en-us_f6da4687b53b835a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6000.16865_none_80bdcfa6fa29e6c3\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6000.16865_none_80bdcfa6fa29e6c3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6000.21061_none_8143436c134b5473\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6000.21061_none_8143436c134b5473: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.18266_none_82a50e96f74f910b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.18266_none_82a50e96f74f910b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.22443_none_83414c42105faa15\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.22443_none_83414c42105faa15: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.18045_none_84a021f2f466921d\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.18045_none_84a021f2f466921d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.22146_none_852abf080d834b3e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.22146_none_852abf080d834b3e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\cc9db45d4d7a49bee9efe23f364bf80b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\cc9db45d4d7a49bee9efe23f364bf80b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18: MOUNT POINT
Substitute Name: \Device\__max++>\^



...

...

..\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16866_none_7fe0c12063c7ff25\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16866_none_7fe0c12063c7ff25: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21062_none_806634e57ce96cd5\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21062_none_806634e57ce96cd5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18267_none_81c8001060eda96d\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18267_none_81c8001060eda96d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22444_none_82643dbb79fdc277\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22444_none_82643dbb79fdc277: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18046_none_83c3136c5e04aa7f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18046_none_83c3136c5e04aa7f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22147_none_844db081772163a0\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22147_none_844db081772163a0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16866_none_4755e279c14fc1a0\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16866_none_4755e279c14fc1a0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21062_none_47db563eda712f50\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21062_none_47db563eda712f50: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18267_none_493d2169be756be8\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18267_none_493d2169be756be8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22444_none_49d95f14d78584f2\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22444_none_49d95f14d78584f2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18046_none_4b3834c5bb8c6cfa\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18046_none_4b3834c5bb8c6cfa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22147_none_4bc2d1dad4a9261b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22147_none_4bc2d1dad4a9261b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16866_none_0a011f83f55114da\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16866_none_0a011f83f55114da: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21062_none_0a8693490e72828a\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21062_none_0a8693490e72828a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18267_none_0be85e73f276bf22\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18267_none_0be85e73f276bf22: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22444_none_0c849c1f0b86d82c\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22444_none_0c849c1f0b86d82c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18046_none_0de371cfef8dc034\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18046_none_0de371cfef8dc034: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22147_none_0e6e0ee508aa7955\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22147_none_0e6e0ee508aa7955: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16866_none_0a021fcdf5502e31\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16866_none_0a021fcdf5502e31: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21062_none_0a8793930e719be1\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21062_none_0a8793930e719be1: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18267_none_0be95ebdf275d879\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18267_none_0be95ebdf275d879: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22444_none_0c859c690b85f183\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22444_none_0c859c690b85f183: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18046_none_0de47219ef8cd98b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18046_none_0de47219ef8cd98b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22147_none_0e6f0f2f08a992ac\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22147_none_0e6f0f2f08a992ac: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16866_none_0a032017f54f4788\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16866_none_0a032017f54f4788: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21062_none_0a8893dd0e70b538\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21062_none_0a8893dd0e70b538: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18267_none_0bea5f07f274f1d0\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18267_none_0bea5f07f274f1d0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22444_none_0c869cb30b850ada\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22444_none_0c869cb30b850ada: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18046_none_0de57263ef8bf2e2\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18046_none_0de57263ef8bf2e2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22147_none_0e700f7908a8ac03\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22147_none_0e700f7908a8ac03: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16866_none_0a042061f54e60df\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16866_none_0a042061f54e60df: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21062_none_0a8994270e6fce8f\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21062_none_0a8994270e6fce8f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18267_none_0beb5f51f2740b27\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18267_none_0beb5f51f2740b27: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22444_none_0c879cfd0b842431\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22444_none_0c879cfd0b842431: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18046_none_0de672adef8b0c39\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18046_none_0de672adef8b0c39: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22147_none_0e710fc308a7c55a\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22147_none_0e710fc308a7c55a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16866_none_0a0520abf54d7a36\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16866_none_0a0520abf54d7a36: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21062_none_0a8a94710e6ee7e6\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21062_none_0a8a94710e6ee7e6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18267_none_0bec5f9bf273247e\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18267_none_0bec5f9bf273247e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22444_none_0c889d470b833d88\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22444_none_0c889d470b833d88: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18046_none_0de772f7ef8a2590\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18046_none_0de772f7ef8a2590: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22147_none_0e72100d08a6deb1\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22147_none_0e72100d08a6deb1: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187: MOUNT POINT
Substitute Name: \Device\__max++>\^



..
Failed to open \\?\c:\\Windows\System32\mrt.exe: Access is denied.


.

...

...

...

...

...

...

...

...
Failed to open \\?\c:\\Windows\System32\LogFiles\WMI\RtBackup: Access is denied.




...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

#11 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,688 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:01:51 AM

Posted 28 September 2009 - 04:58 AM

  • Delete your copy of Win32kDiag and download the latest copy from any of the following locations and save it to your Desktop.
  • Run Command Prompt as administrator:
    • Click on Start button.
    • Type Cmd in the Start Search text box.
    • Press Ctrl-Shift-Enter keyboard shortcut to run Command Prompt as Administrator.
    • copy-paste the following command (the bolded text) into the "Open" box, and click OK:

      "%userprofile%\desktop\win32kdiag.exe" -f -r

      When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please open it with notepad and post the contents here.
  • We need to unlock some locked files.
    • Download this tool and save it to the desktop: http://download.bleepingcomputer.com/sUBs/...xes/Inherit.exe
    • Go to Start => Copy and paste the first line of the following lines in the Start Search box and click OK:

      "%userprofile%\desktop\inherit" "c:\\Program Files\AVG\AVG8\avgcsrvx.exe"
      "%userprofile%\desktop\inherit" "c:\\Program Files\malwarebytes\mbam.exe"
      "%userprofile%\desktop\inherit" "c:\\Users\rick\Desktop\other installs\RootRepeal.exe"

    • Confirm it if you get any prompt to let the program ran.
    • You will get a "Finish" popup. Click OK.
    • Do the same for the rest of the lines until you have run all the above commands one by one.
  • Open your Malwarebytes' Anti-Malware.
    • First update it, to do that under the Update tab press "Check for Updates".
    • Under Scanner tab select "Perform Quick Scan", then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked, and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Copy&Paste the MBAM log.
    Extra Note:
    If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.


#12 535cheetah

535cheetah
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 28 September 2009 - 11:59 PM

deleted old win32 downloaded new to desktop. ran it , log below.. although i dunno it doesnt look to good to me lol

step 3: done
step 4: mbam done log below the win32 log although it did not find any malicious items detected.

Running from: C:\Users\rick\desktop\win32kdiag.exe

Log file at : C:\Users\rick\Desktop\Win32kDiag.txt

Removing all found mount points.

Attempting to reset file permissions.

WARNING: Could not get backup privileges!

Searching 'C:\Windows'...



Found mount point : C:\Windows\CSC\v2.0.6\namespace\namespace

Mount point destination : \Device\__max++>\^

Removing mount point : C:\Windows\CSC\v2.0.6\namespace\namespace

Cannot access: C:\Windows\CSC\v2.0.6\pq

Attempting to restore permissions of : C:\Windows\CSC\v2.0.6\pq

Cannot access: C:\Windows\CSC\v2.0.6\temp\ea-{f517e1ae-4e7b-11de-ace2-001e8c00541c}

Attempting to restore permissions of : C:\Windows\CSC\v2.0.6\temp\ea-{f517e1ae-4e7b-11de-ace2-001e8c00541c}

Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-a..ltimateed.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a99eca952b478dd1\x86_microsoft-windows-a..ltimateed.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a99eca952b478dd1: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-artuical.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99fb0e2829483a36\x86_microsoft-windows-h..-artuical.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99fb0e2829483a36: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-bckupbas.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2d3fbcc4aaf3be34\x86_microsoft-windows-h..-bckupbas.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2d3fbcc4aaf3be34: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-bckupbus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5c9d3198d5a392c0\x86_microsoft-windows-h..-bckupbus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5c9d3198d5a392c0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-blutooth.resources_31bf3856ad364e35_6.0.6001.18000_en-us_919613b50694961c\x86_microsoft-windows-h..-blutooth.resources_31bf3856ad364e35_6.0.6001.18000_en-us_919613b50694961c: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-escalate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a7b046f4aa9d89\x86_microsoft-windows-h..-escalate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a7b046f4aa9d89: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-firewall.resources_31bf3856ad364e35_6.0.6001.18000_en-us_268b1c2d9b7c664b\x86_microsoft-windows-h..-firewall.resources_31bf3856ad364e35_6.0.6001.18000_en-us_268b1c2d9b7c664b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.0.6001.18000_en-us_01aa8bc9d3953d56\x86_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.0.6001.18000_en-us_01aa8bc9d3953d56: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-iisbasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7001e8f963459e76\x86_microsoft-windows-h..-iisbasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7001e8f963459e76: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-medexppr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d9dc804dccbc12a6\x86_microsoft-windows-h..-medexppr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d9dc804dccbc12a6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-medexptv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_85c8d98e01d5a486\x86_microsoft-windows-h..-medexptv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_85c8d98e01d5a486: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-multboot.resources_31bf3856ad364e35_6.0.6001.18000_en-us_89d39ff45ffe9ef5\x86_microsoft-windows-h..-multboot.resources_31bf3856ad364e35_6.0.6001.18000_en-us_89d39ff45ffe9ef5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-safemodc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4d5f6440e35a68a9\x86_microsoft-windows-h..-safemodc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4d5f6440e35a68a9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-winmeetb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bcc802fea2e6f0e\x86_microsoft-windows-h..-winmeetb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bcc802fea2e6f0e: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..cultimate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763ebda6ca2b8bf9\x86_microsoft-windows-h..cultimate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763ebda6ca2b8bf9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-access.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ac2450cda9380fc5\x86_microsoft-windows-help-access.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ac2450cda9380fc5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-activ.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce6dc4eb70cfef16\x86_microsoft-windows-help-activ.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce6dc4eb70cfef16: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-acw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e6a6078590ce8804\x86_microsoft-windows-help-acw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e6a6078590ce8804: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-app3rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5629afc218cd4909\x86_microsoft-windows-help-app3rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5629afc218cd4909: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-appman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_edad3325b8809032\x86_microsoft-windows-help-appman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_edad3325b8809032: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-appwin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fbdec4287c521700\x86_microsoft-windows-help-appwin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fbdec4287c521700: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artcone.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ed1dc4bed07f787f\x86_microsoft-windows-help-artcone.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ed1dc4bed07f787f: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_334326ad47f900b7\x86_microsoft-windows-help-artconm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_334326ad47f900b7: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artcont.resources_31bf3856ad364e35_6.0.6001.18000_en-us_10a3dc5df08357e8\x86_microsoft-windows-help-artcont.resources_31bf3856ad364e35_6.0.6001.18000_en-us_10a3dc5df08357e8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e22d34d98e61b9f6\x86_microsoft-windows-help-artconv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e22d34d98e61b9f6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4af1e1175d50eafd\x86_microsoft-windows-help-artconw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4af1e1175d50eafd: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artico.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9e9bce6f79b80547\x86_microsoft-windows-help-artico.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9e9bce6f79b80547: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f467ab99ca8bd0f9\x86_microsoft-windows-help-artuic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f467ab99ca8bd0f9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d250535d3dba5e7b\x86_microsoft-windows-help-artuie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d250535d3dba5e7b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuiv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b089e55a90c6114c\x86_microsoft-windows-help-artuiv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b089e55a90c6114c: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuiw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f7e393c4a5d580d\x86_microsoft-windows-help-artuiw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f7e393c4a5d580d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-auxdisp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6fa4b81637688e4b\x86_microsoft-windows-help-auxdisp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6fa4b81637688e4b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-backup.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763c152dd70bb0f5\x86_microsoft-windows-help-backup.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763c152dd70bb0f5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-basics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4307aacb48f3a60c\x86_microsoft-windows-help-basics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4307aacb48f3a60c: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-basics2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_db20390311c23bfc\x86_microsoft-windows-help-basics2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_db20390311c23bfc: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-bitlock.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cc616fcad37a3085\x86_microsoft-windows-help-bitlock.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cc616fcad37a3085: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-browser.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cae808618251179b\x86_microsoft-windows-help-browser.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cae808618251179b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-buttons.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bb59e33ff71fb74\x86_microsoft-windows-help-buttons.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bb59e33ff71fb74: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-checkbx.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d4fa565b2c5c1635\x86_microsoft-windows-help-checkbx.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d4fa565b2c5c1635: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-cw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2ba8d4d157e289f\x86_microsoft-windows-help-cw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2ba8d4d157e289f: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-desk.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7a40e7bd82d892a6\x86_microsoft-windows-help-desk.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7a40e7bd82d892a6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-deskpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_da07dee83110caa2\x86_microsoft-windows-help-deskpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_da07dee83110caa2: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-dgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bbe2ff296b8aac13\x86_microsoft-windows-help-dgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bbe2ff296b8aac13: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-diskcln.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b94f4394c38c2c9d\x86_microsoft-windows-help-diskcln.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b94f4394c38c2c9d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-diskmgt.resources_31bf3856ad364e35_6.0.6001.18000_en-us_284e552d9bc0e01c\x86_microsoft-windows-help-diskmgt.resources_31bf3856ad364e35_6.0.6001.18000_en-us_284e552d9bc0e01c: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-domain.resources_31bf3856ad364e35_6.0.6001.18000_en-us_60f111c5bc35c147\x86_microsoft-windows-help-domain.resources_31bf3856ad364e35_6.0.6001.18000_en-us_60f111c5bc35c147: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-dvdburn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ef207e48bb95f4da\x86_microsoft-windows-help-dvdburn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ef207e48bb95f4da: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-efs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1f4dee0527a9f7cf\x86_microsoft-windows-help-efs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1f4dee0527a9f7cf: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-efsfull.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5881e5d04c0752c0\x86_microsoft-windows-help-efsfull.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5881e5d04c0752c0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-errmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_65f020eccb6dbd67\x86_microsoft-windows-help-errmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_65f020eccb6dbd67: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-fax.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c416d51bbbd62316\x86_microsoft-windows-help-fax.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c416d51bbbd62316: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-flicks.resources_31bf3856ad364e35_6.0.6001.18000_en-us_df4717294a11e0c9\x86_microsoft-windows-help-flicks.resources_31bf3856ad364e35_6.0.6001.18000_en-us_df4717294a11e0c9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-fstexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3bd2266a8dd63c7b\x86_microsoft-windows-help-fstexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3bd2266a8dd63c7b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-fus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6356058930fbb507\x86_microsoft-windows-help-fus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6356058930fbb507: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-games.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d66208d4786dcf36\x86_microsoft-windows-help-games.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d66208d4786dcf36: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-gamesp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ae541733ba1f9f34\x86_microsoft-windows-help-gamesp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ae541733ba1f9f34: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-gamest.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6a2566baa07cba38\x86_microsoft-windows-help-gamest.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6a2566baa07cba38: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-harddev.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99d0df67fdb2ec79\x86_microsoft-windows-help-harddev.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99d0df67fdb2ec79: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-helpplc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_beb52d3041f18281\x86_microsoft-windows-help-helpplc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_beb52d3041f18281: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-hhomeue.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f6c37f230094e90\x86_microsoft-windows-help-hhomeue.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f6c37f230094e90: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_614e8e31a0b68330\x86_microsoft-windows-help-ics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_614e8e31a0b68330: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-iis.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fb08857bfa422bb6\x86_microsoft-windows-help-iis.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fb08857bfa422bb6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-iispr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c911b19c5970075a\x86_microsoft-windows-help-iispr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c911b19c5970075a: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-inkball.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7c101858ba7520dc\x86_microsoft-windows-help-inkball.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7c101858ba7520dc: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-inkwat.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5e1844c84f48697b\x86_microsoft-windows-help-inkwat.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5e1844c84f48697b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-input.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c95e180bcc14a18d\x86_microsoft-windows-help-input.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c95e180bcc14a18d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-instmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bc866f66f4ac0c08\x86_microsoft-windows-help-instmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bc866f66f4ac0c08: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-journal.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9546fbaf73c9cd66\x86_microsoft-windows-help-journal.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9546fbaf73c9cd66: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-langreg.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a17bac9a799c9cb3\x86_microsoft-windows-help-langreg.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a17bac9a799c9cb3: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-legapp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_83e23a8835d39ba6\x86_microsoft-windows-help-legapp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_83e23a8835d39ba6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-legapp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5121e68f01f78ccc\x86_microsoft-windows-help-legapp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5121e68f01f78ccc: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-library.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce8a9e8edb7254b6\x86_microsoft-windows-help-library.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce8a9e8edb7254b6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-license.resources_31bf3856ad364e35_6.0.6001.18000_en-us_53f1f32b9572fbf6\x86_microsoft-windows-help-license.resources_31bf3856ad364e35_6.0.6001.18000_en-us_53f1f32b9572fbf6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mail.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4de93c5355038d06\x86_microsoft-windows-help-mail.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4de93c5355038d06: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4048d239ff57e0\x86_microsoft-windows-help-medctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4048d239ff57e0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6306a0ec88059358\x86_microsoft-windows-help-medexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6306a0ec88059358: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medexp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6c12b99feb251f7c\x86_microsoft-windows-help-medexp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6c12b99feb251f7c: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-migrate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7983c33684ffc3a0\x86_microsoft-windows-help-migrate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7983c33684ffc3a0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mobctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0dc3bba67c095564\x86_microsoft-windows-help-mobctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0dc3bba67c095564: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mobile.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f492fbd1f9f3c3b9\x86_microsoft-windows-help-mobile.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f492fbd1f9f3c3b9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-movie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_24e8d77ce9606621\x86_microsoft-windows-help-movie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_24e8d77ce9606621: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_150c96b39b572cf6\x86_microsoft-windows-help-mreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_150c96b39b572cf6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netproj.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd2516071ee9b199\x86_microsoft-windows-help-netproj.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd2516071ee9b199: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a5834de3e351e6e2\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a5834de3e351e6e2: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a2bc1f0ddc6c1c13\x86_microsoft-windows-help-netw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a2bc1f0ddc6c1c13: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netwl.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1128c740adf49eb1\x86_microsoft-windows-help-netwl.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1128c740adf49eb1: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-network.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c1e45cef6a8f8cd1\x86_microsoft-windows-help-network.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c1e45cef6a8f8cd1: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netwpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6958537f7052b429\x86_microsoft-windows-help-netwpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6958537f7052b429: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-offline.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a8c441d60f5d00\x86_microsoft-windows-help-offline.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a8c441d60f5d00: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-parent.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2f9376694c90fd3\x86_microsoft-windows-help-parent.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2f9376694c90fd3: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-pencurs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_300acfefe49bd4ab\x86_microsoft-windows-help-pencurs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_300acfefe49bd4ab: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-peopcom.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0745464b1fa2cf18\x86_microsoft-windows-help-peopcom.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0745464b1fa2cf18: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-perf.resources_31bf3856ad364e35_6.0.6001.18000_en-us_330415f06dac7f56\x86_microsoft-windows-help-perf.resources_31bf3856ad364e35_6.0.6001.18000_en-us_330415f06dac7f56: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-persnlz.resources_31bf3856ad364e35_6.0.6001.18000_en-us_13a8748137652bcb\x86_microsoft-windows-help-persnlz.resources_31bf3856ad364e35_6.0.6001.18000_en-us_13a8748137652bcb: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-playing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_733eb86169aed945\x86_microsoft-windows-help-playing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_733eb86169aed945: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-presset.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f34d2d5eec1d8ff5\x86_microsoft-windows-help-presset.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f34d2d5eec1d8ff5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-print.resources_31bf3856ad364e35_6.0.6001.18000_en-us_dfb371bb349391c2\x86_microsoft-windows-help-print.resources_31bf3856ad364e35_6.0.6001.18000_en-us_dfb371bb349391c2: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-privacy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_94f8a474b1ac8685\x86_microsoft-windows-help-privacy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_94f8a474b1ac8685: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-pwrmgm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_74032451ce81670d\x86_microsoft-windows-help-pwrmgm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_74032451ce81670d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ra.resources_31bf3856ad364e35_6.0.6001.18000_en-us_44e18a95654213a2\x86_microsoft-windows-help-ra.resources_31bf3856ad364e35_6.0.6001.18000_en-us_44e18a95654213a2: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_11be863a9207e7e5\x86_microsoft-windows-help-rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_11be863a9207e7e5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-rdb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bca4f03d1184dfab\x86_microsoft-windows-help-rdb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bca4f03d1184dfab: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-recycle.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4ccf05878e035de6\x86_microsoft-windows-help-recycle.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4ccf05878e035de6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-restore.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e5a87a1b00c5e4dd\x86_microsoft-windows-help-restore.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e5a87a1b00c5e4dd: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ripbsyn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e2edd8c0ae2d824a\x86_microsoft-windows-help-ripbsyn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e2edd8c0ae2d824a: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-scan.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5fed7d3b38eace24\x86_microsoft-windows-help-scan.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5fed7d3b38eace24: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-seccntr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4066b76580ad78d9\x86_microsoft-windows-help-seccntr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4066b76580ad78d9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-secpol.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3193379bb2c06b67\x86_microsoft-windows-help-secpol.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3193379bb2c06b67: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-secpriv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f0ded06d767324d1\x86_microsoft-windows-help-secpriv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f0ded06d767324d1: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sharing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_64a7636b3441bca5\x86_microsoft-windows-help-sharing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_64a7636b3441bca5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_79ce6474f21869b0\x86_microsoft-windows-help-shgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_79ce6474f21869b0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_49d67d91163d650e\x86_microsoft-windows-help-shreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_49d67d91163d650e: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shutdwn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2515bfc5ff753924\x86_microsoft-windows-help-shutdwn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2515bfc5ff753924: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sidebar.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4e074d9fc89b21ed\x86_microsoft-windows-help-sidebar.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4e074d9fc89b21ed: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sniptoo.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9a3b1304b88cbfc5\x86_microsoft-windows-help-sniptoo.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9a3b1304b88cbfc5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-speech.resources_31bf3856ad364e35_6.0.6001.18000_en-us_643cb9ff7ed95351\x86_microsoft-windows-help-speech.resources_31bf3856ad364e35_6.0.6001.18000_en-us_643cb9ff7ed95351: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-stknote.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5efebaed4bc18885\x86_microsoft-windows-help-stknote.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5efebaed4bc18885: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-storage.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b0a96e233ddd881a\x86_microsoft-windows-help-storage.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b0a96e233ddd881a: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sync.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b3299bd4eeec268e\x86_microsoft-windows-help-sync.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b3299bd4eeec268e: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sysman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4c75d5a787362636\x86_microsoft-windows-help-sysman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4c75d5a787362636: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-tablet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0ec3218c67003501\x86_microsoft-windows-help-tablet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0ec3218c67003501: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-tcpch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4ea900bef19c15\x86_microsoft-windows-help-tcpch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4ea900bef19c15: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-touch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f4a1e2c5b82ee1a6\x86_microsoft-windows-help-touch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f4a1e2c5b82ee1a6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-vidclip.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ba5ea3dae306ba68\x86_microsoft-windows-help-vidclip.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ba5ea3dae306ba68: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-video.resources_31bf3856ad364e35_6.0.6001.18000_en-us_93eb5676c5b1f3f8\x86_microsoft-windows-help-video.resources_31bf3856ad364e35_6.0.6001.18000_en-us_93eb5676c5b1f3f8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-videos.resources_31bf3856ad364e35_6.0.6001.18000_en-us_38ba607b34299839\x86_microsoft-windows-help-videos.resources_31bf3856ad364e35_6.0.6001.18000_en-us_38ba607b34299839: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wasw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_231817bdb6a89c41\x86_microsoft-windows-help-wasw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_231817bdb6a89c41: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wer.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8a78d11789562e69\x86_microsoft-windows-help-wer.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8a78d11789562e69: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-winmeet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2dc878e279bbddc8\x86_microsoft-windows-help-winmeet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2dc878e279bbddc8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wnewue.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8cb975b259788360\x86_microsoft-windows-help-wnewue.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8cb975b259788360: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wu.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f3af7e71fb54efe9\x86_microsoft-windows-help-wu.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f3af7e71fb54efe9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.eventviewer_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_234aec155b534bab\x86_server-help-chm.eventviewer_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_234aec155b534bab: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.file_srv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2c4685e9d0a11f8\x86_server-help-chm.file_srv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2c4685e9d0a11f8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.inetsrvmmcvp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b56d5ab3a8fc02d8\x86_server-help-chm.inetsrvmmcvp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b56d5ab3a8fc02d8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.ipsecmonitor.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bf205f8412702dd0\x86_server-help-chm.ipsecmonitor.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bf205f8412702dd0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.ipsecpolicy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_573e3ba8900afcd8\x86_server-help-chm.ipsecpolicy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_573e3ba8900afcd8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.nfs_client.resources_31bf3856ad364e35_6.0.6001.18000_en-us_92efe27ed06c901b\x86_server-help-chm.nfs_client.resources_31bf3856ad364e35_6.0.6001.18000_en-us_92efe27ed06c901b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.saf..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2615b43dd4da4955\x86_server-help-chm.saf..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2615b43dd4da4955: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.spo..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd467ae189f90651\x86_server-help-chm.spo..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd467ae189f90651: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.tas..eduler_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_69ecb5113447c1a9\x86_server-help-chm.tas..eduler_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_69ecb5113447c1a9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.tpmadmin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_98ad291fe3e28ed6\x86_server-help-chm.tpmadmin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_98ad291fe3e28ed6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-h1s.itprobasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e9f3fffafda13b34\x86_server-help-h1s.itprobasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e9f3fffafda13b34: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.16908_en-us_80aa46aabe6988cc\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.16908_en-us_80aa46aabe6988cc: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.21108_en-us_8133bb97d7875bd8\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.21108_en-us_8133bb97d7875bd8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.18311_en-us_827eb35ebb9e844d\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.18311_en-us_827eb35ebb9e844d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.22497_en-us_82b7d285d4f79ba9\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.22497_en-us_82b7d285d4f79ba9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.18091_en-us_840ea5e6b905b8f9\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.18091_en-us_840ea5e6b905b8f9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.22200_en-us_84f89399d1db411a\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.22200_en-us_84f89399d1db411a: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.16908_en-us_f28bf998a1c9cb0c\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.16908_en-us_f28bf998a1c9cb0c: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.21108_en-us_f3156e85bae79e18\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.21108_en-us_f3156e85bae79e18: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.18311_en-us_f460664c9efec68d\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.18311_en-us_f460664c9efec68d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.22497_en-us_f4998573b857dde9\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.22497_en-us_f4998573b857dde9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.18091_en-us_f5f058d49c65fb39\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.18091_en-us_f5f058d49c65fb39: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.22200_en-us_f6da4687b53b835a\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.22200_en-us_f6da4687b53b835a: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6000.16865_none_80bdcfa6fa29e6c3\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6000.16865_none_80bdcfa6fa29e6c3: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6000.21061_none_8143436c134b5473\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6000.21061_none_8143436c134b5473: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.18266_none_82a50e96f74f910b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.18266_none_82a50e96f74f910b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.22443_none_83414c42105faa15\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.22443_none_83414c42105faa15: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.18045_none_84a021f2f466921d\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.18045_none_84a021f2f466921d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\baa94b70dade5f2eeda685302cab2d1e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.22146_none_852abf080d834b3e\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.22146_none_852abf080d834b3e: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\cc9db45d4d7a49bee9efe23f364bf80b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\cc9db45d4d7a49bee9efe23f364bf80b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16866_none_7fe0c12063c7ff25\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16866_none_7fe0c12063c7ff25: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21062_none_806634e57ce96cd5\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21062_none_806634e57ce96cd5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18267_none_81c8001060eda96d\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18267_none_81c8001060eda96d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22444_none_82643dbb79fdc277\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22444_none_82643dbb79fdc277: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18046_none_83c3136c5e04aa7f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18046_none_83c3136c5e04aa7f: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22147_none_844db081772163a0\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22147_none_844db081772163a0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16866_none_4755e279c14fc1a0\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16866_none_4755e279c14fc1a0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21062_none_47db563eda712f50\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21062_none_47db563eda712f50: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18267_none_493d2169be756be8\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18267_none_493d2169be756be8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22444_none_49d95f14d78584f2\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22444_none_49d95f14d78584f2: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18046_none_4b3834c5bb8c6cfa\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18046_none_4b3834c5bb8c6cfa: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22147_none_4bc2d1dad4a9261b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22147_none_4bc2d1dad4a9261b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16866_none_0a011f83f55114da\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16866_none_0a011f83f55114da: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21062_none_0a8693490e72828a\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21062_none_0a8693490e72828a: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18267_none_0be85e73f276bf22\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18267_none_0be85e73f276bf22: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22444_none_0c849c1f0b86d82c\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22444_none_0c849c1f0b86d82c: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18046_none_0de371cfef8dc034\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18046_none_0de371cfef8dc034: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22147_none_0e6e0ee508aa7955\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22147_none_0e6e0ee508aa7955: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16866_none_0a021fcdf5502e31\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16866_none_0a021fcdf5502e31: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21062_none_0a8793930e719be1\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21062_none_0a8793930e719be1: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18267_none_0be95ebdf275d879\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18267_none_0be95ebdf275d879: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22444_none_0c859c690b85f183\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22444_none_0c859c690b85f183: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18046_none_0de47219ef8cd98b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18046_none_0de47219ef8cd98b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22147_none_0e6f0f2f08a992ac\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22147_none_0e6f0f2f08a992ac: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16866_none_0a032017f54f4788\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16866_none_0a032017f54f4788: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21062_none_0a8893dd0e70b538\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21062_none_0a8893dd0e70b538: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18267_none_0bea5f07f274f1d0\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18267_none_0bea5f07f274f1d0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22444_none_0c869cb30b850ada\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22444_none_0c869cb30b850ada: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18046_none_0de57263ef8bf2e2\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18046_none_0de57263ef8bf2e2: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22147_none_0e700f7908a8ac03\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22147_none_0e700f7908a8ac03: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16866_none_0a042061f54e60df\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16866_none_0a042061f54e60df: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21062_none_0a8994270e6fce8f\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21062_none_0a8994270e6fce8f: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18267_none_0beb5f51f2740b27\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18267_none_0beb5f51f2740b27: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22444_none_0c879cfd0b842431\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22444_none_0c879cfd0b842431: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18046_none_0de672adef8b0c39\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18046_none_0de672adef8b0c39: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22147_none_0e710fc308a7c55a\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22147_none_0e710fc308a7c55a: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16866_none_0a0520abf54d7a36\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16866_none_0a0520abf54d7a36: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21062_none_0a8a94710e6ee7e6\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21062_none_0a8a94710e6ee7e6: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18267_none_0bec5f9bf273247e\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18267_none_0bec5f9bf273247e: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22444_none_0c889d470b833d88\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22444_none_0c889d470b833d88: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18046_none_0de772f7ef8a2590\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18046_none_0de772f7ef8a2590: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22147_none_0e72100d08a6deb1\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22147_none_0e72100d08a6deb1: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866: 3
Could not open reparse point C:\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187: 3
Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl

Attempting to restore permissions of : C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl

Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl

Attempting to restore permissions of : C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl

Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl

Attempting to restore permissions of : C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl

Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl

Attempting to restore permissions of : C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl

Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl

Attempting to restore permissions of : C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl

Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl

Attempting to restore permissions of : C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl

Cannot access: C:\Windows\System32\mrt.exe

Attempting to restore permissions of : C:\Windows\System32\mrt.exe



Finished!


Malwarebytes' Anti-Malware 1.41
Database version: 2870
Windows 6.0.6002 Service Pack 2

9/29/2009 12:57:28 AM
mbam-log-2009-09-29 (00-57-28).txt

Scan type: Quick Scan
Objects scanned: 83506
Time elapsed: 2 minute(s), 59 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#13 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,688 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:01:51 AM

Posted 29 September 2009 - 02:13 AM

The win32kdiag look the way I expected and it is a good log.

It surprises me MBAM shows a clean log. Did you run it twice or this is the first log since you are able to run it again?

Now please follow the earlier post on ComboFix. It should update to the latest version automatically and should run this time to produce a log.

#14 535cheetah

535cheetah
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:51 PM

Posted 29 September 2009 - 02:02 PM

cool, glad that is clear, no as i had said in a earlier post. heres what i did... i posted for help in hereabout a month ago or so, and i didnt get a response for quite some time (since it was my first time on this site) i thought maybe i got overlooked or something of that nature. (i now understand you guys have your handsfull helpin us out) so i read up on things and tried running combofix which didnt work, i then changed the name of combofix and turned off my firewalls and antivirus off and it worked. once it worked that time, i noticed immediately pretty much everything was back to normal, so then i ran mbam total search and that got rid of the rest of the garbage. i then turned off restore points and restarted computer and then turned restore points back on. (so every day since then i run mbam every day almost just to make sure.) then a week or 2 passes and you respond to my post here. i now just wanted to make sure everything is all clean and if there is any more steps i should take, and like deleting all the programs i downloaded or??

here is the new comfix log

ComboFix 09-09-28.01 - rick 09/29/2009 14:36.5.2 - NTFSx86
Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1252.1.1033.18.3326.2213 [GMT -4:00]
Running from: c:\users\rick\Desktop\fun.cmd.exe
.

((((((((((((((((((((((((( Files Created from 2009-08-28 to 2009-09-29 )))))))))))))))))))))))))))))))
.

2009-09-29 18:39 . 2009-09-29 18:39 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-09-29 18:39 . 2009-09-29 18:39 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-26 00:29 . 2009-09-26 00:29 -------- d-----w- C:\fun.cmd
2009-09-23 16:21 . 2009-09-23 16:21 -------- d-----w- c:\users\rick\AppData\Local\capcom
2009-09-20 21:24 . 2009-06-10 11:41 2868224 ----a-w- c:\windows\system32\mf.dll
2009-09-20 18:53 . 2009-09-20 18:54 -------- d-----w- c:\windows\system32\ca-ES
2009-09-20 18:53 . 2009-09-20 18:54 -------- d-----w- c:\windows\system32\eu-ES
2009-09-20 18:53 . 2009-09-20 18:54 -------- d-----w- c:\windows\system32\vi-VN
2009-09-20 18:38 . 2009-09-20 18:38 -------- d-----w- c:\windows\system32\EventProviders
2009-09-17 01:45 . 2009-04-11 06:28 729600 ----a-w- c:\windows\system32\IMJP10K.DLL
2009-09-17 01:44 . 2009-04-11 06:28 1856512 ----a-w- c:\windows\system32\dbgeng.dll
2009-09-17 01:43 . 2009-04-11 06:28 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-09-17 01:42 . 2009-04-11 06:28 83968 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2009-09-17 01:42 . 2009-04-11 06:28 744448 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2009-09-17 01:42 . 2009-04-11 06:28 30208 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2009-09-17 01:42 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2009-09-17 01:42 . 2009-04-11 06:28 189440 ----a-w- c:\windows\system32\wbem\mofd.dll
2009-09-17 01:42 . 2009-04-11 06:28 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-09-17 01:42 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\esscli.dll
2009-09-17 01:42 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-09-17 01:42 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-09-17 01:42 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-09-17 01:42 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-09-12 19:32 . 2005-08-25 23:18 118784 ----a-w- c:\windows\system32\MSSTDFMT.DLL
2009-09-12 19:32 . 2009-09-12 19:32 -------- d-----w- c:\program files\SpywareBlaster
2009-09-12 19:21 . 2009-09-12 19:23 -------- d-----w- c:\users\rick\.SunDownloadManager
2009-09-12 07:50 . 2009-09-10 18:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-12 07:50 . 2009-09-12 07:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-12 07:50 . 2009-09-10 18:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-12 07:23 . 2009-09-29 18:40 -------- d-----w- c:\users\rick\AppData\Local\temp
2009-09-11 16:35 . 2009-09-11 16:35 -------- d-----w- c:\program files\BitLocker
2009-09-11 01:11 . 2009-09-12 05:58 -------- d-----w- c:\users\rick\AppData\Local\temp(167)
2009-09-03 08:54 . 2009-09-03 09:08 -------- d-----w- C:\run.cmd
2009-09-03 08:37 . 2009-09-03 08:48 -------- d-----w- C:\runner.cmd
2009-09-03 05:08 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-09-03 05:08 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-03 05:06 . 2009-09-03 05:08 15 ----a-w- c:\users\rick\settings.dat
2009-09-02 05:25 . 2009-09-03 08:37 -------- d-----w- C:\ComboFix
2009-09-02 05:23 . 2009-09-02 05:23 -------- d-----w- c:\users\rick\AppData\Roaming\Malwarebytes
2009-09-02 05:23 . 2009-09-12 07:44 -------- d-----w- c:\program files\malwarebytes
2009-09-02 05:23 . 2009-09-02 05:23 -------- d-----w- c:\programdata\Malwarebytes
2009-09-02 05:03 . 2009-09-02 05:03 -------- d-----w- c:\program files\Sophos
2009-08-31 16:56 . 2009-08-31 16:56 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-08-31 16:56 . 2009-08-31 16:56 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-08-31 16:56 . 2009-08-31 16:56 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-08-31 16:56 . 2009-08-31 16:56 -------- d-----w- c:\windows\system32\drivers\Avg
2009-08-31 16:56 . 2009-09-12 06:18 -------- d-----w- c:\program files\AVG
2009-08-31 16:56 . 2009-08-31 17:51 -------- d-----w- c:\programdata\avg8
2009-08-31 16:49 . 2009-08-31 16:49 -------- d-----w- c:\users\rick\AppData\Roaming\AVG8

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-29 16:58 . 2008-02-10 18:34 -------- d-----w- c:\program files\Steam
2009-09-29 16:58 . 2009-08-21 17:18 32784 ----a-w- c:\programdata\nvModes.dat
2009-09-29 16:22 . 2008-02-10 18:17 -------- d-----w- c:\programdata\NVIDIA
2009-09-26 00:12 . 2008-02-10 18:17 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-24 17:07 . 2008-07-16 20:04 -------- d-----w- c:\program files\Java
2009-09-23 04:40 . 2008-02-23 23:37 -------- d-----w- c:\programdata\Media Center Programs
2009-09-22 16:25 . 2008-02-10 18:34 -------- d-----w- c:\program files\Common Files\Steam
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Calendar
2009-09-20 18:54 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Sidebar
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Journal
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Collaboration
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Photo Gallery
2009-09-20 18:54 . 2006-11-02 12:35 -------- d-----w- c:\program files\Windows Defender
2009-09-20 18:52 . 2008-02-10 19:11 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2009-09-20 18:52 . 2008-02-10 19:11 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2009-09-20 18:51 . 2009-09-20 18:51 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2009-09-18 03:52 . 2008-02-14 03:29 -------- d-----w- c:\users\rick\AppData\Roaming\mIRC
2009-09-12 06:18 . 2008-03-10 02:44 -------- d-----w- c:\program files\CEVO
2009-09-11 16:35 . 2006-11-02 12:35 -------- d-----w- c:\program files\Microsoft Games
2009-09-01 19:11 . 2009-06-24 23:06 -------- d-----w- c:\programdata\Lavasoft
2009-09-01 07:13 . 2008-11-20 20:08 -------- d-----w- c:\users\rick\AppData\Roaming\uTorrent
2009-08-21 08:54 . 2009-08-21 08:54 -------- d-----w- c:\program files\NVIDIA Corporation
2009-08-21 08:54 . 2008-02-10 19:42 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-08-21 08:54 . 2008-11-16 18:40 -------- d-----w- c:\program files\AGEIA Technologies
2009-08-20 20:55 . 2009-08-20 20:55 -------- d-----w- c:\program files\Lavalys
2009-08-17 15:44 . 2008-02-10 19:11 -------- d-----w- c:\program files\OpenAL
2009-08-17 15:43 . 2009-08-17 15:43 -------- d-----w- c:\program files\Common Files\Futuremark Shared
2009-08-17 15:43 . 2009-08-17 15:43 -------- d-----w- c:\program files\Futuremark
2009-08-14 10:58 . 2009-09-01 06:06 7396 ----a-w- c:\windows\system32\drivers\pctcore.cat
2009-08-09 04:35 . 2008-02-18 06:28 -------- d-----w- c:\users\rick\AppData\Roaming\Bioshock
2009-07-25 09:23 . 2009-05-31 18:17 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-18 16:01 . 2009-07-28 17:30 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-07-18 11:35 . 2009-07-28 17:30 828416 ----a-w- c:\windows\system32\wininet.dll
2009-07-17 13:54 . 2009-08-13 00:08 71680 ----a-w- c:\windows\system32\atl.dll
2009-07-15 12:40 . 2009-08-13 00:07 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-07-15 12:39 . 2009-08-13 00:07 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-15 12:39 . 2009-08-13 00:07 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-07-15 12:39 . 2009-08-13 00:07 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-07-14 18:54 . 2009-08-21 08:52 485920 ----a-w- c:\windows\system32\nvudisp.exe
2009-07-14 18:54 . 2009-08-21 08:52 9557216 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2009-07-14 18:54 . 2009-08-21 08:52 3287040 ----a-w- c:\windows\system32\nvwgf2um.dll
2009-07-14 18:54 . 2009-08-21 08:52 10854400 ----a-w- c:\windows\system32\nvoglv32.dll
2009-07-14 18:54 . 2009-08-21 08:52 2169376 ----a-w- c:\windows\system32\nvcuvid.dll
2009-07-14 18:54 . 2009-08-21 08:52 1983488 ----a-w- c:\windows\system32\nvcuda.dll
2009-07-14 18:54 . 2009-08-21 08:52 1706528 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-07-14 18:54 . 2009-08-21 08:52 151552 ----a-w- c:\windows\system32\nvcod157.dll
2009-07-14 18:54 . 2009-08-21 08:52 151552 ----a-w- c:\windows\system32\nvcod.dll
2009-07-14 18:54 . 2007-12-11 22:06 7565824 ----a-w- c:\windows\system32\nvd3dum.dll
2009-07-14 18:54 . 2007-12-11 22:06 1044992 ----a-w- c:\windows\system32\nvapi.dll
2009-07-10 11:01 . 2008-02-10 18:01 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2008-01-08 22:31 . 2006-11-22 14:58 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((( SnapShot_2009-09-26_00.36.12 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-02-10 18:21 . 2009-09-25 16:31 45506 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-02-10 18:21 . 2009-09-29 17:00 45506 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:03 . 2009-09-29 17:00 77202 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-02-10 18:00 . 2009-09-25 16:31 10936 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2098475800-2551884061-2043411270-1000_UserData.bin
+ 2008-02-10 18:00 . 2009-09-29 17:00 10936 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2098475800-2551884061-2043411270-1000_UserData.bin
+ 2006-11-02 13:00 . 2009-09-29 18:34 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2006-11-02 13:00 . 2009-09-26 00:28 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2006-11-02 13:00 . 2009-09-29 18:34 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2006-11-02 13:00 . 2009-09-26 00:28 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2006-11-02 13:00 . 2009-09-29 18:34 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2006-11-02 13:00 . 2009-09-26 00:28 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-09-29 16:22 . 2009-09-29 16:22 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-09-25 16:28 . 2009-09-25 16:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-09-25 16:28 . 2009-09-25 16:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-09-29 16:22 . 2009-09-29 16:22 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2006-11-02 10:33 . 2009-09-29 16:28 595446 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-09-25 16:35 595446 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-09-25 16:35 101144 c:\windows\System32\perfc009.dat
+ 2006-11-02 10:33 . 2009-09-29 16:28 101144 c:\windows\System32\perfc009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"Steam"="c:\program files\steam\steam.exe" [2009-09-22 1217784]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"igndlm.exe"="c:\program files\Download Manager\DLM.exe" [2008-08-01 1103216]
"RGSC"="c:\users\rick\Desktop\gta\Rockstar Games Social Club\RGSCLauncher.exe" [BU]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [BU]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"Ai Nap"="c:\program files\ASUS\Ai Suite\AiNap\AiNap.exe" [2007-09-06 1426432]
"CPU Power Monitor"="c:\program files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe" [2007-09-07 626688]
"Cpu Level Up help"="c:\program files\ASUS\Ai Suite\CpuLevelUpHelp.exe" [2007-09-11 880640]
"UpdReg"="*DISABLED*c:\windows\UpdReg.EXE" [BU]
"Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2007-12-13 2051096]
"Copperhead"="c:\program files\Razer\Copperhead\razerhid.exe" [2005-11-25 155648]
"Lachesis"="c:\program files\Razer\Lachesis\razerhid.exe" [2007-09-12 172032]
"QuickTime Task"="*DISABLED*c:\program files\QuickTime\QTTask.exe" [BU]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [BU]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"CTHelper"="CTHELPER.EXE" - c:\windows\System32\CTHELPER.EXE [2007-10-25 19456]
"CTxfiHlp"="CTXFIHLP.EXE" - c:\windows\System32\CTXFIHLP.EXE [2007-10-25 19968]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DevconDefaultDB"="c:\windows\system32\READREG" [X]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(:(:9f,b3,04,a4,24,3a,ca,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
"DoNotAllowExceptions"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"TCP Query User{1A1866A5-5D10-44E9-A410-F15D9BE95E33}c:\\program files\\steam\\steamapps\\beer6944\\counter-strike source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\counter-strike source\hl2.exe:hl2
"UDP Query User{2472ADB1-AB49-4006-A8C8-D1B15A83E6C7}c:\\program files\\steam\\steamapps\\beer6944\\counter-strike source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\counter-strike source\hl2.exe:hl2
"TCP Query User{B18F51B3-7990-4E2D-B452-768EFB3E6F1E}c:\\program files\\mirc\\mirc.exe"= UDP:c:\program files\mirc\mirc.exe:mIRC
"UDP Query User{FA698760-667B-43EC-92E5-00B1736817BE}c:\\program files\\mirc\\mirc.exe"= TCP:c:\program files\mirc\mirc.exe:mIRC
"TCP Query User{DDE82C7F-614D-4B8F-9502-8AE94CBAB72C}c:\\program files\\xfire\\xfire.exe"= UDP:c:\program files\xfire\xfire.exe:Xfire
"UDP Query User{571C240A-3082-4C3F-81C6-3F05BF75C857}c:\\program files\\xfire\\xfire.exe"= TCP:c:\program files\xfire\xfire.exe:Xfire
"TCP Query User{5AFCA678-CD3A-4BF1-BF01-C2E5FCA5F45D}c:\\program files\\steam\\steamapps\\wgn_logic\\team fortress 2\\hl2.exe"= UDP:c:\program files\steam\steamapps\wgn_logic\team fortress 2\hl2.exe:hl2
"UDP Query User{0EF1E10A-207D-470B-A650-E2E30232C835}c:\\program files\\steam\\steamapps\\wgn_logic\\team fortress 2\\hl2.exe"= TCP:c:\program files\steam\steamapps\wgn_logic\team fortress 2\hl2.exe:hl2
"{6BAEF226-8E70-42AF-BF14-665E1FBBDB88}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{7094AACA-F236-4CF9-B8FF-4DC208B1AAD1}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{6DC30ED9-AA02-4E83-8A25-62142CF22D32}"= UDP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"{6B09347C-9007-4D23-926B-89DCBB40E41E}"= TCP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"TCP Query User{BDB3816A-0BF2-46B4-AA4C-56906DE06BBA}c:\\program files\\steam\\steamapps\\keffa6969\\counter-strike source\\hl2.exe"= UDP:c:\program files\steam\steamapps\keffa6969\counter-strike source\hl2.exe:hl2
"UDP Query User{F09A4D52-7836-4F85-A59A-A54BFB99153C}c:\\program files\\steam\\steamapps\\keffa6969\\counter-strike source\\hl2.exe"= TCP:c:\program files\steam\steamapps\keffa6969\counter-strike source\hl2.exe:hl2
"TCP Query User{97DE735D-7D18-4C79-8A4A-4A3FEC1660E2}c:\\program files\\steam\\steamapps\\beer6944\\counter-strike source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\counter-strike source\hl2.exe:hl2
"UDP Query User{F68ECCB4-B628-4B34-A792-8B08FAAA8CED}c:\\program files\\steam\\steamapps\\beer6944\\counter-strike source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\counter-strike source\hl2.exe:hl2
"TCP Query User{9BB7F841-FDA6-4DF6-BA11-7C88C4FDE404}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= UDP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"UDP Query User{EAFC4754-FAF0-406C-8FB7-FAD0C72238E4}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= TCP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"TCP Query User{60A4BF3C-742C-442D-A1EC-4C57D90915A3}c:\\program files\\steam\\steamapps\\keffa6969\\counter-strike source\\hl2.exe"= UDP:c:\program files\steam\steamapps\keffa6969\counter-strike source\hl2.exe:hl2
"UDP Query User{9DB0DE72-9EA7-4228-B5B8-824F2E3DD0EC}c:\\program files\\steam\\steamapps\\keffa6969\\counter-strike source\\hl2.exe"= TCP:c:\program files\steam\steamapps\keffa6969\counter-strike source\hl2.exe:hl2
"TCP Query User{1B3D76C0-3C43-4151-AA37-75C1B7ED9755}c:\\program files\\steam\\steamapps\\beer6944\\day of defeat source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\day of defeat source\hl2.exe:hl2
"UDP Query User{9D6EEED7-56EB-4B5B-887D-F68E1CF2C60F}c:\\program files\\steam\\steamapps\\beer6944\\day of defeat source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\day of defeat source\hl2.exe:hl2
"TCP Query User{F265F718-39D8-44FF-B557-DC96CFE1F544}c:\\program files\\xfire\\xfire.exe"= UDP:c:\program files\xfire\xfire.exe:Xfire
"UDP Query User{54A2946D-7D4E-42D7-B519-AC33F3B37496}c:\\program files\\xfire\\xfire.exe"= TCP:c:\program files\xfire\xfire.exe:Xfire
"TCP Query User{4A414638-C7F0-49DD-ABA3-B5992254509C}c:\\program files\\steam\\steamapps\\beer6944\\zombie panic! source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\zombie panic! source\hl2.exe:hl2
"UDP Query User{F9601520-C441-4F96-953F-8C0A207BD703}c:\\program files\\steam\\steamapps\\beer6944\\zombie panic! source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\zombie panic! source\hl2.exe:hl2
"TCP Query User{6A19D6FE-2ECB-471D-9327-D6CEC9CDD427}c:\\program files\\steam\\steamapps\\beer6944\\synergy\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\synergy\hl2.exe:hl2
"UDP Query User{AFFFCF0A-ADD8-4697-8EF0-833CC21A9E9E}c:\\program files\\steam\\steamapps\\beer6944\\synergy\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\synergy\hl2.exe:hl2
"TCP Query User{2F84B801-136F-4247-BE71-20D358BC95C7}c:\\program files\\steam\\steamapps\\common\\left 4 dead demo\\left4dead.exe"= UDP:c:\program files\steam\steamapps\common\left 4 dead demo\left4dead.exe:left4dead
"UDP Query User{694849DD-FF1D-4BD4-BE77-4B6EA3649501}c:\\program files\\steam\\steamapps\\common\\left 4 dead demo\\left4dead.exe"= TCP:c:\program files\steam\steamapps\common\left 4 dead demo\left4dead.exe:left4dead
"TCP Query User{F5225791-33D3-4F19-8978-5BF469058602}c:\\program files\\utorrent\\utorrent.exe"= UDP:c:\program files\utorrent\utorrent.exe:µTorrent
"UDP Query User{B73AAC32-FF50-434F-8BD8-05543D1A16E8}c:\\program files\\utorrent\\utorrent.exe"= TCP:c:\program files\utorrent\utorrent.exe:µTorrent
"TCP Query User{ADF4BDA0-AFDE-47A0-AD99-00533DB5ABC9}c:\\program files\\steam\\steamapps\\beer6944\\zombie panic! source\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\zombie panic! source\hl2.exe:hl2
"UDP Query User{0B1D20BB-E96B-40A4-8137-1CC6B3CB7E75}c:\\program files\\steam\\steamapps\\beer6944\\zombie panic! source\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\zombie panic! source\hl2.exe:hl2
"TCP Query User{6911970D-DEFB-47A5-90FC-F6597E185C32}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{C9D81B38-C0A7-4BD9-8FE6-BCBBEF354B2F}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"TCP Query User{258B4A06-C623-4590-A021-54758C1DA6AD}c:\\program files\\steam\\steamapps\\beer6944\\team fortress 2\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\team fortress 2\hl2.exe:hl2
"UDP Query User{FF725108-0016-44AF-8001-DE9C0CFBFD6B}c:\\program files\\steam\\steamapps\\beer6944\\team fortress 2\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\team fortress 2\hl2.exe:hl2
"{62F3D7C1-2DEF-4B23-99BA-808637727D05}"= UDP:c:\program files\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe:Unreal Tournament 3
"{082902BC-8543-4C17-BCC4-4069C0EF6DEB}"= TCP:c:\program files\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe:Unreal Tournament 3
"{0AD5B557-6AE2-4831-BE28-CF97137EF8E7}"= UDP:c:\users\rick\Desktop\gta\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club
"{8771E738-446E-4191-936E-65162B06B887}"= TCP:c:\users\rick\Desktop\gta\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club
"{9AABC9F3-9449-4D0F-BE92-AC12101DA063}"= UDP:c:\program files\Activision\Prototype\prototypef.exe:Prototype™
"{071E8B89-53ED-4305-8539-D789BF3D5B0D}"= TCP:c:\program files\Activision\Prototype\prototypef.exe:Prototype™
"{246B38A8-3A4C-4880-B4A5-5A9A68FAD891}"= UDP:990:LocalSubnet:LocalSubnet|IF={550DA66F-FA9F-4C3D-BC67-F222BD49967A}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdSync.exe,-4001
"{F85ED51D-5780-4FFF-914A-764C0AFEA6FA}"= Disabled:c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
"{3DF8514E-3947-4E54-AC41-299ACF6FF61F}"= Disabled:c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
"{44B28176-0AED-4A0A-8799-84182D6E06EF}"= Disabled:c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe
"TCP Query User{B755F282-015B-42B0-AB31-25A22256B62A}c:\\program files\\azureus\\azureus.exe"= Disabled:UDP:c:\program files\azureus\azureus.exe:Azureus
"UDP Query User{B7CC7276-878C-4CAD-B79A-58E0C166B0FA}c:\\program files\\azureus\\azureus.exe"= Disabled:TCP:c:\program files\azureus\azureus.exe:Azureus
"{E2D721F0-6CB3-44F5-BC51-72185E3CAE7E}"= UDP:c:\program files\Steam\steamapps\common\left 4 dead\left4dead.exe:Left 4 Dead
"{8C3EF3B5-0A89-4EB4-AA9B-4D8E12632415}"= TCP:c:\program files\Steam\steamapps\common\left 4 dead\left4dead.exe:Left 4 Dead
"{8E962DC3-46B0-4FE9-AACE-888444DD4717}"= UDP:990:LocalSubnet:LocalSubnet|IF={550DA66F-FA9F-4C3D-BC67-F222BD49967A}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdSync.exe,-4001
"TCP Query User{51BF5114-BB1A-4EEF-995D-E243D39CBB11}c:\\program files\\steam\\steamapps\\beer6944\\eternal-silence\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\eternal-silence\hl2.exe:hl2
"UDP Query User{1A2A264F-2281-4166-8893-A15958E9C5A2}c:\\program files\\steam\\steamapps\\beer6944\\eternal-silence\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\eternal-silence\hl2.exe:hl2
"TCP Query User{A8EF1EE5-8C2E-4352-890A-CAB157B6843D}c:\\program files\\steam\\steamapps\\beer6944\\synergy\\hl2.exe"= UDP:c:\program files\steam\steamapps\beer6944\synergy\hl2.exe:hl2
"UDP Query User{C9555551-2CA0-44B3-BBC0-CABDC7B13694}c:\\program files\\steam\\steamapps\\beer6944\\synergy\\hl2.exe"= TCP:c:\program files\steam\steamapps\beer6944\synergy\hl2.exe:hl2
"{B07DB004-E9B8-4CDF-A8BF-AF4A496A17CA}"= UDP:c:\program files\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe:Lost Planet: Extreme Condition
"{BB9C6961-0123-473D-980B-761D9B953DB8}"= TCP:c:\program files\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe:Lost Planet: Extreme Condition
"{AE0D745E-95F6-42A4-9FA6-D2F3DF0ECC62}"= UDP:c:\program files\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe:Lost Planet: Extreme Condition
"{B0C55180-CC37-4B85-A299-6FF7BF92AB2D}"= TCP:c:\program files\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe:Lost Planet: Extreme Condition

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
"DoNotAllowExceptions"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
"DoNotAllowExceptions"= 0 (0x0)

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [8/31/2009 12:56 PM 335240]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [8/31/2009 12:56 PM 108552]
R1 ehdrv;ehdrv;c:\windows\System32\drivers\ehdrv.sys [5/14/2009 3:47 PM 107256]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [5/14/2009 3:47 PM 731840]
R2 epfwwfpr;epfwwfpr;c:\windows\System32\drivers\epfwwfpr.sys [5/14/2009 3:49 PM 93312]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [7/14/2009 12:28 PM 239648]
R3 LachesisFltr;Lachesis Mouse Driver;c:\windows\System32\drivers\Lachesis.sys [11/28/2008 12:52 PM 12032]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\Lavasoft\Ad-Aware\AAWService.exe" --> c:\program files\Lavasoft\Ad-Aware\AAWService.exe [?]
S3 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe --> c:\progra~1\AVG\AVG8\avgemc.exe [?]
S3 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [8/31/2009 12:56 PM 297752]
S3 Creative ALchemy AL1 Licensing Service;Creative ALchemy AL1 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL1Licensing.exe [2/10/2008 3:30 PM 79360]
S3 UsbFltr;Razer Copperhead Driver;c:\windows\System32\drivers\copperhd.sys [11/2/2005 11:54 AM 11596]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
.
------- Supplementary Scan -------
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: {5B5F9EAA-5125-4540-B1FD-D0FBE62197D7} = 192.168.0.1
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-29 14:40
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTHelper = CTHELPER.EXE?
CTxfiHlp = CTXFIHLP.EXE?

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\B950.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-2098475800-2551884061-2043411270-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:a2,bb,a6,59,a9,46,a1,af,5c,e4,5b,4f,da,5d,b5,5f,3e,16,21,25,10,1b,13,
10,a0,a7,13,59,b3,f7,ef,b6,90,e6,db,31,55,23,5e,cc,1b,7c,4c,e7,1e,a1,2a,bd,\
"??"=hex:cf,55,c7,95,2b,14,4d,f8,66,7b,0c,1b,19,52,fe,22

[HKEY_USERS\S-1-5-21-2098475800-2551884061-2043411270-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:d6,17,2c,18,50,90,ca,97,cc,7b,bc,d8,60,81,12,6f,14,b5,bc,c6,ca,
d3,8a,f9,1f,f1,ae,b0,36,b5,dd,18,7a,a6,47,ba,fb,16,b1,56,f9,cc,5e,b3,7e,27,\
"rkeysecu"=hex:0c,d7,60,f9,bf,2b,5d,51,0c,88,b6,35,cf,2e,3c,86

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Completion time: 2009-09-29 14:41
ComboFix-quarantined-files.txt 2009-09-29 18:41
ComboFix2.txt 2009-09-26 00:37
ComboFix3.txt 2009-09-12 07:29
ComboFix4.txt 2009-09-11 01:11

Pre-Run: 123,714,920,448 bytes free
Post-Run: 123,687,084,032 bytes free

322 --- E O F --- 2009-09-29 07:00

#15 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,688 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:01:51 AM

Posted 29 September 2009 - 03:27 PM

Everything looks good. :(

Go to Start => Run => copy and paste next command in the field then hit enter:

"%userprofile%\desktop\fun.cmd.exe /u

This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the system/hidden files and resets System Restore again.

It makes a clean Restore Point and clears all the old restore points in order to prevent possible reinfection from an old one through system restore.

Remove also any tools we used.

Please consult this article by Miekiemoes on How To Prevent Malware.

Happy computing!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users