|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Resolved HJT Threads Resolved spyware and popup issues. |
|
|
LinkBack | Thread Tools |
09-04-2009, 02:12 PM
|
#1 (permalink) | |
|
Registered User
Join Date: Nov 2007
Posts: 27
OS: Windows Vista
|
Monopod, b.exe, msa.exe Virus problems
Hello,
My first post was closed due to me not having logs.... I'll try to explain again including hopefully enough information that you require. -------------- I seem to have a virus on my computer that's not letting me open any Virus/Malware/Spyware Scanner Programs. I think I know how I got the virus (downloaded a dodgy file) and I have removed the file accordingly. I managed to locate a Monopod entry in my msconfig and located where the startup entry pointed to (b.exe) and deleted it and switched off the startup entry. I also had another entry named msa.exe which I found and deleted as well. I thought that would be the end of it but it seems I may have another virus or have some aftereffects of the above viruses which I believe I removed... Any time I try to open and run a Virus/Malware/Spyware scanner. The program closes. If I try to open it again, I get the following error: Quote:
MalwareBytes' Anti-Malware GMER AVG Anti-Virus Spybot Search and Destroy Lavasoft Ad-Aware SuperAntiSpyware HiJackThis I have looked at your guide and followed all of the steps from the post. However, when it comes to running GMER and DDS, please read below as to what happens: I have attempted to run GMER, but as explained before, I am unable to get any logs from it as it closes down half way through and when I try to open it again...I get the above quoted error message. I have also attempted to run DDS. However all that happens is a quick flash of a command prompt box. (As in it opens and closes instantly) So at this point in time, I am unable to get you any logs because the virus is not letting the programs finish their jobs. Without these logs, does this mean that I will not be able to receive any help from you? Right now, I am at a loss as to what to do next and would be very greatful for any advice. Many thanks Roz |
|
|
     |
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
09-06-2009, 01:09 PM
|
#2 (permalink) |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
By now you realize the costs of downloading and executing files from suspect sources. I'll try to help you clean the machine, but sometimes such infections require a reinstall.
I need more information, such as the OS of the machine. Also, run this tool.... Please save this file to your desktop. Double-click on it to run a scan. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please post the contents here.
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you.  Microsoft MVP - Consumer Security 2009
|
|
|
|
|
09-06-2009, 01:39 PM
|
#3 (permalink) |
|
Registered User
Join Date: Nov 2007
Posts: 27
OS: Windows Vista
|
Re: Monopod, b.exe, msa.exe Virus problems
I'm running on Windows Vista Home Premium.
Anything else you would like to know? Here's the log I've got from Win32kDiag.txt: Log file is located at: C:\Users\Rory\Desktop\Win32kDiag.txt WARNING: Could not get backup privileges! Searching 'C:\Windows'... Found mount point : C:\Windows\AppPatch\Custom\Custom Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\GAC_32\Microsoft.Web.Administration-NonMSIL\6.0.6000.16386__31bf3856ad364e35\6.0.6000.16386__31bf3856ad364e35 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\GAC_32\Microsoft.Web.Management-NonMSIL\6.0.6000.16386__31bf3856ad364e35\6.0.6000.16386__31bf3856ad364e35 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\GAC_32\Microsoft.Web.Management.Aspnet-NonMSIL\6.0.6000.16386__31bf3856ad364e35\6.0.6000.16386__31bf3856ad364e35 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\GAC_32\Microsoft.Web.Management.AspnetClient-NonMSIL\6.0.6000.16386__31bf3856ad364e35\6.0.6000.16386__31bf3856ad364e35 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\GAC_32\Microsoft.Web.Management.Iis-NonMSIL\6.0.6000.16386__31bf3856ad364e35\6.0.6000.16386__31bf3856ad364e35 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\GAC_32\Microsoft.Web.Management.IisClient-NonMSIL\6.0.6000.16386__31bf3856ad364e35\6.0.6000.16386__31bf3856ad364e35 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp\ZAP2DF2.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp\ZAP81A.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP87A6.tmp\ZAP87A6.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA40C.tmp\ZAPA40C.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp\ZAPE752.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp\ZAPEEF0.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\temp\temp Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\assembly\tmp\tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ehome\CreateDisc\style\style Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ERDNT\Hiv-backup\Hiv-backup Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ftpcache\ftpcache Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Help\Corporate\Corporate Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Help\OEM\OEM Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\LiveKernelReports\LiveKernelReports Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Microsoft.NET\authman\authman Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Minidump\Minidump Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ModemLogs\ModemLogs Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\nap\configuration\configuration Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Panther\setup.exe\setup.exe Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\PCHEALTH\ERRORREP\QHEADLES\QHEADLES Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\PCHEALTH\ERRORREP\QSIGNOFF\QSIGNOFF Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\PIF\PIF Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\PLA\Templates\Templates Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\RegisteredPackages\{3695EB93-6443-448D-8E2E-1F6F4FC79BC1}\{3695EB93-6443-448D-8E2E-1F6F4FC79BC1} Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\RegisteredPackages\{89FDAB62-6F46-4C7E-A559-E00B9A0BACB6}\{89FDAB62-6F46-4C7E-A559-E00B9A0BACB6} Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\registration\CRMLog\CRMLog Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SchCache\SchCache Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\security\templates\templates Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\GameExplorer\GameExplorer Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Local\PnrpSqm\PnrpSqm Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStore\Tfs_DAV\Tfs_DAV Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Media Center Programs\Media Center Programs Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\Description Documents\Description Documents Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Recent\Recent Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\Templates Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Xfire\Xfire Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Desktop\Desktop Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Documents\Documents Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Downloads\Downloads Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Favorites\Favorites Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Links\Links Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Music\Music Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Pictures\Pictures Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Saved Games\Saved Games Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\LocalService\Videos\Videos Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\GameExplorer\GameExplorer Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\SCPD\SCPD Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Media Center Programs\Media Center Programs Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\v2.0.50727.312 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Recent\Recent Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\Templates Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Desktop\Desktop Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Documents\Documents Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Downloads\Downloads Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Favorites\Favorites Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Links\Links Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Music\Music Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Pictures\Pictures Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Saved Games\Saved Games Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\ServiceProfiles\NetworkService\Videos\Videos Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\AuthCabs\Downloaded\Downloaded Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\13755cf9c739e910701d7785283a9dae\13755cf9c739e910701d7785283a9dae Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-a..premiumed.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ad35f16aae295d02\x86_microsoft-windows-a..premiumed.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ad35f16aae295d02: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-artuical.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99fb0e2829483a36\x86_microsoft-windows-h..-artuical.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99fb0e2829483a36: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-bckupbas.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2d3fbcc4aaf3be34\x86_microsoft-windows-h..-bckupbas.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2d3fbcc4aaf3be34: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-blutooth.resources_31bf3856ad364e35_6.0.6001.18000_en-us_919613b50694961c\x86_microsoft-windows-h..-blutooth.resources_31bf3856ad364e35_6.0.6001.18000_en-us_919613b50694961c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-escalate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a7b046f4aa9d89\x86_microsoft-windows-h..-escalate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_22a7b046f4aa9d89: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-firewall.resources_31bf3856ad364e35_6.0.6001.18000_en-us_268b1c2d9b7c664b\x86_microsoft-windows-h..-firewall.resources_31bf3856ad364e35_6.0.6001.18000_en-us_268b1c2d9b7c664b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.0.6001.18000_en-us_01aa8bc9d3953d56\x86_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.0.6001.18000_en-us_01aa8bc9d3953d56: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-iisbasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7001e8f963459e76\x86_microsoft-windows-h..-iisbasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7001e8f963459e76: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-medexppr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d9dc804dccbc12a6\x86_microsoft-windows-h..-medexppr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d9dc804dccbc12a6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-medexptv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_85c8d98e01d5a486\x86_microsoft-windows-h..-medexptv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_85c8d98e01d5a486: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-multboot.resources_31bf3856ad364e35_6.0.6001.18000_en-us_89d39ff45ffe9ef5\x86_microsoft-windows-h..-multboot.resources_31bf3856ad364e35_6.0.6001.18000_en-us_89d39ff45ffe9ef5: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-safemodc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4d5f6440e35a68a9\x86_microsoft-windows-h..-safemodc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4d5f6440e35a68a9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..-winmeetb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bcc802fea2e6f0e\x86_microsoft-windows-h..-winmeetb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bcc802fea2e6f0e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-h..meupgrade.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e095aea5e1a18138\x86_microsoft-windows-h..meupgrade.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e095aea5e1a18138: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-access.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ac2450cda9380fc5\x86_microsoft-windows-help-access.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ac2450cda9380fc5: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-activ.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce6dc4eb70cfef16\x86_microsoft-windows-help-activ.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce6dc4eb70cfef16: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-acw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e6a6078590ce8804\x86_microsoft-windows-help-acw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e6a6078590ce8804: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-app3rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5629afc218cd4909\x86_microsoft-windows-help-app3rd.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5629afc218cd4909: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-appman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_edad3325b8809032\x86_microsoft-windows-help-appman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_edad3325b8809032: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-appwin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fbdec4287c521700\x86_microsoft-windows-help-appwin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fbdec4287c521700: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artcone.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ed1dc4bed07f787f\x86_microsoft-windows-help-artcone.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ed1dc4bed07f787f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_334326ad47f900b7\x86_microsoft-windows-help-artconm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_334326ad47f900b7: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artcont.resources_31bf3856ad364e35_6.0.6001.18000_en-us_10a3dc5df08357e8\x86_microsoft-windows-help-artcont.resources_31bf3856ad364e35_6.0.6001.18000_en-us_10a3dc5df08357e8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e22d34d98e61b9f6\x86_microsoft-windows-help-artconv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e22d34d98e61b9f6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artconw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4af1e1175d50eafd\x86_microsoft-windows-help-artconw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4af1e1175d50eafd: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artico.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9e9bce6f79b80547\x86_microsoft-windows-help-artico.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9e9bce6f79b80547: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f467ab99ca8bd0f9\x86_microsoft-windows-help-artuic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f467ab99ca8bd0f9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d250535d3dba5e7b\x86_microsoft-windows-help-artuie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d250535d3dba5e7b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuiv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b089e55a90c6114c\x86_microsoft-windows-help-artuiv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b089e55a90c6114c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-artuiw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f7e393c4a5d580d\x86_microsoft-windows-help-artuiw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9f7e393c4a5d580d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-auxdisp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6fa4b81637688e4b\x86_microsoft-windows-help-auxdisp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6fa4b81637688e4b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-backup.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763c152dd70bb0f5\x86_microsoft-windows-help-backup.resources_31bf3856ad364e35_6.0.6001.18000_en-us_763c152dd70bb0f5: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-basics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4307aacb48f3a60c\x86_microsoft-windows-help-basics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4307aacb48f3a60c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-basics2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_db20390311c23bfc\x86_microsoft-windows-help-basics2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_db20390311c23bfc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-browser.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cae808618251179b\x86_microsoft-windows-help-browser.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cae808618251179b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-buttons.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bb59e33ff71fb74\x86_microsoft-windows-help-buttons.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4bb59e33ff71fb74: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-checkbx.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d4fa565b2c5c1635\x86_microsoft-windows-help-checkbx.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d4fa565b2c5c1635: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-cw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2ba8d4d157e289f\x86_microsoft-windows-help-cw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2ba8d4d157e289f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-desk.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7a40e7bd82d892a6\x86_microsoft-windows-help-desk.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7a40e7bd82d892a6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-deskpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_da07dee83110caa2\x86_microsoft-windows-help-deskpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_da07dee83110caa2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-dgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bbe2ff296b8aac13\x86_microsoft-windows-help-dgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bbe2ff296b8aac13: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-diskcln.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b94f4394c38c2c9d\x86_microsoft-windows-help-diskcln.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b94f4394c38c2c9d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-diskmgt.resources_31bf3856ad364e35_6.0.6001.18000_en-us_284e552d9bc0e01c\x86_microsoft-windows-help-diskmgt.resources_31bf3856ad364e35_6.0.6001.18000_en-us_284e552d9bc0e01c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-dvdburn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ef207e48bb95f4da\x86_microsoft-windows-help-dvdburn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ef207e48bb95f4da: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-efs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1f4dee0527a9f7cf\x86_microsoft-windows-help-efs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1f4dee0527a9f7cf: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-errmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_65f020eccb6dbd67\x86_microsoft-windows-help-errmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_65f020eccb6dbd67: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-flicks.resources_31bf3856ad364e35_6.0.6001.18000_en-us_df4717294a11e0c9\x86_microsoft-windows-help-flicks.resources_31bf3856ad364e35_6.0.6001.18000_en-us_df4717294a11e0c9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-fstexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3bd2266a8dd63c7b\x86_microsoft-windows-help-fstexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3bd2266a8dd63c7b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-fus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6356058930fbb507\x86_microsoft-windows-help-fus.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6356058930fbb507: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-games.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d66208d4786dcf36\x86_microsoft-windows-help-games.resources_31bf3856ad364e35_6.0.6001.18000_en-us_d66208d4786dcf36: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-gamesp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ae541733ba1f9f34\x86_microsoft-windows-help-gamesp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ae541733ba1f9f34: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-gamest.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6a2566baa07cba38\x86_microsoft-windows-help-gamest.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6a2566baa07cba38: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-harddev.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99d0df67fdb2ec79\x86_microsoft-windows-help-harddev.resources_31bf3856ad364e35_6.0.6001.18000_en-us_99d0df67fdb2ec79: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-helpplc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_beb52d3041f18281\x86_microsoft-windows-help-helpplc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_beb52d3041f18281: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-hhomehp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fd775c23a7a1d210\x86_microsoft-windows-help-hhomehp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_fd775c23a7a1d210: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_614e8e31a0b68330\x86_microsoft-windows-help-ics.resources_31bf3856ad364e35_6.0.6001.18000_en-us_614e8e31a0b68330: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-iishome.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5835cd7e8181ca51\x86_microsoft-windows-help-iishome.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5835cd7e8181ca51: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-iispr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c911b19c5970075a\x86_microsoft-windows-help-iispr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c911b19c5970075a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-inkball.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7c101858ba7520dc\x86_microsoft-windows-help-inkball.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7c101858ba7520dc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-inkwat.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5e1844c84f48697b\x86_microsoft-windows-help-inkwat.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5e1844c84f48697b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-input.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c95e180bcc14a18d\x86_microsoft-windows-help-input.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c95e180bcc14a18d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-instmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bc866f66f4ac0c08\x86_microsoft-windows-help-instmes.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bc866f66f4ac0c08: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-journal.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9546fbaf73c9cd66\x86_microsoft-windows-help-journal.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9546fbaf73c9cd66: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-langreg.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a17bac9a799c9cb3\x86_microsoft-windows-help-langreg.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a17bac9a799c9cb3: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-legapp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_83e23a8835d39ba6\x86_microsoft-windows-help-legapp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_83e23a8835d39ba6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-legapp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5121e68f01f78ccc\x86_microsoft-windows-help-legapp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5121e68f01f78ccc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-library.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce8a9e8edb7254b6\x86_microsoft-windows-help-library.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ce8a9e8edb7254b6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-license.resources_31bf3856ad364e35_6.0.6001.18000_en-us_53f1f32b9572fbf6\x86_microsoft-windows-help-license.resources_31bf3856ad364e35_6.0.6001.18000_en-us_53f1f32b9572fbf6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mail.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4de93c5355038d06\x86_microsoft-windows-help-mail.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4de93c5355038d06: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4048d239ff57e0\x86_microsoft-windows-help-medctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4048d239ff57e0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6306a0ec88059358\x86_microsoft-windows-help-medexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6306a0ec88059358: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-medexp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6c12b99feb251f7c\x86_microsoft-windows-help-medexp2.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6c12b99feb251f7c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-migrate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7983c33684ffc3a0\x86_microsoft-windows-help-migrate.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7983c33684ffc3a0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mobctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0dc3bba67c095564\x86_microsoft-windows-help-mobctr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0dc3bba67c095564: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mobile.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f492fbd1f9f3c3b9\x86_microsoft-windows-help-mobile.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f492fbd1f9f3c3b9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-movie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_24e8d77ce9606621\x86_microsoft-windows-help-movie.resources_31bf3856ad364e35_6.0.6001.18000_en-us_24e8d77ce9606621: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-mreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_150c96b39b572cf6\x86_microsoft-windows-help-mreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_150c96b39b572cf6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netproj.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd2516071ee9b199\x86_microsoft-windows-help-netproj.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd2516071ee9b199: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a5834de3e351e6e2\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a5834de3e351e6e2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a2bc1f0ddc6c1c13\x86_microsoft-windows-help-netw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a2bc1f0ddc6c1c13: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netwl.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1128c740adf49eb1\x86_microsoft-windows-help-netwl.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1128c740adf49eb1: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-network.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c1e45cef6a8f8cd1\x86_microsoft-windows-help-network.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c1e45cef6a8f8cd1: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-netwpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6958537f7052b429\x86_microsoft-windows-help-netwpr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_6958537f7052b429: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-parent.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2f9376694c90fd3\x86_microsoft-windows-help-parent.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2f9376694c90fd3: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-pencurs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_300acfefe49bd4ab\x86_microsoft-windows-help-pencurs.resources_31bf3856ad364e35_6.0.6001.18000_en-us_300acfefe49bd4ab: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-peopcom.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0745464b1fa2cf18\x86_microsoft-windows-help-peopcom.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0745464b1fa2cf18: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-perf.resources_31bf3856ad364e35_6.0.6001.18000_en-us_330415f06dac7f56\x86_microsoft-windows-help-perf.resources_31bf3856ad364e35_6.0.6001.18000_en-us_330415f06dac7f56: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-persnlz.resources_31bf3856ad364e35_6.0.6001.18000_en-us_13a8748137652bcb\x86_microsoft-windows-help-persnlz.resources_31bf3856ad364e35_6.0.6001.18000_en-us_13a8748137652bcb: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-playing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_733eb86169aed945\x86_microsoft-windows-help-playing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_733eb86169aed945: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-presset.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f34d2d5eec1d8ff5\x86_microsoft-windows-help-presset.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f34d2d5eec1d8ff5: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-print.resources_31bf3856ad364e35_6.0.6001.18000_en-us_dfb371bb349391c2\x86_microsoft-windows-help-print.resources_31bf3856ad364e35_6.0.6001.18000_en-us_dfb371bb349391c2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-privacy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_94f8a474b1ac8685\x86_microsoft-windows-help-privacy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_94f8a474b1ac8685: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-pwrmgm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_74032451ce81670d\x86_microsoft-windows-help-pwrmgm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_74032451ce81670d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ra.resources_31bf3856ad364e35_6.0.6001.18000_en-us_44e18a95654213a2\x86_microsoft-windows-help-ra.resources_31bf3856ad364e35_6.0.6001.18000_en-us_44e18a95654213a2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-rdb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bca4f03d1184dfab\x86_microsoft-windows-help-rdb.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bca4f03d1184dfab: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-recycle.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4ccf05878e035de6\x86_microsoft-windows-help-recycle.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4ccf05878e035de6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-restore.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e5a87a1b00c5e4dd\x86_microsoft-windows-help-restore.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e5a87a1b00c5e4dd: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-ripbsyn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e2edd8c0ae2d824a\x86_microsoft-windows-help-ripbsyn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e2edd8c0ae2d824a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-scan.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5fed7d3b38eace24\x86_microsoft-windows-help-scan.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5fed7d3b38eace24: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-seccntr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4066b76580ad78d9\x86_microsoft-windows-help-seccntr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4066b76580ad78d9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-secpriv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f0ded06d767324d1\x86_microsoft-windows-help-secpriv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f0ded06d767324d1: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sharing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_64a7636b3441bca5\x86_microsoft-windows-help-sharing.resources_31bf3856ad364e35_6.0.6001.18000_en-us_64a7636b3441bca5: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_79ce6474f21869b0\x86_microsoft-windows-help-shgloss.resources_31bf3856ad364e35_6.0.6001.18000_en-us_79ce6474f21869b0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_49d67d91163d650e\x86_microsoft-windows-help-shreuse.resources_31bf3856ad364e35_6.0.6001.18000_en-us_49d67d91163d650e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-shutdwn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2515bfc5ff753924\x86_microsoft-windows-help-shutdwn.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2515bfc5ff753924: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sidebar.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4e074d9fc89b21ed\x86_microsoft-windows-help-sidebar.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4e074d9fc89b21ed: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sniptoo.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9a3b1304b88cbfc5\x86_microsoft-windows-help-sniptoo.resources_31bf3856ad364e35_6.0.6001.18000_en-us_9a3b1304b88cbfc5: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-speech.resources_31bf3856ad364e35_6.0.6001.18000_en-us_643cb9ff7ed95351\x86_microsoft-windows-help-speech.resources_31bf3856ad364e35_6.0.6001.18000_en-us_643cb9ff7ed95351: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-stknote.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5efebaed4bc18885\x86_microsoft-windows-help-stknote.resources_31bf3856ad364e35_6.0.6001.18000_en-us_5efebaed4bc18885: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-storage.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b0a96e233ddd881a\x86_microsoft-windows-help-storage.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b0a96e233ddd881a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sync.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b3299bd4eeec268e\x86_microsoft-windows-help-sync.resources_31bf3856ad364e35_6.0.6001.18000_en-us_b3299bd4eeec268e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-sysman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4c75d5a787362636\x86_microsoft-windows-help-sysman.resources_31bf3856ad364e35_6.0.6001.18000_en-us_4c75d5a787362636: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-tablet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0ec3218c67003501\x86_microsoft-windows-help-tablet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0ec3218c67003501: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-tcpch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4ea900bef19c15\x86_microsoft-windows-help-tcpch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8e4ea900bef19c15: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-touch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f4a1e2c5b82ee1a6\x86_microsoft-windows-help-touch.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f4a1e2c5b82ee1a6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-upgrade.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a6cb61aaed3e4cc1\x86_microsoft-windows-help-upgrade.resources_31bf3856ad364e35_6.0.6001.18000_en-us_a6cb61aaed3e4cc1: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-vidclip.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ba5ea3dae306ba68\x86_microsoft-windows-help-vidclip.resources_31bf3856ad364e35_6.0.6001.18000_en-us_ba5ea3dae306ba68: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-video.resources_31bf3856ad364e35_6.0.6001.18000_en-us_93eb5676c5b1f3f8\x86_microsoft-windows-help-video.resources_31bf3856ad364e35_6.0.6001.18000_en-us_93eb5676c5b1f3f8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-videos.resources_31bf3856ad364e35_6.0.6001.18000_en-us_38ba607b34299839\x86_microsoft-windows-help-videos.resources_31bf3856ad364e35_6.0.6001.18000_en-us_38ba607b34299839: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wasw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_231817bdb6a89c41\x86_microsoft-windows-help-wasw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_231817bdb6a89c41: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wer.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8a78d11789562e69\x86_microsoft-windows-help-wer.resources_31bf3856ad364e35_6.0.6001.18000_en-us_8a78d11789562e69: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-winmeet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2dc878e279bbddc8\x86_microsoft-windows-help-winmeet.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2dc878e279bbddc8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wnewhp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2df5d367e5e849c0\x86_microsoft-windows-help-wnewhp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2df5d367e5e849c0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_microsoft-windows-help-wu.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f3af7e71fb54efe9\x86_microsoft-windows-help-wu.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f3af7e71fb54efe9: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.aclui.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c8f41e616e5a1e2e\x86_server-help-chm.aclui.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c8f41e616e5a1e2e Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.authfw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_14f4c73b11c1a9ff\x86_server-help-chm.authfw.resources_31bf3856ad364e35_6.0.6001.18000_en-us_14f4c73b11c1a9ff Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.authm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_287a133958e568c1\x86_server-help-chm.authm.resources_31bf3856ad364e35_6.0.6001.18000_en-us_287a133958e568c1 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.certmgr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0842083dffc1ae96\x86_server-help-chm.certmgr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0842083dffc1ae96 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.comexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c927a5e65fcc55a4\x86_server-help-chm.comexp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c927a5e65fcc55a4 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.devmgr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3d55b704a07275b5\x86_server-help-chm.devmgr.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3d55b704a07275b5 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.diskm_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7b7463fd44607ee5\x86_server-help-chm.diskm_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7b7463fd44607ee5 Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.eventviewer_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_234aec155b534bab\x86_server-help-chm.eventviewer_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_234aec155b534bab: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.file_srv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2c4685e9d0a11f8\x86_server-help-chm.file_srv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2c4685e9d0a11f8: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.ieakmmc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_61b0bae4c40a09b7\x86_server-help-chm.ieakmmc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_61b0bae4c40a09b7 Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.inetsrvmmchp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_96738db4403732aa\x86_server-help-chm.inetsrvmmchp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_96738db4403732aa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.ipsecmonitor.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bf205f8412702dd0\x86_server-help-chm.ipsecmonitor.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bf205f8412702dd0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.ipsecpolicy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_573e3ba8900afcd8\x86_server-help-chm.ipsecpolicy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_573e3ba8900afcd8: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.mmc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bcddd8f9cd7e3407\x86_server-help-chm.mmc.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bcddd8f9cd7e3407 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.msmq.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e299abdd63eb30c0\x86_server-help-chm.msmq.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e299abdd63eb30c0 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.nap.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cf19793637b0edef\x86_server-help-chm.nap.resources_31bf3856ad364e35_6.0.6001.18000_en-us_cf19793637b0edef Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.perfmon.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3315a459ef439b99\x86_server-help-chm.perfmon.resources_31bf3856ad364e35_6.0.6001.18000_en-us_3315a459ef439b99 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.qos.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2a168fff1cbd7321\x86_server-help-chm.qos.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2a168fff1cbd7321 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.reliab.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2c1e15d8ede89f7\x86_server-help-chm.reliab.resources_31bf3856ad364e35_6.0.6001.18000_en-us_c2c1e15d8ede89f7 Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.saf..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2615b43dd4da4955\x86_server-help-chm.saf..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2615b43dd4da4955: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.snmp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e95110af15817846\x86_server-help-chm.snmp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e95110af15817846 Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.spo..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd467ae189f90651\x86_server-help-chm.spo..oncepts_v.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bd467ae189f90651: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.sys_srv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f08fd6c65f50f5d7\x86_server-help-chm.sys_srv.resources_31bf3856ad364e35_6.0.6001.18000_en-us_f08fd6c65f50f5d7 Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.tas..eduler_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_69ecb5113447c1a9\x86_server-help-chm.tas..eduler_lh.resources_31bf3856ad364e35_6.0.6001.18000_en-us_69ecb5113447c1a9: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.tcpip.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2597961eb38a1f0a\x86_server-help-chm.tcpip.resources_31bf3856ad364e35_6.0.6001.18000_en-us_2597961eb38a1f0a Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-chm.tpmadmin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_98ad291fe3e28ed6\x86_server-help-chm.tpmadmin.resources_31bf3856ad364e35_6.0.6001.18000_en-us_98ad291fe3e28ed6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-h1s.itprobasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e9f3fffafda13b34\x86_server-help-h1s.itprobasic.resources_31bf3856ad364e35_6.0.6001.18000_en-us_e9f3fffafda13b34: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\49e56f90e19bda34617f4afee5894eea\x86_server-help-h1s.uap.resources_31bf3856ad364e35_6.0.6001.18000_en-us_74b5efdebccefcc8\x86_server-help-h1s.uap.resources_31bf3856ad364e35_6.0.6001.18000_en-us_74b5efdebccefcc8 Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16866_none_7fe0c12063c7ff25\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16866_none_7fe0c12063c7ff25: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21062_none_806634e57ce96cd5\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21062_none_806634e57ce96cd5: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18267_none_81c8001060eda96d\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18267_none_81c8001060eda96d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22444_none_82643dbb79fdc277\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22444_none_82643dbb79fdc277: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18046_none_83c3136c5e04aa7f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18046_none_83c3136c5e04aa7f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22147_none_844db081772163a0\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22147_none_844db081772163a0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16866_none_4755e279c14fc1a0\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16866_none_4755e279c14fc1a0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21062_none_47db563eda712f50\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21062_none_47db563eda712f50: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18267_none_493d2169be756be8\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18267_none_493d2169be756be8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22444_none_49d95f14d78584f2\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22444_none_49d95f14d78584f2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18046_none_4b3834c5bb8c6cfa\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18046_none_4b3834c5bb8c6cfa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22147_none_4bc2d1dad4a9261b\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22147_none_4bc2d1dad4a9261b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16866_none_0a011f83f55114da\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16866_none_0a011f83f55114da: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21062_none_0a8693490e72828a\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21062_none_0a8693490e72828a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18267_none_0be85e73f276bf22\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18267_none_0be85e73f276bf22: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22444_none_0c849c1f0b86d82c\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22444_none_0c849c1f0b86d82c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18046_none_0de371cfef8dc034\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18046_none_0de371cfef8dc034: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22147_none_0e6e0ee508aa7955\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22147_none_0e6e0ee508aa7955: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16866_none_0a021fcdf5502e31\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16866_none_0a021fcdf5502e31: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21062_none_0a8793930e719be1\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21062_none_0a8793930e719be1: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18267_none_0be95ebdf275d879\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18267_none_0be95ebdf275d879: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22444_none_0c859c690b85f183\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22444_none_0c859c690b85f183: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18046_none_0de47219ef8cd98b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18046_none_0de47219ef8cd98b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22147_none_0e6f0f2f08a992ac\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22147_none_0e6f0f2f08a992ac: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16866_none_0a032017f54f4788\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16866_none_0a032017f54f4788: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21062_none_0a8893dd0e70b538\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21062_none_0a8893dd0e70b538: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18267_none_0bea5f07f274f1d0\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18267_none_0bea5f07f274f1d0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22444_none_0c869cb30b850ada\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22444_none_0c869cb30b850ada: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18046_none_0de57263ef8bf2e2\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18046_none_0de57263ef8bf2e2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22147_none_0e700f7908a8ac03\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22147_none_0e700f7908a8ac03: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16866_none_0a042061f54e60df\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16866_none_0a042061f54e60df: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21062_none_0a8994270e6fce8f\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21062_none_0a8994270e6fce8f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18267_none_0beb5f51f2740b27\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18267_none_0beb5f51f2740b27: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22444_none_0c879cfd0b842431\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22444_none_0c879cfd0b842431: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18046_none_0de672adef8b0c39\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18046_none_0de672adef8b0c39: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22147_none_0e710fc308a7c55a\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22147_none_0e710fc308a7c55a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16866_none_0a0520abf54d7a36\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16866_none_0a0520abf54d7a36: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21062_none_0a8a94710e6ee7e6\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21062_none_0a8a94710e6ee7e6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18267_none_0bec5f9bf273247e\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18267_none_0bec5f9bf273247e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22444_none_0c889d470b833d88\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22444_none_0c889d470b833d88: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18046_none_0de772f7ef8a2590\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18046_none_0de772f7ef8a2590: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22147_none_0e72100d08a6deb1\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22147_none_0e72100d08a6deb1: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16866_none_3fdf3668c441aa88\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16866_none_3fdf3668c441aa88 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21062_none_4064aa2ddd631838\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21062_none_4064aa2ddd631838 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18267_none_41c67558c16754d0\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18267_none_41c67558c16754d0 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22444_none_4262b303da776dda\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22444_none_4262b303da776dda Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18046_none_43c188b4be7e55e2\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18046_none_43c188b4be7e55e2 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22147_none_444c25c9d79b0f03\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22147_none_444c25c9d79b0f03 Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9: 3 Found mount point : C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\f9870fa09c866a37752cd50336c30a22\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18819_none_83d6ded046b75eaf\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18819_none_83d6ded046b75eaf Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\Download\f9870fa09c866a37752cd50336c30a22\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22909_none_846b4b875fcce288\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22909_none_846b4b875fcce288 Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\PostRebootEventCache\PostRebootEventCache Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\SoftwareDistribution\ScanFile\ScanFile Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Sun\Java\Deployment\Deployment Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\System32\Branding\en-US\en-US Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\{127D0A1D-4EF2-11D1-8608-00C04FC295EE} Mount point destination : \Device\__max++>\^ Cannot access: C:\Windows\System32\cngaudit.dll [1] 2006-11-02 10:46:03 61952 C:\Windows\System32\cngaudit.dll () ----EDIT---- Sorry just realised..I missed the bottom section of the log (Didn't highlight everything)....I'll copy it in and put it up properly... Apologies.. Last edited by Rozza-C; 09-06-2009 at 01:48 PM. |
|
|
|
|
09-06-2009, 01:46 PM
|
#4 (permalink) |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
Is that the complete log? The command box instructed you to press any key when it was done, and that's the log produced? I think there should be a couple more lines of code at the end.
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Microsoft MVP - Consumer Security 2009
|
|
|
|
|
09-06-2009, 01:58 PM
|
#5 (permalink) |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
Hello -
Please don't edit posts, I don't receive notifications of edits. I just happened to refresh the page and saw your edit. The log doesn't seem any different....are you sure that's all of it? Please copy/paste the contents, or attach the log to a new reply.
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Microsoft MVP - Consumer Security 2009
|
|
|
|
|
09-06-2009, 02:04 PM
|
#6 (permalink) |
|
Registered User
Join Date: Nov 2007
Posts: 27
OS: Windows Vista
|
Re: Monopod, b.exe, msa.exe Virus problems
I haven't posted up the full log just yet....
And I just read your post and realised that there's a prompt to tell me it's finished... It was sitting at a certain point for such a long time, I thought that it was finished and it didn't prompt me... I'm still waiting for it to finish now, so I'll post a full log when it's done... Sorry about that... |
|
|
|
|
09-06-2009, 02:05 PM
|
#7 (permalink) |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
OK, thanks, that makes more sense now. I'll rewrite my instructions to further clarify that for others.
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Microsoft MVP - Consumer Security 2009
|
|
|
|
|
09-06-2009, 03:08 PM
|
#8 (permalink) |
|
Registered User
Join Date: Nov 2007
Posts: 27
OS: Windows Vista
|
Re: Monopod, b.exe, msa.exe Virus problems
Can I just ask how long this scan normally takes?
I'm still waiting for it to finish now.... I know it's still working because I'm getting activity on my processor and hard drive and I'm seeing a new line of text every so often... |
|
|
|
|
09-06-2009, 03:11 PM
|
#9 (permalink) | |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
Not usually this long.
Let me ask you this.. Have you run ComboFix in the past couple of days? What path is currently being scanned? Also, what I'm really interested in seeing is any lines with this file in it Quote:
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Microsoft MVP - Consumer Security 2009
|
|
|
|
|
|
09-06-2009, 03:43 PM
|
#10 (permalink) |
|
Registered User
Join Date: Nov 2007
Posts: 27
OS: Windows Vista
|
Re: Monopod, b.exe, msa.exe Virus problems
Cannot access: C:\Windows\System32\cngaudit.dll
[1] 2006-11-02 10:46:03 61952 C:\Windows\System32\cngaudit.dll () [2] 2006-11-02 10:46:03 11776 C:\Windows\System32\logevent.dll (Microsoft Corporation) [1] 2006-11-02 10:46:03 11776 C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll (Microsoft Corporation) Those are the only that are in the log that's been made so far... And these are the last 2 lines in the log so far... Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl [1] 2009-09-06 19:57:52 64 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl () As for ComboFix... I tried running it once but it wouldnt because it said there's a RootKit infection or something like that..and it told me to scan for RootKits on the computer... |
|
|
|
|
09-06-2009, 03:46 PM
|
#11 (permalink) |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
That's fine.
Please close the command window for Win32kDiag.exe If it won't close manually, use the task manager. Next, delete any existing version of ComboFix you might have. Next...
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Microsoft MVP - Consumer Security 2009
|
|
|
|
|
09-06-2009, 04:41 PM
|
#12 (permalink) |
|
Registered User
Join Date: Nov 2007
Posts: 27
OS: Windows Vista
|
Re: Monopod, b.exe, msa.exe Virus problems
Seems that my computer likes to take it's time doing everything....
And...just as ComboFix was finishing up....I got BsoD'd... Everything started again normally afterwards....so I'm not sure if it's a concern.... My AVG Anti-Virus was being a bit of a pain and apparently not turning off...and it's not letting me uninstall it either  Even though I followed those instructions on that forum page.... Here's the log anyway.... ComboFix 09-09-06.02 - Rory 09/06/2009 23:11:42.1.2 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.2045.913 [GMT 1:00] Running from: C:\Users\Rory\Desktop\ComboFix.exe AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\$RECYCLE.BIN\S-1-5-21-2152478756-3922319563-605102323-500 C:\Program Files\INSTALL.LOG C:\Users\fusion k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download programs.url C:\Users\fusion k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games.url C:\Users\fusion k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Translator.url C:\Users\fusion k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Videos.url C:\Users\fusion k\Favorites\Download programs.url C:\Users\fusion k\Favorites\Games.url C:\Users\fusion k\Favorites\Translator.url C:\Users\fusion k\Favorites\Videos.url C:\Users\Guest\Desktop\Antivirus 2009.lnk C:\Users\Rory\AppData\Roaming\inst.exe C:\WINDOWS\Installer\106492.msi C:\WINDOWS\Installer\WMEncoder.msi C:\Windows\TEMP\logishrd\LVPrcInj01.dll D:\autorun.inf Infected copy of C:\Windows\system32\cngaudit.dll was found and disinfected Restored copy from - C:\Windows\system32\logevent.dll . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226ED} -------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226EE} ((((((((((((((((((((((((( Files Created from 2009-08-06 to 2009-09-06 ))))))))))))))))))))))))))))))) . 2009-09-06 22:21:21 . 2009-09-06 22:24:19 0 d-----w- C:\Users\Rory\AppData\Local\temp 2009-09-06 22:21:21 . 2009-09-06 22:21:21 0 d-----w- C:\Users\Zoe\AppData\Local\temp 2009-09-06 22:21:21 . 2009-09-06 22:21:21 0 d-----w- C:\Users\Guest\AppData\Local\temp 2009-09-06 22:21:21 . 2009-09-06 22:21:21 0 d-----w- C:\Users\fusion k\AppData\Local\temp 2009-09-06 22:21:21 . 2009-09-06 22:21:21 0 d-----w- C:\Users\Default\AppData\Local\temp 2009-09-06 22:21:21 . 2009-09-06 22:21:21 0 d-----w- C:\Users\Administrator\AppData\Local\temp 2009-09-05 23:12:51 . 2009-09-05 23:12:51 0 d-----w- C:\Users\Administrator\AppData\Roaming\PC Suite 2009-09-05 21:18:25 . 2006-06-19 12:01:38 69632 ----a-w- C:\Windows\system32\ztvcabinet.dll 2009-09-05 21:18:25 . 2006-05-25 14:52:46 162304 ----a-w- C:\Windows\system32\ztvunrar36.dll 2009-09-05 21:18:25 . 2005-08-26 00:50:00 77312 ----a-w- C:\Windows\system32\ztvunace26.dll 2009-09-05 21:18:25 . 2003-02-02 19  02 153088 ----a-w- C:\Windows\system32\UNRAR3.dll2009-09-05 21:18:25 . 2002-03-06 00:00:00 75264 ----a-w- C:\Windows\system32\unacev2.dll 2009-09-05 21:18:23 . 2009-09-05 21:18:33 0 d-----w- C:\Program Files\Trojan Remover 2009-09-05 21:18:23 . 2009-09-05 21:18:23 0 d-----w- C:\Users\Rory\AppData\Roaming\Simply Super Software 2009-09-05 21:18:23 . 2009-09-05 21:18:23 0 d-----w- C:\ProgramData\Simply Super Software 2009-09-05 11:12:18 . 2009-09-05 11:12:18 0 d-----w- C:\Program Files\Artisteer 2 2009-09-04 16:41:46 . 2009-09-04 16:41:51 0 d-----w- C:\Program Files\ERUNT 2009-09-04 12:32:41 . 2009-09-04 12:32:41 0 ----a-w- C:\Windows\system32\settings.dat 2009-09-04 04:14:17 . 2008-06-19 16:24:30 28544 ----a-w- C:\Windows\system32\drivers\pavboot.sys 2009-09-04 04:12:43 . 2009-09-04 04:12:43 0 d-----w- C:\Program Files\Panda Security 2009-09-04 03:01:55 . 2009-09-04 03:01:55 0 d-----w- C:\Users\Rory\AppData\Roaming\Malwarebytes 2009-09-04 03:01:49 . 2009-09-04 03:01:49 0 d-----w- C:\ProgramData\Malwarebytes 2009-09-04 02:52:35 . 2009-09-04 02:52:35 0 d-----w- C:\ProgramData\SUPERAntiSpyware.com 2009-09-04 02:50:33 . 2009-09-04 02:50:33 0 d-----w- C:\Users\Rory\AppData\Roaming\SUPERAntiSpyware.com 2009-09-04 02:27:57 . 2009-09-06 22:11:26 0 d--h--w- C:\Windows\PIF 2009-09-03 23:26:40 . 2009-09-03 23:26:40 0 d-----w- C:\Users\Rory\AppData\Roaming\Artisteer 2009-09-03 17:59:27 . 2009-09-03 17:59:27 0 d-----w- C:\Program Files\Sun 2009-09-02 22:13:17 . 2009-08-28 12:39:07 28672 ----a-w- C:\Windows\system32\Apphlpdm.dll 2009-09-02 22:13:17 . 2009-08-28 10:15:30 4240384 ----a-w- C:\Windows\system32\GameUXLegacyGDFs.dll 2009-08-31 00:59:23 . 2009-08-31 02:24:51 0 d-----w- C:\Users\Rory\AppData\Roaming\foobar2000 2009-08-31 00:59:01 . 2009-08-31 00:59:03 0 d-----w- C:\Program Files\foobar2000 2009-08-30 09:18:04 . 2009-08-30 09:18:08 0 d-----w- C:\ProgramData\Office Genuine Advantage 2009-08-30 00:09:03 . 2009-08-30 00:09:03 0 d-----w- C:\Users\Rory\New Folder 2009-08-27 18:22:29 . 2008-10-17 08:50:00 79104 ----a-w- C:\Windows\system32\drivers\Mkd2Nadr.sys 2009-08-27 18:22:29 . 2008-10-17 08:50:00 131072 ----a-w- C:\Windows\system32\drivers\Mkd2kfNT.sys 2009-08-27 18:20:56 . 2009-08-27 18:20:56 0 d-----w- C:\Program Files\AhnLab 2009-08-27 00:08:47 . 2009-08-27 00:08:47 0 d-----w- C:\Nexon 2009-08-27 00:08:46 . 2009-08-27 00:08:46 421888 ----a-w- C:\Windows\NEXON_EU_DownloaderUpdater.exe 2009-08-26 02:02:16 . 2009-06-22 10:22:01 2048 ----a-w- C:\Windows\system32\tzres.dll 2009-08-24 11:25:00 . 2009-08-24 11:25:00 0 d-----w- C:\Users\Rory\AppData\Roaming\Red Kawa 2009-08-23 15:16:26 . 2009-08-23 15:24:18 0 d-----w- C:\Users\Rory\AppData\Roaming\avidemux 2009-08-19 23:59:24 . 2009-08-21 21:12:00 0 d-----w- C:\Program Files\FrameShots3 2009-08-19 20:08:39 . 2009-08-19 20:08:39 0 d-----w- C:\Users\Rory\AppData\Local\HP 2009-08-19 19:49:45 . 2009-08-19 19:49:45 0 d-----w- C:\ProgramData\HP Product Assistant 2009-08-19 19:43:53 . 2008-10-24 02:35:38 271704 ----a-w- C:\Windows\system32\hpzids01.dll 2009-08-19 19:43:48 . 2008-10-24 10:48:50 118272 ----a-w- C:\Windows\system32\hpz3l696.dll 2009-08-19 19:43:42 . 2008-10-24 02:34:28 372736 ----a-w- C:\Windows\system32\hppldcoi.dll 2009-08-19 19:43:42 . 2008-10-24 02:34:27 309760 ----a-w- C:\Windows\system32\difxapi.dll 2009-08-19 19:43:42 . 2008-10-24 02:34:25 737280 ----a-w- C:\Windows\system32\hposwia_p01a.dll 2009-08-19 19:43:42 . 2008-10-24 02:34:24 974848 ----a-w- C:\Windows\system32\hpost_p01a.dll 2009-08-19 19:43:42 . 2008-10-24 02:34:23 307200 ----a-w- C:\Windows\system32\hposc_p01a.dll 2009-08-19 19:43:11 . 2009-08-19 19:43:11 0 d-----w- C:\Program Files\Hewlett-Packard 2009-08-19 19:40:22 . 2009-08-19 21:24:56 150729 ----a-w- C:\Windows\hpoins30.dat 2009-08-15 11:55:56 . 2009-08-15 11:55:57 0 d-----w- C:\ProgramData\FLEXnet 2009-08-15 11:42:38 . 2009-08-15 11:42:38 0 d-----w- C:\Program Files\Adobe Media Player 2009-08-15 11:39:11 . 2009-08-15 11:39:11 0 d-----w- C:\Program Files\Common Files\Adobe AIR 2009-08-15 11:37:48 . 2009-08-15 11:37:48 0 d-----w- C:\Program Files\Common Files\Macrovision Shared 2009-08-14 00:27:22 . 2009-08-14 00:27:23 0 d-----w- C:\Windows\system32\pgpsw-speed-cams-tITGz 2009-08-13 22:30:55 . 2009-06-15 15:21:07 499712 ----a-w- C:\Windows\system32\kerberos.dll 2009-08-13 22:30:54 . 2009-06-15 15:24:38 175104 ----a-w- C:\Windows\system32\wdigest.dll 2009-08-13 22:30:54 . 2009-06-15 15:24:02 270848 ----a-w- C:\Windows\system32\schannel.dll 2009-08-13 22:30:54 . 2009-06-15 15:23:47 1256448 ----a-w- C:\Windows\system32\lsasrv.dll 2009-08-13 22:30:54 . 2009-06-15 15:22:19 213504 ----a-w- C:\Windows\system32\msv1_0.dll 2009-08-13 22:30:53 . 2009-06-15 18:20:59 439896 ----a-w- C:\Windows\system32\drivers\ksecdd.sys 2009-08-13 22:30:52 . 2009-06-15 15:24:05 72704 ----a-w- C:\Windows\system32\secur32.dll 2009-08-13 22:30:52 . 2009-06-15 12:57:59 9728 ----a-w- C:\Windows\system32\lsass.exe 2009-08-12 20 43 . 2007-03-01 00:32:25 6600 ----a-w- C:\Windows\hpomdl18.dat2009-08-12 19:37:29 . 2009-08-12 20:54:24 122677 ----a-w- C:\Windows\hpqins00.dat 2009-08-12 16:57:14 . 2009-07-17 14:35:11 71680 ----a-w- C:\Windows\system32\atl.dll 2009-08-12 16:57:10 . 2009-06-10 12:12:29 160256 ----a-w- C:\Windows\system32\wkssvc.dll 2009-08-12 16:57:09 . 2009-06-04 12:34:04 2066432 ----a-w- C:\Windows\system32\mstscax.dll 2009-08-12 16:57:07 . 2009-06-10 12:07:30 91136 ----a-w- C:\Windows\system32\avifil32.dll 2009-08-12 16:57:05 . 2009-06-10 11:45:29 206336 ----a-w- C:\Windows\system32\telnet.exe 2009-08-12 16:57:05 . 2009-06-10 09:56:12 88576 ----a-w- C:\Windows\system32\tlntsess.exe 2009-08-12 16:57:00 . 2009-07-14 13:00:17 313344 ----a-w- C:\Windows\system32\wmpdxm.dll 2009-08-12 16:57:00 . 2009-07-14 12:58:44 7680 ----a-w- C:\Windows\system32\spwmp.dll 2009-08-12 16:56:56 . 2009-07-14 12:59:28 4096 ----a-w- C:\Windows\system32\dxmasf.dll 2009-08-12 16:56:51 . 2009-07-14 10:59:56 8147456 ----a-w- C:\Windows\system32\wmploc.DLL . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-09-06 22:04:39 . 2008-07-20 22:46:56 0 d-----w- C:\ProgramData\avg8 2009-09-06 22:04:14 . 2007-07-13 22:05:39 0 d-----w- C:\ProgramData\Lavasoft 2009-09-06 19:30:56 . 2007-08-25 23:08:39 0 d-----w- C:\Users\Rory\AppData\Roaming\uTorrent 2009-09-06 15:36:49 . 2007-04-18 20:52:29 0 d-----w- C:\Users\fusion k\AppData\Roaming\LimeWire 2009-09-06 14:17:24 . 2008-01-06 21:52:17 0 d-----w- C:\Users\fusion k\AppData\Roaming\OpenOffice.org2 2009-09-05 22:44:08 . 2007-07-13 22:04:22 0 d-----w- C:\Program Files\Common Files\Wise Installation Wizard 2009-09-04 04:07:08 . 2009-02-24 19:25:53 0 d-----w- C:\Users\Rory\AppData\Roaming\Gmote 2009-09-04 03:56:12 . 2007-07-13 22:00:30 0 d-----w- C:\Program Files\Spybot - Search & Destroy 2009-09-04 03:56:11 . 2007-07-13 22:00:33 0 d-----w- C:\ProgramData\Spybot - Search & Destroy 2009-09-03 17:58:34 . 2008-10-27 20:45:21 411368 ----a-w- C:\Windows\system32\deploytk.dll 2009-09-03 17:58:29 . 2007-04-14 20:36:17 0 d-----w- C:\Program Files\Java 2009-09-03 17:35:56 . 2007-08-09 19:11:48 0 d-----w- C:\Program Files\AviSynth 2.5 2009-09-03 13:51:46 . 2009-07-30 13:23:59 0 d-----w- C:\Program Files\BearShare Download Client 2009-08-31 21:17:09 . 2009-07-20 17:14:03 0 d-----w- C:\Program Files\MusicBrainz Picard 2009-08-31 00:16:57 . 2007-04-17 18:34:32 0 d--h--w- C:\Program Files\InstallShield Installation Information 2009-08-22 11:20:51 . 2009-01-31 12 35 11952 ----a-w- C:\Windows\system32\avgrsstx.dll2009-08-22 11:20:51 . 2008-09-07 16:18:26 27784 ----a-w- C:\Windows\system32\drivers\avgmfx86.sys 2009-08-22 11:20:50 . 2008-09-07 16:18:51 335240 ----a-w- C:\Windows\system32\drivers\avgldx86.sys 2009-08-19 19:52:57 . 2007-05-15 14:05:32 0 d-----w- C:\Users\Rory\AppData\Roaming\HP 2009-08-19 19:51:54 . 2007-05-15 13:56:52 0 d-----w- C:\Program Files\HP 2009-08-19 19:49:55 . 2007-05-15 13:54:43 0 d-----w- C:\ProgramData\HP 2009-08-15 11:42:03 . 2007-04-17 18:15:37 0 d-----w- C:\Program Files\Common Files\Adobe 2009-08-12 20:38:43 . 2007-05-15 13:56:30 130859 ----a-w- C:\Windows\hpoins18.dat 2009-08-12 19:10:24 . 2006-11-02 11:18:33 0 d-----w- C:\Program Files\Windows Mail 2009-08-12 18:34:49 . 2007-05-17 19:07:17 0 d-----w- C:\Users\Rory\AppData\Roaming\Image Zone Express 2009-08-10 11:29:44 . 2009-07-29 13:12:41 0 d-----w- C:\ProgramData\NOS 2009-08-10 11:29:41 . 2009-07-29 13:12:40 0 d-----w- C:\Program Files\NOS 2009-08-06 14:38:08 . 2009-08-06 14:37:54 0 d-----w- C:\Program Files\iTunes 2009-08-06 14:37:55 . 2009-08-06 14:37:55 0 d-----w- C:\Program Files\iPod 2009-08-06 14:37:55 . 2007-07-12 12:55:56 0 d-----w- C:\Program Files\Common Files\Apple 2009-08-03 14:07:42 . 2009-08-03 14:07:42 403816 ----a-w- C:\Windows\system32\OGACheckControl.dll 2009-08-03 14:07:42 . 2009-08-03 14:07:42 322928 ----a-w- C:\Windows\system32\OGAAddin.dll 2009-08-03 14:07:42 . 2009-08-03 14:07:42 230768 ----a-w- C:\Windows\system32\OGAEXEC.exe 2009-08-01 10:29:54 . 2008-03-30 22:12:47 0 d-----w- C:\Program Files\Microsoft Silverlight 2009-07-30 13:32:33 . 2007-09-04 23:38:25 0 d-----w- C:\Program Files\LimeWire 2009-07-24 00:57:19 . 2007-04-14 18:50:03 0 d-----w- C:\Users\Rory\AppData\Roaming\Winamp 2009-07-23 18:59:39 . 2007-04-14 18:50:03 0 d-----w- C:\Program Files\Winamp 2009-07-21 21:52:28 . 2009-07-29 13:14:34 915456 ----a-w- C:\Windows\system32\wininet.dll 2009-07-21 21:47:28 . 2009-07-29 13:14:33 109056 ----a-w- C:\Windows\system32\iesysprep.dll 2009-07-21 21:47:27 . 2009-07-29 13:14:33 71680 ----a-w- C:\Windows\system32\iesetup.dll 2009-07-21 20:13:58 . 2009-07-29 13:14:33 133632 ----a-w- C:\Windows\system32\ieUnatt.exe 2009-07-20 17:20:48 . 2009-07-20 17:20:48 0 d-----w- C:\Program Files\Ashkon Software 2009-07-19 22:55:38 . 2009-04-07 18:57:53 151020 ---ha-w- C:\Windows\system32\mlfcache.dat 2009-07-17 12:19:18 . 2007-04-14 23:00:38 89528 ----a-w- C:\Users\fusion k\AppData\Local\GDIPFONTCACHEV1.DAT 2009-07-16 20:11:09 . 2007-04-14 16:22:11 89528 ----a-w- C:\Users\Rory\AppData\Local\GDIPFONTCACHEV1.DAT 2009-07-10 17:51:20 . 2007-05-23 17:49:07 0 d-----w- C:\Program Files\Messenger Plus! Live 2009-06-28 19:13:06 . 2009-06-26 19:28:47 165 ----a-w- C:\Windows\system32\serverConfig.dat 2009-06-15 15:24:24 . 2009-07-15 11:47:28 156672 ----a-w- C:\Windows\system32\t2embed.dll 2009-06-15 15:20:27 . 2009-07-15 11:47:28 72704 ----a-w- C:\Windows\system32\fontsub.dll 2009-06-15 15:20:00 . 2009-07-15 11:47:28 10240 ----a-w- C:\Windows\system32\dciman32.dll 2009-06-15 12:52:13 . 2009-07-15 11:47:28 289792 ----a-w- C:\Windows\system32\atmfd.dll 2009-06-11 22:29:50 . 2009-06-11 22:29:50 41808 ----a-w- C:\Windows\system32\xfcodec.dll 2006-05-03 10 54 . 2008-02-07 22:49:56 163328 --sh--r- C:\Windows\System32\flvDX.dll2007-02-21 11:47:16 . 2008-02-07 22:49:56 31232 --sh--r- C:\Windows\System32\msfDX.dll 2008-03-16 13:30:52 . 2009-03-21 13:38:26 216064 --sh--r- C:\Windows\System32\nbDX.dll 2007-01-05 20:20:59 . 2007-01-05 20:20:59 8192 --sha-w- C:\Windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 07:33:39 202240] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 07:33:30 1233920] "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 18:51:28 3885408] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-01-19 07:38:38 1008184] "SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-09-03 17:58:35 149280] "itype"="C:\Program Files\Microsoft IntelliType Pro\itype.exe" [2007-08-31 19:13:41 988584] "IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" [2007-08-31 19:01:21 1037736] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2009-01-07 20:26:45 185872] "TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2009-09-04 15:39:04 1069960] C:\Users\Zoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe [2009-7-28 139776] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=C:\Windows\System32\avgrsstx.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] path=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk backup=C:\Windows\pss\Adobe Reader Speed Launch.lnk.CommonStartup backupExtension=.CommonStartup [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk] path=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk backup=C:\Windows\pss\Adobe Reader Synchronizer.lnk.CommonStartup backupExtension=.CommonStartup [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] path=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk backup=C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup backupExtension=.CommonStartup [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech Desktop Messenger.lnk] path=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech Desktop Messenger.lnk backup=C:\Windows\pss\Logitech Desktop Messenger.lnk.CommonStartup backupExtension=.CommonStartup [HKLM\~\startupfolder\C:^Users^fusion k^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 2.3.lnk] path=C:\Users\fusion k\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 2.3.lnk backup=C:\Windows\pss\OpenOffice.org 2.3.lnk.Startup backupExtension=.Startup [HKLM\~\startupfolder\C:^Users^Rory^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk] path=C:\Users\Rory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk backup=C:\Windows\pss\Adobe Gamma.lnk.Startup backupExtension=.Startup [HKLM\~\startupfolder\C:^Users^Rory^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GameSpot Download Manager.lnk] path=C:\Users\Rory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameSpot Download Manager.lnk backup=C:\Windows\pss\GameSpot Download Manager.lnk.Startup backupExtension=.Startup [HKLM\~\startupfolder\C:^Users^Rory^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GmoteServer.lnk] path=C:\Users\Rory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GmoteServer.lnk backup=C:\Windows\pss\GmoteServer.lnk.Startup backupExtension=.Startup [HKLM\~\startupfolder\C:^Users^Rory^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^hamachi.lnk] path=C:\Users\Rory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hamachi.lnk backup=C:\Windows\pss\hamachi.lnk.Startup backupExtension=.Startup [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "TCP Query User{380B2968-C9B0-46D8-A85F-C87DC82C7104}C:\\program files\\nero\\nero 7\\core\\nero.exe"= UDP:C:\program files\nero\nero 7\core\nero.exe:Nero Express "UDP Query User{886D4D61-D8D6-43F0-9468-4CFE9D1F413C}C:\\program files\\nero\\nero 7\\core\\nero.exe"= TCP:C:\program files\nero\nero 7\core\nero.exe:Nero Express "TCP Query User{E83C791F-2403-49CE-9B4F-762C23122063}C:\\program files\\common files\\ahead\\nero web\\setupx.exe"= UDP:C:\program files\common files\ahead\nero web\setupx.exe:MSI starter "UDP Query User{717E564A-22F9-429A-87D3-23622D42CD24}C:\\program files\\common files\\ahead\\nero web\\setupx.exe"= TCP:C:\program files\common files\ahead\nero web\setupx.exe:MSI starter "TCP Query User{0013D812-B6F4-4987-AB3E-78479DFC3E26}C:\\program files\\azureus\\azureus.exe"= UDP:C:\program files\azureus\azureus.exe:Azureus "UDP Query User{1D317C79-1923-46E7-ABCC-72DE1D6B2A8D}C:\\program files\\azureus\\azureus.exe"= TCP:C:\program files\azureus\azureus.exe:Azureus "{F5F11D40-E3B4-44CC-A7F2-3380E0D007FF}"= UDP:50000:Test... "{4A68F5A6-34F6-44A8-B745-D48F8DF59475}"= TCP:50000:Test2.... "{58144763-37A6-4DB0-8986-45EC5AAA8754}"= UDP:C:\Program Files\THQ\Gas Powered Games\GPGNet\GPG.Multiplayer.Client.exe:GPGNet - Supreme Commander "{7F6F163E-D37C-4887-9E63-D96D0C941066}"= TCP:C:\Program Files\THQ\Gas Powered Games\GPGNet\GPG.Multiplayer.Client.exe:GPGNet - Supreme Commander "TCP Query User{F22AE025-BB4C-41D0-9526-AFD3BB06F449}C:\\program files\\flashget\\flashget.exe"= UDP:C:\program files\flashget\flashget.exe:FlashGet "UDP Query User{8CDE74BC-51CE-4C01-B92C-83689A166469}C:\\program files\\flashget\\flashget.exe"= TCP:C:\program files\flashget\flashget.exe:FlashGet "{29C67285-6114-461F-9EF2-4B02C61106FD}"= UDP:C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger "{AA3ECF02-8B40-44B8-ABF2-4845543B25FB}"= TCP:C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger "{77F656CA-FDF5-492D-A0C7-52670C80A9ED}"= UDP:C:\Program Files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server "{4156BC04-8BFA-41B8-9854-A98CC69409A6}"= TCP:C:\Program Files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server "{83A2E218-B281-4201-BC68-FE5AC2DC9C69}"= UDP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire "{95210CC5-BF38-4163-9DA1-A3667CE1A871}"= TCP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire "{4E501A23-08DD-4D58-A0C2-E0D68DEC1E66}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent "{9FE4C8D7-D8CE-4E84-9C0F-0AC8817C7E2C}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent "{81A37C82-A40C-4385-8FED-11213410FDC4}"= UDP:C:\Program Files\VoipCheapCom\VoipCheapCom.exe:VoipCheapCom "{8F30EA73-FA90-4670-8FDE-CA824456040E}"= TCP:C:\Program Files\VoipCheapCom\VoipCheapCom.exe:VoipCheapCom "TCP Query User{00B901EF-02F7-43FC-9A2B-44D24154979B}C:\\program files\\games-masters.com\\cabal online (europe)\\launcher\\update\\estdnheadless.exe"= UDP:C:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe:EST! download engine "UDP Query User{640D668F-681F-40DD-9E34-6BB2B8C4EAD5}C:\\program files\\games-masters.com\\cabal online (europe)\\launcher\\update\\estdnheadless.exe"= TCP:C:\program files\games-masters.com\cabal online (europe)\launcher\update\estdnheadless.exe:EST! download engine "TCP Query User{9767F9E9-41F9-44B4-B39C-1176C8B23D13}C:\\ijji\\english\\u_gunz.exe"= UDP:C:\ijji\english\u_gunz.exe:<ijji Downloader> "UDP Query User{3C1C2B76-4136-4D33-8170-F394C06A8277}C:\\ijji\\english\\u_gunz.exe"= TCP:C:\ijji\english\u_gunz.exe:<ijji Downloader> "TCP Query User{B63D3F23-BF4A-4681-9222-F2AEC896B013}C:\\program files\\xfire\\xfire.exe"= UDP:C:\program files\xfire\xfire.exe:Xfire "UDP Query User{B4FA96E1-A64A-4EF7-9964-93D3037E0746}C:\\program files\\xfire\\xfire.exe"= TCP:C:\program files\xfire\xfire.exe:Xfire "TCP Query User{EBA8B39C-4AD8-42B1-A09B-FEDE397C86B8}C:\\program files\\codemasters\\rf online;\\rf.exe"= UDP:C:\program files\codemasters\rf online;\rf.exe:RFLauncher "UDP Query User{59438CCD-00ED-4953-9A49-FBB314C3A159}C:\\program files\\codemasters\\rf online;\\rf.exe"= TCP:C:\program files\codemasters\rf online;\rf.exe:RFLauncher "TCP Query User{53D64CA1-4DCF-4849-BA43-5C5D1A967C06}C:\\sysreset\\mirc.exe"= UDP:C:\sysreset\mirc.exe:mIRC "UDP Query User{5565B705-0896-4B5F-AC25-3B82CDA3BD18}C:\\sysreset\\mirc.exe"= TCP:C:\sysreset\mirc.exe:mIRC "TCP Query User{139342E7-53FC-436D-A45D-40838B1A82C2}C:\\program files\\bearshare test\\bearshare.exe"= UDP:C:\program files\bearshare test\bearshare.exe:BearShare "UDP Query User{2FC79F0B-68CE-494E-8D0D-A6FED8A663F5}C:\\program files\\bearshare test\\bearshare.exe"= TCP:C:\program files\bearshare test\bearshare.exe:BearShare "{D94A224B-E3BA-455A-A916-B6E2B9CF7DC7}"= Disabled:UDP:C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008 "{BD0D5684-8425-481F-9350-E12AC275446E}"= Disabled:TCP:C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008 "TCP Query User{8E8ADEEE-9D70-4CE1-9476-3FF2548310EA}C:\\ijji\\english\\gunz\\gunz.exe"= UDP:C:\ijji\english\gunz\gunz.exe:Gunz "UDP Query User{A99E1763-D6F3-4D21-90FF-820482FF1B24}C:\\ijji\\english\\gunz\\gunz.exe"= TCP:C:\ijji\english\gunz\gunz.exe:Gunz "{6A19B8FA-818F-41CF-AA56-42647B19CFF0}"= UDP:C:\Ntreev\Grand Chase\main.exe:GrandChase "{55B0D0EB-6985-4790-9326-A5D242C30F88}"= TCP:C:\Ntreev\Grand Chase\main.exe:GrandChase "TCP Query User{1B218653-86D4-40C8-A723-EAC2E9B8DDBA}C:\\users\\rory\\appdata\\local\\temp\\nero web\\setupxu.exe"= UDP:C:\users\rory\appdata\local\temp\nero web\setupxu.exe:setupxu.exe "UDP Query User{8C0B0EEC-17D6-4D95-8D25-5DCC24F9C637}C:\\users\\rory\\appdata\\local\\temp\\nero web\\setupxu.exe"= TCP:C:\users\rory\appdata\local\temp\nero web\setupxu.exe:setupxu.exe "TCP Query User{1215545F-0C62-454F-B54B-9E0C3739F81B}C:\\program files\\java\\jdk1.6.0_01\\jre\\bin\\java.exe"= UDP:C:\program files\java\jdk1.6.0_01\jre\bin\java.exe:Java(TM) Platform SE binary "UDP Query User{0A14D9FA-5AF1-465F-BCF3-F5FF774699FD}C:\\program files\\java\\jdk1.6.0_01\\jre\\bin\\java.exe"= TCP:C:\program files\java\jdk1.6.0_01\jre\bin\java.exe:Java(TM) Platform SE binary "{828DF911-703D-4880-95DE-95AE28ACD670}"= UDP:C:\Program Files\O2\bin\wificfg.exe:sprtcmd.exe "{F887EB55-90B9-4DDA-9462-7D2DC3FDE9E7}"= TCP:C:\Program Files\O2\bin\wificfg.exe:sprtcmd.exe "{9A78BAE2-C819-4C27-93C0-66FC8015C375}"= UDP:C:\Program Files\O2\agent\bin\bcont.exe:bcont.exe "{7034E0F7-C775-42B8-B644-59B2B6B349C3}"= TCP:C:\Program Files\O2\agent\bin\bcont.exe:bcont.exe "{7A60B9E1-EC34-429A-A5BA-57B3CD2091B6}"= UDP:C:\Program Files\Common Files\SupportSoft\bin\ssrc.exe:ssrc.exe "{BC566CDC-C4DE-49F9-A4BE-2C8B1A420047}"= TCP:C:\Program Files\Common Files\SupportSoft\bin\ssrc.exe:ssrc.exe "{07B06876-E5F1-4F8A-AF54-E914EBCA80D5}"= UDP:C:\Program Files\O2\agent\bin\bcont_nm.exe:bcont_nm.exe "{381C1783-1D94-42A0-B867-DA5FFC6B373D}"= TCP:C:\Program Files\O2\agent\bin\bcont_nm.exe:bcont_nm.exe "TCP Query User{18E0361E-C8DD-4473-83C1-0488D3A24671}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent "UDP Query User{0DC96C86-EC8B-45DA-B435-3B90773DD260}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent "{5DF67BFA-D2AE-422E-A08E-7336E3BBDE82}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent (TCP-In) "{1AB60AAB-CDFC-4591-818C-8B919CF91FE6}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent (UDP-In) "{16FE7450-9D03-40E5-97E2-51D59D311A1D}"= UDP:C:\Program Files\UltraVNC\vncviewer.exe:vncviewer.exe "{2040C5BA-D510-4F61-BE1A-D4213AB28C56}"= TCP:C:\Program Files\UltraVNC\vncviewer.exe:vncviewer.exe "TCP Query User{B9D31885-A3CE-4A28-AE68-2CA22F8040E3}C:\\program files\\ultravnc\\winvnc.exe"= UDP:C:\program files\ultravnc\winvnc.exe:VNC server for Win32 "UDP Query User{0844F8CE-71AE-416E-8C63-DE18771896A6}C:\\program files\\ultravnc\\winvnc.exe"= TCP:C:\program files\ultravnc\winvnc.exe:VNC server for Win32 "{C57EFC78-DB6E-4626-8E61-45C9F93F7B04}"= C:\Program Files\Skype\Phone\Skype.exe:Skype "{757BD034-A5F4-4169-B9C4-2903F961A751}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe "TCP Query User{6ED7AE10-8640-4C86-A334-FBE7FE01F591}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= UDP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process "UDP Query User{FC8431FC-1B36-4A2C-9EF7-68B14795F730}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= TCP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process "TCP Query User{5029A56C-813C-41E8-A297-8644E64A2E2C}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= UDP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater "UDP Query User{1CA60C81-7941-42B4-BE53-CF062DEAF35C}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= TCP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater "{7E9621B5-6298-4862-A88F-013E4AC4B0F1}"= UDP:C:\Program Files\DNA\btdna.exe:DNA (TCP-In) "{751B7F15-0A7B-4ED6-A830-48B0D12142DF}"= TCP:C:\Program Files\DNA\btdna.exe:DNA (UDP-In) "{4F6F4F73-5449-4137-AE67-3A7D0FADDAC9}"= C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync "TCP Query User{FB735801-B904-4D6B-9C1E-A80D51A4B7E8}C:\\program files\\java\\jre6\\bin\\javaw.exe"= UDP:C:\program files\java\jre6\bin\javaw.exe:Java(TM) Platform SE binary "UDP Query User{B1B4AE15-5D1E-443E-979A-1268C34FB389}C:\\program files\\java\\jre6\\bin\\javaw.exe"= TCP:C:\program files\java\jre6\bin\javaw.exe:Java(TM) Platform SE binary "{3FA4E719-0885-4DBC-AA09-922DEB581654}"= UDP:C:\Windows\System32\PnkBstrA.exe:PnkBstrA "{756573EF-DFB3-40E1-B993-1BCF491E61B8}"= TCP:C:\Windows\System32\PnkBstrA.exe:PnkBstrA "{89663FC4-B50C-4471-ACA5-52EFA88B7C83}"= UDP:C:\Windows\System32\PnkBstrB.exe:PnkBstrB "{4EADEA1B-BD10-4F7B-B178-CB78175B1A68}"= TCP:C:\Windows\System32\PnkBstrB.exe:PnkBstrB "TCP Query User{BD6F8C99-BD87-46CC-B767-6CECD00BF82B}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox "UDP Query User{EBCB1EAC-F7F6-4102-9F91-7A4E5658F06D}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox "TCP Query User{C187829F-9C77-45D5-9819-751104830A93}C:\\program files\\java\\jre6\\bin\\java.exe"= UDP:C:\program files\java\jre6\bin\java.exe:Java(TM) Platform SE binary "UDP Query User{D6857DF6-C0D2-4E00-B268-77C69E237161}C:\\program files\\java\\jre6\\bin\\java.exe"= TCP:C:\program files\java\jre6\bin\java.exe:Java(TM) Platform SE binary "TCP Query User{8C926CD2-1E14-443D-B9C8-12694DE739E0}C:\\program files\\java\\jdk1.6.0_13\\bin\\java.exe"= UDP:C:\program files\java\jdk1.6.0_13\bin\java.exe:Java(TM) Platform SE binary "UDP Query User{DD4E696A-5A1B-4915-88F2-218AD53A5DE1}C:\\program files\\java\\jdk1.6.0_13\\bin\\java.exe"= TCP:C:\program files\java\jdk1.6.0_13\bin\java.exe:Java(TM) Platform SE binary "{86E7F08D-0553-46AD-AA27-0D5E43355D2E}"= UDP:C:\Program Files\Ventrilo\Ventrilo.exe:Ventrilo.exe "{9EEC77B7-DBE5-4A56-9039-8DA7BD5C2ED2}"= TCP:C:\Program Files\Ventrilo\Ventrilo.exe:Ventrilo.exe "TCP Query User{52673AF1-99EB-4366-A720-5CE0A3BEBDD1}C:\\program files\\musicbrainz picard\\picard.exe"= UDP:C:\program files\musicbrainz picard\picard.exe:The next generation MusicBrainz tagger "UDP Query User{09792AF0-9517-4082-B364-57199B6E0F8B}C:\\program files\\musicbrainz picard\\picard.exe"= TCP:C:\program files\musicbrainz picard\picard.exe:The next generation MusicBrainz tagger "TCP Query User{373A4F62-7CA5-4994-9418-7F03F58A4650}C:\\program files\\bearshare applications\\bearshare\\bearshare.exe"= UDP:C:\program files\bearshare applications\bearshare\bearshare.exe:BearShare "UDP Query User{7F58F017-576D-4F4B-B9B7-BE82CE2B2D56}C:\\program files\\bearshare applications\\bearshare\\bearshare.exe"= TCP:C:\program files\bearshare applications\bearshare\bearshare.exe:BearShare "{7D3A221A-054E-4AEC-98A7-FEF726F9E572}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes "{94470EFA-316E-47A4-92F0-6182CEE62A0D}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes "{A63C8FA1-E4E2-4D5E-81F4-FE9A5120DAED}"= UDP:5353:Adobe CSI CS4 "{CE2DA6E2-566C-4011-921F-D5B7A33C1855}"= UDP:C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:Adobe CSI CS4 "{97093451-9ED1-4E89-AB92-470EB80A973D}"= TCP:C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:Adobe CSI CS4 "{CFDC0625-6850-41A8-9653-B4E70D354913}"= C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe "{5FF23446-4B91-4DAA-BAED-94EE69E3EE0A}"= C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe "{30518B12-0606-4642-8816-E1699E578CCD}"= C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe "{7B463CEB-401C-4980-A172-3E7EC3CC309E}"= C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe "{5E491BDD-F8E8-46B0-8678-DFD8D3F4769A}"= C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:hpfccopy.exe "{A13AF088-17EE-4913-8679-DA409DE3C698}"= C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe "{F4F395F6-D570-416B-8B35-11E4CF983364}"= C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:hpiscnapp.exe "{1DAEE647-750F-4EB7-B15C-3B8E46E566B6}"= C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe:hpqphotocrm.exe "{575F1F2B-5672-419D-847F-B99FB994012E}"= C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:hpqsudi.exe "{DAA5CE32-FB77-499B-97AF-ED8DDF78ADBD}"= C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:hpqpsapp.exe "{9D7120DA-2ACA-451A-BAD6-4F382BAE91D3}"= C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:hpqcopy2.exe "{B57757C4-5EBF-434E-A225-78226597FC08}"= C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:hpqpse.exe "{5982E8AE-7FB7-4675-B624-672B348A4174}"= C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:hpqgplgtupl.exe "{8CD3B1BA-361C-4E53-BE38-210DB2B93436}"= C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:hpqgpc01.exe "{5F56D36A-F102-4CA4-90E1-DE137041410E}"= E:\setup\hpznui01.exe:hpznui01.exe "{029B5184-79C4-416F-9D2E-C0BA8E1222F5}"= TCP:427|RPort=427|C:\Windows\system32\svchost.exe|Svc=HPSLPSVC:SLP_Service "TCP Query User{9B85056D-1A13-4A92-A142-B8B0272B6A23}K:\\program files\\adobe\\adobe dreamweaver cs4\\dreamweaver.exe"= UDP:K:\program files\adobe\adobe dreamweaver cs4\dreamweaver.exe:Adobe Dreamweaver CS4 "UDP Query User{41F78585-07AB-4E27-AC32-042EFCFF2100}K:\\program files\\adobe\\adobe dreamweaver cs4\\dreamweaver.exe"= TCP:K:\program files\adobe\adobe dreamweaver cs4\dreamweaver.exe:Adobe Dreamweaver CS4 "TCP Query User{A17225F1-8422-4A6D-92C9-9B2B99B3EF0A}C:\\program files\\bearshare download client\\bearshareclient.exe"= UDP:C:\program files\bearshare download client\bearshareclient.exe:BearShareClient "UDP Query User{D254F850-8D87-481A-86BF-93697B2FE7D3}C:\\program files\\bearshare download client\\bearshareclient.exe"= TCP:C:\program files\bearshare download client\bearshareclient.exe:BearShareClient "TCP Query User{931CAB88-0626-4FE7-8496-8B6EF55D8F6B}C:\\program files\\musicbrainz picard\\picard.exe"= UDP:C:\program files\musicbrainz picard\picard.exe:The next generation MusicBrainz tagger "UDP Query User{4E5F136B-D714-4F20-8A95-C2ABF7BF6F1E}C:\\program files\\musicbrainz picard\\picard.exe"= TCP:C:\program files\musicbrainz picard\picard.exe:The next generation MusicBrainz tagger "TCP Query User{89A0F388-C075-4E24-AD3B-82E85434EC14}C:\\nexon\\nexon_eu_downloader\\nexon_eu_downloader_engine.exe"= UDP:C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe:NEXON_EU_Downloader_Engine "UDP Query User{87C844DB-A782-4E1D-8C42-B07C1BD2E683}C:\\nexon\\nexon_eu_downloader\\nexon_eu_downloader_engine.exe"= TCP:C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe:NEXON_EU_Downloader_Engine R0 hotcore3;hotcore3;C:\Windows\System32\drivers\hotcore3.sys [4/29/2009 8:26:18 PM 40368] R0 pavboot;pavboot;C:\Windows\System32\drivers\pavboot.sys [9/4/2009 5:14:17 AM 28544] R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\Windows\System32\drivers\avgldx86.sys [9/7/2008 5:18:51 PM 335240] R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [1/31/2009 1 34 PM 297752]R2 sprtsvc_O2;SupportSoft Sprocket Service (O2);C:\Program Files\O2\bin\sprtsvc.exe [6/7/2007 4:19:40 PM 202280] R2 TomTomHOMEService;TomTomHOMEService;C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [8/7/2009 3:31:40 PM 92008] R2 uvnc_service;uvnc_service;C:\Program Files\UltraVNC\winvnc.exe [8/30/2008 3:38:24 PM 1519168] R3 DynCal;Dynamic Calibration Service;C:\Windows\System32\drivers\DynCal.sys [11/14/2003 4:46:40 AM 8192] R3 Mkd2Nadr;Mkd2Nadr;C:\Windows\System32\drivers\Mkd2Nadr.sys [8/27/2009 7:22:29 PM 79104] S3 androidusb;ADB Interface Driver;C:\Windows\System32\drivers\androidusb.sys [4/7/2009 8:14:31 PM 25728] S3 fssfltr;FssFltr;C:\Windows\System32\drivers\fssfltr.sys [2/21/2009 2:53:31 PM 55280] S3 fsssvc;Windows Live Family Safety;C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2/6/2009 7:08:58 PM 533360] S3 hid8101;hid8101;C:\Windows\System32\drivers\hid8101.sys [12/11/2007 2:21:35 AM 31899] S3 Mkd2kfNt;Mkd2kfNt;C:\Windows\System32\drivers\Mkd2kfNT.sys [8/27/2009 7:22:29 PM 131072] S3 npggsvc;nProtect GameGuard Service;C:\Windows\system32\GameMon.des -service --> C:\Windows\system32\GameMon.des -service [?] S3 SandraAgentSrv;SiSoftware Deployment Agent Service;C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe [1/13/2009 2:15:00 AM 98488] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 HPService REG_MULTI_SZ HPSLPSVC hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP . Contents of the 'Scheduled Tasks' folder 2009-09-06 C:\Windows\Tasks\User_Feed_Synchronization-{F1B898F3-48E5-4876-B647-9B59CD0DF168}.job - C:\Windows\system32\msfeedssync.exe [2009-07-29 13:14:33 . 2009-07-21 20:13:15] 2009-09-04 C:\Windows\Tasks\WebReg HP Photosmart C4500 series.job - C:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe [2008-10-16 18:22:04 . 2008-10-16 18:22:04] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.yahoo.com/ mStart Page = hxxp://www.yahoo.com/ mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com IE: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm IE: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 Trusted Zone: gscdn.com\rfonline-full FF - ProfilePath - C:\Users\Rory\AppData\Roaming\Mozilla\Firefox\Profiles\qmhmxhr1.default\ FF - component: C:\Program Files\AVG\AVG8\Firefox\components\avgssff.dll FF - component: C:\Program Files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: C:\Program Files\AhnLab\ASP\MyKeyDefense 2.5\npmkd25aos.dll FF - plugin: C:\Program Files\Microsoft\Office Live\npOLW.dll FF - plugin: C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npijjiFFPlugin1.dll FF - plugin: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\ProgramData\id Software\QuakeLive\npquakezero.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ . ************************************************************************** scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: ************************************************************************** [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\npggsvc] "ImagePath"="C:\Windows\system32\GameMon.des -service" . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\S-1-5-21-2710203144-1966710171-4119019157-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{A2781D05-3722-E3F3-8360-FE7BD3296043}*] "hahnmpkggpempefc"=hex:6a,61,69,6a,6e,65,68,6a,6b,6b,6e,62,61,69,68,6a,6b,62, 65,6d,00,00 "ianmcniabgiadkfcjg"=hex:6a,61,69,6a,6e,65,6b,6a,6b,6b,70,70,6f,66,6e,61,65,6c, 6b,64,00,00 [HKEY_USERS\S-1-5-21-2710203144-1966710171-4119019157-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:c2,75,fd,be,03,ff,5f,54,89,74,93,04,07,89,95,0a,ed,16,79,fe,2e,6f,08, 8d,d8,57,2f,a6,13,fc,32,fb,1f,86,4c,fa,8b,8a,ce,00,74,ce,04,c8,e4,ab,97,2b,\ "??"=hex:27,e3,95,ff,ab,9d,d8,24,b2,61,3e,1f,84,ec,df,b2 . |
|
|
|
|
09-06-2009, 05:30 PM
|
#13 (permalink) |
|
Registered User
Join Date: Nov 2007
Posts: 27
OS: Windows Vista
|
Re: Monopod, b.exe, msa.exe Virus problems
Ok...now AVG uninstalled itself....
Maybe it was something the ComboFix scan did... Should I leave it uninstalled for the time being, or reinstall it? Just in case you want to do any more scans that AVG might affect... |
|
|
|
|
09-06-2009, 05:53 PM
|
#14 (permalink) |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
It's possible that some of AVG's files lost their permissions, as that's what this infection does, among other things. Not sure why that would cause it to uninstall, though.
I'd like to run one more check, to see how things are as far as files with altered permissions Download junction.zip from this link and extract it to it's own folder on your desktop. Right click the peek.bat and Run As administrator, and allow it to run. It will take some time to complete, so please be patient and wait until it finishes. A log will be produced at C:\log.txt. Please attach that log in your next reply.
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Microsoft MVP - Consumer Security 2009
|
|
|
|
|
09-06-2009, 06:09 PM
|
#16 (permalink) |
|
Registered User
Join Date: Nov 2007
Posts: 27
OS: Windows Vista
|
Re: Monopod, b.exe, msa.exe Virus problems
I think it's done already....
The log.txt file popped up in notepad and it's on my screen now... But the Command Prompt window is still open.... So I'm not particularly sure if it's still running or not.... I haven't done anything with it yet....so I want to ask you if there's anything more that's meant to happen? |
|
|
|
|
09-06-2009, 06:11 PM
|
#17 (permalink) |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
Is the log empty?
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Microsoft MVP - Consumer Security 2009
|
|
|
|
|
09-06-2009, 06:14 PM
|
#20 (permalink) |
|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,563
OS: 2000 Pro; XP Pro; XP Home
|
Re: Monopod, b.exe, msa.exe Virus problems
Save the log to your desktop, or somewhere you can easily find it, close it, the command window should close. Then, attach the log to a reply.
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Microsoft MVP - Consumer Security 2009
|
|
|
|
| Thread Tools | |
|
|
