Unknown virus, malware, trojan infection

View previous topic View next topic Go down

Unknown virus, malware, trojan infection

Post by swisc on 11th September 2009, 12:26 pm

I currently run Vista Home Basic. The system is only able to open and run IE in Safe Mode. I attempted to install McAfee Internet Security, but the virusscan component and one other componed failed to install.

I've updated Java JRE and ran JavaRA as instructed. Adobe Reader install failed with message "Windows Installer could not be accessed".

I downloaded and ran "Do a system scan and save logfile" in HijackThis. However, no new window was opened after the scan to show the results. I looked in the location that HijackThis was downloaded for a copy of the results, but when I tried to open the application, the following information was presented: "Windows cannot access the specified device, path or file."

So, I am not able to share the HijackThis log at this time. Please provided suggestions in what I can do next.

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by Belahzur on 11th September 2009, 7:22 pm

Please download SystemLook from one of the links below and save it to your Desktop.
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    Code:

    :filefind
    scecli.dll
    netlogon.dll
    eventlog.dll
    cngaudit.dll

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 11th September 2009, 7:54 pm

SystemLook v1.0 by jpshortstuff (29.08.09)
Log created at 15:52 on 11/09/2009 by Dad (Administrator - Elevation successful)

========== filefind ==========

Searching for "scecli.dll"
C:\Windows\System32\scecli.dll --a--- 177152 bytes [02:34 21/01/2008] [02:34 21/01/2008] 28B84EB538F7E8A0FE8B9299D591E0B9
C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll --a--- 177152 bytes [02:34 21/01/2008] [02:34 21/01/2008] 28B84EB538F7E8A0FE8B9299D591E0B9

Searching for "netlogon.dll"
C:\Windows\System32\netlogon.dll --a--- 592384 bytes [02:33 21/01/2008] [02:33 21/01/2008] A8EFC0B6E75B789F7FD3BA5025D4E37F
C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll --a--- 592384 bytes [02:33 21/01/2008] [02:33 21/01/2008] A8EFC0B6E75B789F7FD3BA5025D4E37F

Searching for "eventlog.dll"
No files found.

Searching for "cngaudit.dl"
No files found.

-=End Of File=-

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by Origin on 12th September 2009, 5:29 am

Please delete this file in red:
C:\Windows\system32\desot.exe

Next, download [You must be registered and logged in to see this link.] file.

Download it to your Desktop.
Double click it to run it; select yes to the registry merge prompt.


While my help is always free, please consider donating to keep this site alive: [You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

Origin
Master
Master

Posts Posts : 2685
Joined Joined : 2009-05-05
Gender Gender : Male
OS OS : Windows Xp Sp3
Points Points : 31493
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 12th September 2009, 11:42 am

I did not locate the desot.exe file on my system.

After downloading ExecuteErrorFix to the desktop and double-click to run, the following message displayed:

"Cannot import C:\Users\Dad\Desktop\ExeError.reg: Not all data was successfully written to the registry. Some keys are open by the sytem or other processes."

I will wait for new instructions...

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by Origin on 12th September 2009, 6:08 pm


  • Please download DDS by sUBs to your Desktop (Important!!) from one of these locations:
    [You must be registered and logged in to see this link.]
    [You must be registered and logged in to see this link.]
  • Double click DDS.scr to run.
  • When complete, two logs will open. Save both of the report to your Desktop.
  • Copy and paste DDS.txt back here, I don't need to see attach.txt just yet.


While my help is always free, please consider donating to keep this site alive: [You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

Origin
Master
Master

Posts Posts : 2685
Joined Joined : 2009-05-05
Gender Gender : Male
OS OS : Windows Xp Sp3
Points Points : 31493
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 12th September 2009, 6:46 pm

This operation failed. I downloaded the dds file to the desktop. When I double-clicked, it opened like it was going to run a program but then closed immediately.

Next suggestion?

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by Belahzur on 12th September 2009, 10:32 pm

Hello.

Please download [You must be registered and logged in to see this link.] file.

  • Please download Junction.zip and save it.
  • Unzip it and put junction.exe in the Windows directory (C:\Windows).
  • Go to Start => Run... => Copy and paste the following command in the run box and click OK:

    cmd /c junction -s c:\ >log.txt&log.txt& del log.txt

  • A command window opens starting to scan the system. Wait until a log file opens. Copy and paste or attach the content of it.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 12th September 2009, 11:23 pm

First of 2 posts with log file info:


Junction v1.05 - Windows junction creator and reparse point viewer
Copyright (C) 2000-2007 Mark Russinovich
Systems Internals - [You must be registered and logged in to see this link.]

\\?\c:\\Documents and Settings: JUNCTION
Print Name : C:\Users
Substitute Name: C:\Users


Failed to open \\?\c:\\pagefile.sys: The process cannot access the file because it is being used by another process.



Failed to open \\?\c:\\System Volume Information: Access is denied.


...

...

...

...

...

...

...


Failed to open \\?\c:\\Program Files\Spybot - Search & Destroy\SpybotSD.exe: Access is denied.


...\\?\c:\\ProgramData\Application Data: JUNCTION
Print Name : C:\ProgramData
Substitute Name: C:\ProgramData

\\?\c:\\ProgramData\Desktop: JUNCTION
Print Name : C:\Users\Public\Desktop
Substitute Name: C:\Users\Public\Desktop

\\?\c:\\ProgramData\Documents: JUNCTION
Print Name : C:\Users\Public\Documents
Substitute Name: C:\Users\Public\Documents

\\?\c:\\ProgramData\Favorites: JUNCTION
Print Name : C:\Users\Public\Favorites
Substitute Name: C:\Users\Public\Favorites

\\?\c:\\ProgramData\Start Menu: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Start Menu
Substitute Name: C:\ProgramData\Microsoft\Windows\Start Menu

\\?\c:\\ProgramData\Templates: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Templates
Substitute Name: C:\ProgramData\Microsoft\Windows\Templates



.
Failed to open \\?\c:\\ProgramData\Microsoft\Crypto\RSA\MachineKeys\138c93f3d772802a10e3f67007f1e24f_d12f4d8e-55ea-468b-89aa-fc8e760505f0: Access is denied.



Failed to open \\?\c:\\ProgramData\Microsoft\Crypto\RSA\MachineKeys\89f23b2b6270a8866ba861d0436f5615_d12f4d8e-55ea-468b-89aa-fc8e760505f0: Access is denied.


.\\?\c:\\Users\All Users: UNKNOWN MICROSOFT REPARSE POINT

\\?\c:\\Users\Default User: JUNCTION
Print Name : C:\Users\Default
Substitute Name: C:\Users\Default

\\?\c:\\Users\All Users\Application Data: JUNCTION
Print Name : C:\ProgramData
Substitute Name: C:\ProgramData

\\?\c:\\Users\All Users\Desktop: JUNCTION
Print Name : C:\Users\Public\Desktop
Substitute Name: C:\Users\Public\Desktop

\\?\c:\\Users\All Users\Documents: JUNCTION
Print Name : C:\Users\Public\Documents
Substitute Name: C:\Users\Public\Documents

\\?\c:\\Users\All Users\Favorites: JUNCTION
Print Name : C:\Users\Public\Favorites
Substitute Name: C:\Users\Public\Favorites

\\?\c:\\Users\All Users\Start Menu: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Start Menu
Substitute Name: C:\ProgramData\Microsoft\Windows\Start Menu

\\?\c:\\Users\All Users\Templates: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Templates
Substitute Name: C:\ProgramData\Microsoft\Windows\Templates

.


Failed to open \\?\c:\\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\138c93f3d772802a10e3f67007f1e24f_d12f4d8e-55ea-468b-89aa-fc8e760505f0: Access is denied.



Failed to open \\?\c:\\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\89f23b2b6270a8866ba861d0436f5615_d12f4d8e-55ea-468b-89aa-fc8e760505f0: Access is denied.


.\\?\c:\\Users\Dad\Application Data: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming
Substitute Name: C:\Users\Dad\AppData\Roaming

\\?\c:\\Users\Dad\Cookies: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Cookies
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Cookies

\\?\c:\\Users\Dad\Local Settings: JUNCTION
Print Name : C:\Users\Dad\AppData\Local
Substitute Name: C:\Users\Dad\AppData\Local

\\?\c:\\Users\Dad\My Documents: JUNCTION
Print Name : C:\Users\Dad\Documents
Substitute Name: C:\Users\Dad\Documents

\\?\c:\\Users\Dad\NetHood: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Network Shortcuts
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\?\c:\\Users\Dad\PrintHood: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

\\?\c:\\Users\Dad\Recent: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Recent
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Recent

\\?\c:\\Users\Dad\SendTo: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\SendTo
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\SendTo

\\?\c:\\Users\Dad\Start Menu: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu

\\?\c:\\Users\Dad\Templates: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Templates
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Templates

.\\?\c:\\Users\Dad\AppData\Local\Application Data: JUNCTION
Print Name : C:\Users\Dad\AppData\Local
Substitute Name: C:\Users\Dad\AppData\Local

\\?\c:\\Users\Dad\AppData\Local\History: JUNCTION
Print Name : C:\Users\Dad\AppData\Local\Microsoft\Windows\History
Substitute Name: C:\Users\Dad\AppData\Local\Microsoft\Windows\History

\\?\c:\\Users\Dad\AppData\Local\Temporary Internet Files: JUNCTION
Print Name : C:\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files
Substitute Name: C:\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files

.

.
Failed to open \\?\c:\\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QFMED9DK\winlogon[1].scr: Access is denied.


..
Failed to open \\?\c:\\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UIJYKFX3\winlogon[1].scr: Access is denied.





Failed to open \\?\c:\\Users\Dad\Desktop\HijackThis.exe: Access is denied.



Failed to open \\?\c:\\Users\Dad\Desktop\hijackthis.scr: Access is denied.


\\?\c:\\Users\Dad\Documents\My Music: JUNCTION
Print Name : C:\Users\Dad\Music
Substitute Name: C:\Users\Dad\Music

\\?\c:\\Users\Dad\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Dad\Pictures
Substitute Name: C:\Users\Dad\Pictures

\\?\c:\\Users\Dad\Documents\My Videos: JUNCTION
Print Name : C:\Users\Dad\Videos
Substitute Name: C:\Users\Dad\Videos


Failed to open \\?\c:\\Users\Dad\Downloads\winlogon.scr: Access is denied.


\\?\c:\\Users\Default\Application Data: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming
Substitute Name: C:\Users\Default\AppData\Roaming

\\?\c:\\Users\Default\Cookies: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies

\\?\c:\\Users\Default\Local Settings: JUNCTION
Print Name : C:\Users\Default\AppData\Local
Substitute Name: C:\Users\Default\AppData\Local

\\?\c:\\Users\Default\My Documents: JUNCTION
Print Name : C:\Users\Default\Documents
Substitute Name: C:\Users\Default\Documents

\\?\c:\\Users\Default\NetHood: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\?\c:\\Users\Default\PrintHood: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

\\?\c:\\Users\Default\Recent: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent

\\?\c:\\Users\Default\SendTo: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo

\\?\c:\\Users\Default\Start Menu: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu

\\?\c:\\Users\Default\Templates: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates

\\?\c:\\Users\Default\AppData\Local\Application Data: JUNCTION
Print Name : C:\Users\Default\AppData\Local
Substitute Name: C:\Users\Default\AppData\Local

\\?\c:\\Users\Default\AppData\Local\History: JUNCTION
Print Name : C:\Users\Default\AppData\Local\Microsoft\Windows\History
Substitute Name: C:\Users\Default\AppData\Local\Microsoft\Windows\History

\\?\c:\\Users\Default\AppData\Local\Temporary Internet Files: JUNCTION
Print Name : C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files
Substitute Name: C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files

\\?\c:\\Users\Default\Documents\My Music: JUNCTION
Print Name : C:\Users\Default\Music
Substitute Name: C:\Users\Default\Music

\\?\c:\\Users\Default\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Default\Pictures
Substitute Name: C:\Users\Default\Pictures

\\?\c:\\Users\Default\Documents\My Videos: JUNCTION
Print Name : C:\Users\Default\Videos
Substitute Name: C:\Users\Default\Videos

\\?\c:\\Users\Holly\Application Data: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming
Substitute Name: C:\Users\Holly\AppData\Roaming

\\?\c:\\Users\Holly\Cookies: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Cookies
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Cookies

\\?\c:\\Users\Holly\Local Settings: JUNCTION
Print Name : C:\Users\Holly\AppData\Local
Substitute Name: C:\Users\Holly\AppData\Local

\\?\c:\\Users\Holly\My Documents: JUNCTION
Print Name : C:\Users\Holly\Documents
Substitute Name: C:\Users\Holly\Documents

\\?\c:\\Users\Holly\NetHood: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Network Shortcuts
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\?\c:\\Users\Holly\PrintHood: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

\\?\c:\\Users\Holly\Recent: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Recent
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Recent

\\?\c:\\Users\Holly\SendTo: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\SendTo
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\SendTo

\\?\c:\\Users\Holly\Start Menu: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Start Menu
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Start Menu

\\?\c:\\Users\Holly\Templates: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Templates
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Templates

\\?\c:\\Users\Holly\AppData\Local\Application Data: JUNCTION
Print Name : C:\Users\Holly\AppData\Local
Substitute Name: C:\Users\Holly\AppData\Local

\\?\c:\\Users\Holly\AppData\Local\History: JUNCTION
Print Name : C:\Users\Holly\AppData\Local\Microsoft\Windows\History
Substitute Name: C:\Users\Holly\AppData\Local\Microsoft\Windows\History

\\?\c:\\Users\Holly\AppData\Local\Temporary Internet Files: JUNCTION
Print Name : C:\Users\Holly\AppData\Local\Microsoft\Windows\Temporary Internet Files
Substitute Name: C:\Users\Holly\AppData\Local\Microsoft\Windows\Temporary Internet Files

..\\?\c:\\Users\Holly\Documents\My Music: JUNCTION
Print Name : C:\Users\Holly\Music
Substitute Name: C:\Users\Holly\Music

\\?\c:\\Users\Holly\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Holly\Pictures
Substitute Name: C:\Users\Holly\Pictures

\\?\c:\\Users\Holly\Documents\My Videos: JUNCTION
Print Name : C:\Users\Holly\Videos
Substitute Name: C:\Users\Holly\Videos

.\\?\c:\\Users\Public\Documents\My Music: JUNCTION
Print Name : C:\Users\Public\Music
Substitute Name: C:\Users\Public\Music

\\?\c:\\Users\Public\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Public\Pictures
Substitute Name: C:\Users\Public\Pictures

\\?\c:\\Users\Public\Documents\My Videos: JUNCTION
Print Name : C:\Users\Public\Videos
Substitute Name: C:\Users\Public\Videos

\\?\c:\\Windows\AppPatch\Custom\Custom: MOUNT POINT
Substitute Name: \Device\__max++>\^

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 12th September 2009, 11:26 pm

2nd of 3 posts of log file:


...\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2EBD.tmp\ZAP2EBD.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4AF4.tmp\ZAP4AF4.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9AF7.tmp\ZAP9AF7.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9B0.tmp\ZAP9B0.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA5B0.tmp\ZAPA5B0.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB0D7.tmp\ZAPB0D7.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE420.tmp\ZAPE420.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEA5E.tmp\ZAPEA5E.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\temp\temp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\tmp\tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^



\\?\c:\\Windows\Debug\UserMode\UserMode: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\Globalization\Globalization: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Help\Corporate\Corporate: MOUNT POINT
Substitute Name: \Device\__max++>\^

..

.\\?\c:\\Windows\Installer\$PatchCache$\Managed\000021091A0090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109411090400000000000F01FEC\12.0.4518\12.0.4518: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109440090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109510090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109511090400000000000F01FEC\12.0.4518\12.0.4518: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109610090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109711090400000000000F01FEC\12.0.4518\12.0.4518: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109810090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109910090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109A10090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109B10090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\LiveKernelReports\LiveKernelReports: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Microsoft.NET\authman\authman: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\Minidump\Minidump: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\nap\configuration\configuration: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Panther\setup.exe\setup.exe: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\PCHEALTH\ERRORREP\QHEADLES\QHEADLES: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\PCHEALTH\ERRORREP\QSIGNOFF\QSIGNOFF: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\PLA\Templates\Templates: MOUNT POINT
Substitute Name: \Device\__max++>\^



\\?\c:\\Windows\Registration\CRMLog\CRMLog: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SchCache\SchCache: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\security\logs\logs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\security\templates\templates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\GameExplorer\GameExplorer: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Local\PnrpSqm\PnrpSqm: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStore\Tfs_DAV\Tfs_DAV: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\Description Documents\Description Documents: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Recent\Recent: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\Templates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Desktop\Desktop: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Documents\Documents: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Downloads\Downloads: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Favorites\Favorites: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Links\Links: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Music\Music: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Pictures\Pictures: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Saved Games\Saved Games: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Videos\Videos: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\GameExplorer\GameExplorer: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\SCPD\SCPD: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Temp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Recent\Recent: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\Templates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Desktop\Desktop: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Documents\Documents: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Downloads\Downloads: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Favorites\Favorites: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Links\Links: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Music\Music: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Pictures\Pictures: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Saved Games\Saved Games: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Videos\Videos: MOUNT POINT
Substitute Name: \Device\__max++>\^

...

.\\?\c:\\Windows\SoftwareDistribution\AuthCabs\Downloaded\Downloaded: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16919_none_f0a013de6e53b9ab\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16919_none_f0a013de6e53b9ab: MOUNT POINT
Substitute Name: \Device\__max++>\^

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 12th September 2009, 11:27 pm

3 of 3 log file:

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21119_none_f12988cb87718cb7\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21119_none_f12988cb87718cb7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18322_none_f27480926b88b52c\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18322_none_f27480926b88b52c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22511_none_f307eee5849f1cd5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22511_none_f307eee5849f1cd5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18103_none_f4719482689de8ec\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18103_none_f4719482689de8ec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22215_none_f4f261f581c1d755\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22215_none_f4f261f581c1d755: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132: MOUNT POINT
Substitute Name: \Device\__max++>\^

..

.\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.16908_en-us_80aa46aabe6988cc\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.16908_en-us_80aa46aabe6988cc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.21108_en-us_8133bb97d7875bd8\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.21108_en-us_8133bb97d7875bd8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.18311_en-us_827eb35ebb9e844d\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.18311_en-us_827eb35ebb9e844d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.22497_en-us_82b7d285d4f79ba9\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.22497_en-us_82b7d285d4f79ba9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.18091_en-us_840ea5e6b905b8f9\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.18091_en-us_840ea5e6b905b8f9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.22200_en-us_84f89399d1db411a\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.22200_en-us_84f89399d1db411a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.16908_none_586821dd6d61016f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.16908_none_586821dd6d61016f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.21108_none_58f196ca867ed47b\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.21108_none_58f196ca867ed47b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.18311_none_5a3c8e916a95fcf0\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.18311_none_5a3c8e916a95fcf0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.22497_none_5a75adb883ef144c\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.22497_none_5a75adb883ef144c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.18091_none_5bcc811967fd319c\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.18091_none_5bcc811967fd319c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.22200_none_5cb66ecc80d2b9bd\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.22200_none_5cb66ecc80d2b9bd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.16908_en-us_f28bf998a1c9cb0c\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.16908_en-us_f28bf998a1c9cb0c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.21108_en-us_f3156e85bae79e18\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.21108_en-us_f3156e85bae79e18: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.18311_en-us_f460664c9efec68d\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.18311_en-us_f460664c9efec68d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.22497_en-us_f4998573b857dde9\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.22497_en-us_f4998573b857dde9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.18091_en-us_f5f058d49c65fb39\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.18091_en-us_f5f058d49c65fb39: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.22200_en-us_f6da4687b53b835a\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.22200_en-us_f6da4687b53b835a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\cc9db45d4d7a49bee9efe23f364bf80b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\cc9db45d4d7a49bee9efe23f364bf80b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.16870_none_389b60c97fc740bd\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.16870_none_389b60c97fc740bd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.21067_none_3936a7a898d6a939\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.21067_none_3936a7a898d6a939: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.18272_none_3a83a0037cec045c\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.18272_none_3a83a0037cec045c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.22450_none_3b20ddf895fb36bd\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.22450_none_3b20ddf895fb36bd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.18051_none_3c7eb35f7a03056e\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.18051_none_3c7eb35f7a03056e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.22152_none_3d095074931fbe8f\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.22152_none_3d095074931fbe8f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.16870_none_7a810285659cf00c\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.16870_none_7a810285659cf00c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.21067_none_7b1c49647eac5888\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.21067_none_7b1c49647eac5888: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.18272_none_7c6941bf62c1b3ab\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.18272_none_7c6941bf62c1b3ab: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.22450_none_7d067fb47bd0e60c\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.22450_none_7d067fb47bd0e60c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.18051_none_7e64551b5fd8b4bd\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.18051_none_7e64551b5fd8b4bd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.22152_none_7eeef23078f56dde\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.22152_none_7eeef23078f56dde: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\PostRebootEventCache\PostRebootEventCache: MOUNT POINT
Substitute Name: \Device\__max++>\^

.
Failed to open \\?\c:\\Windows\System32\cngaudit.dll: The process cannot access the file because it is being used by another process.




.
Failed to open \\?\c:\\Windows\System32\mrt.exe: Access is denied.


..
Failed to open \\?\c:\\Windows\System32\WerFault.exe: Access is denied.


\\?\c:\\Windows\System32\0409\0409: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\Branding\en-US\en-US: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}: MOUNT POINT
Substitute Name: \Device\__max++>\^



..\\?\c:\\Windows\System32\com\dmp\dmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\Journal\Journal: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\systemprofile\AppData\Local\Acer ePower Management V4\Acer ePower Management V4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs: MOUNT POINT
Substitute Name: \Device\__max++>\^

.

...

...

...

...

...

...\\?\c:\\Windows\System32\GroupPolicy\Machine\Machine: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\inetsrv\inetsrv: MOUNT POINT
Substitute Name: \Device\__max++>\^


Failed to open \\?\c:\\Windows\System32\LogFiles\WMI\RtBackup: Access is denied.




\\?\c:\\Windows\System32\MUI\dispspec\dispspec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\OEM\AcerSystem\AcerSystem: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\System32\setup\en-US\en-US: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\SMI\Manifests\Manifests: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\spool\drivers\IA64\IA64: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\System32\spool\drivers\x64\x64: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\spool\PRINTERS\PRINTERS: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\spool\SERVERS\SERVERS: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\Tasks\Microsoft\Windows\SyncCenter\SyncCenter: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\Tasks\Microsoft\Windows\WindowsCalendar\WindowsCalendar: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\Tasks\Microsoft\Windows Defender\Windows Defender: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\System32\wbem\Logs\Logs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\wbem\MOF\bad\bad: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\wbem\MOF\good\good: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\winevt\TraceFormat\TraceFormat: MOUNT POINT
Substitute Name: \Device\__max++>\^



\\?\c:\\Windows\Temp\Google Toolbar\Google Toolbar: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Temp\SiteAdvisor\SiteAdvisor: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\tracing\tracing: MOUNT POINT
Substitute Name: \Device\__max++>\^

...

...

...

...

...

...

\\?\c:\\Windows\winsxs\InstallTemp\InstallTemp: MOUNT POINT
Substitute Name: \Device\__max++>\^

...

...

...

...

...

...

...

...

..\\?\c:\\Windows\winsxs\Temp\PendingDeletes\PendingDeletes: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\winsxs\Temp\PendingRenames\PendingRenames: MOUNT POINT
Substitute Name: \Device\__max++>\^

.

...
Failed to open \\?\c:\\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18000_none_70071ca23cc95139\WerFault.exe: Access is denied.



Failed to open \\?\c:\\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18145_none_6fe0e04a3ce53cd7\WerFault.exe: Access is denied.

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by Belahzur on 14th September 2009, 12:21 am

Hello.

Please download [You must be registered and logged in to see this link.] file.[list]

Place it next to Hijack This on your Desktop, then drag and drop Hijack This onto it.
Wait for it to run and it will say ok.

Try running Hijack This now.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 14th September 2009, 1:14 pm

Per my initial post on 9-11, the HJT program does not execute. The HJT desktop icon shows"??"s on it after I attempted to run it initially and says that the file type is: Screen Saver. When I try to move the icon to the recycle bin, I get a message that says: "Destination folder access denied". When I attempt to uninstall the program, I get the message: "You do not have sufficient access to uninstall Hijackthis 2.0.2. Please contact your system adnministrator"

I was able to download a new HJT executable from the link on the Trend Micro site: [You must be registered and logged in to see this link.]

I double clicked HJT after I had dragged it onto the "Inherit" program. It opened appeared to be running properly, but it then closed. The desktop icon now has "??"s on it and when I try to run it I get a dialog box that says: "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item"

I now await further suggestions from GeekPolice!

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by Belahzur on 14th September 2009, 9:08 pm

Please download SilentRunners from here:
[You must be registered and logged in to see this link.]
Unzip it to the desktop and double-click on it. If you get any kind of warning message about scripts, please choose to allow the script to run. When the scan is finished, a message will pop up and a logfile will have been created on the desktop. Please post the entire contents of this logfile for me to see.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 14th September 2009, 9:32 pm

this seemed to run and post a logfile, but I can't find it. The message that was displayed said the document was located in:

Holly-Laptop 2009-09-14 17.25.34.txt

I did a search on that and could not locate. Please help. thanks.

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by Belahzur on 14th September 2009, 11:11 pm

Hello.
Place silentrunners.vbs in the C:\ drive and re-run it. The log will/should appear in the C:\ drive then.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by swisc on 15th September 2009, 1:43 am

I placed the program in: c:\silentrunners.zip. After running the program, I get a dialoge box that says: "File is located in: Start-up Programs (Holly-Laptop) 09-14-09 21.31.37.16.txt

I can't locate this file anywhere. Is there any other assistance you can offer? I wish we could talk or communicate directly as I feel I'm missing something on my side.

swisc
Novice
Novice

Posts Posts : 21
Joined Joined : 2009-03-05
OS OS : xp
Points Points : 28352
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Unknown virus, malware, trojan infection

Post by Belahzur on 15th September 2009, 5:47 pm

Hello.
Did you extract the vbs file from the zip file?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum