Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 91804 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

[Resolved] Computer Infected Please Help...


  • This topic is locked This topic is locked
118 replies to this topic

#61 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,059 posts
  • MVP

Posted 30 October 2009 - 07:21 PM

Did GMER run successfully, if so, please post the GMER log.

Please run this scan as well


Please download Sysprot Antirootkit from >>>HERE<<<

Unzip it into a folder on your desktop.

  • Double click Sysprot.exe to start the program.
  • Click on the Log tab.
  • In the Write to log box select ALL ITEMS
  • Look near the bottom left, and Check Hidden Objects Only
  • Click on the Create Log button on the bottom right.
  • After a few seconds a new window should appear.
  • Select Scan Root Drive. Click on the Start button.
  • When it is complete a new window will appear to indicate that the scan is finished.
  • The log will be saved automatically in the same folder Sysprot.exe was extracted to.
  • Open the text file and copy/paste the log here.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015

    Advertisements

Register to Remove


#62 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 30 October 2009 - 09:46 PM

Gmer never provided a new log.. I ran it 3 times... Attached File  SysProtLog.txt   493.67KB   291 downloads

#63 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,059 posts
  • MVP

Posted 31 October 2009 - 04:01 AM

Hi,

Please run the following:

Please download Junction.zip to your desktop.
Unzip the folder to your desktop

Please open Notepad
Click Start , then Run
Type notepad.exe in the Run Box.
Copy and Paste everything from the Quote box into Notepad:

@echo off
cls
junction -s c:\ >> log.txt
notepad log.txt
exit

Save the file to your DESKTOP as "junction.bat".
Make sure to save it with the quotes. Once saved, the icon to click should look like this on your desktop:
Posted Image
Double click Junction.bat.
Please post the resultant log here.


Also, can you please describe in detail how your computer is behaving and what outstanding issues there are.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#64 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,059 posts
  • MVP

Posted 31 October 2009 - 08:42 AM

Hi,

I need you to do this as well.


Please run this from an elevated command window


Go to Start menu.

Type cmd in the Search Menu

Press Ctrl + SHIFT and Click on the cmd shortcut on the Start Menu. Ctrl-Shift-Enter is the general keyboard shortcut that triggers elevation to “Run as Administrator”.

Press Alt+C from the keyboard or click Continue to confirm the UAC elevation warning prompt and the administrative privileged command prompt will be opened.
Then highlight and copy the contents of the codebox then right click in the command window and Paste


@echo off
echo.>"%userprofile%\desktop\look.txt"
cd %systemroot%
dir cngaudit.dll eventlog.dll netlogon.dll scecli.dll logevent.dll ntelogon.dll sceclt.dll /a h /s>>"%userprofile%\desktop\look.txt"
start notepad "%userprofile%\desktop\look.txt"
exit
cls

A notepad file will open on your desktop called look.txt. Please post the content of look.txt in your next reply

Also,

please do an F8 restart and tell me if "Repair your Computer" is an option

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#65 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 08:57 AM

The computer seems to be running fine... I still can not run HJT and I had to install a new version of malwarebytes to my D drive because it would not run in C or could not uninstall it...



Junction v1.05 - Windows junction creator and reparse point viewer
Copyright © 2000-2007 Mark Russinovich
Systems Internals - http://www.sysinternals.com

\\?\c:\\Documents and Settings: JUNCTION
Print Name : C:\Users
Substitute Name: C:\Users


Failed to open \\?\c:\\hiberfil.sys: The process cannot access the file because it is being used by another process.



Failed to open \\?\c:\\pagefile.sys: The process cannot access the file because it is being used by another process.


...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

.

#66 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 01:03 PM

F8 takes me to boot set up and F5 takes me to the options of SafeMode or Last Known Configuration... Volume in drive C has no label. Volume Serial Number is 8431-7D92 Directory of C:\Windows\System32 04/11/2009 02:28 AM 592,896 netlogon.dll Directory of C:\Windows\System32 04/11/2009 02:28 AM 177,152 scecli.dll Directory of C:\Windows\System32 11/02/2006 05:46 AM 11,776 logevent.dll 3 File(s) 781,824 bytes Directory of C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6 11/02/2006 05:46 AM 11,776 cngaudit.dll 1 File(s) 11,776 bytes Directory of C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12 01/20/2008 10:25 PM 177,152 scecli.dll 1 File(s) 177,152 bytes Directory of C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e 04/11/2009 02:28 AM 177,152 scecli.dll 1 File(s) 177,152 bytes Directory of C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857 01/20/2008 10:24 PM 592,384 netlogon.dll 1 File(s) 592,384 bytes Directory of C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3 04/11/2009 02:28 AM 592,896 netlogon.dll 1 File(s) 592,896 bytes Total Files Listed: 8 File(s) 2,333,184 bytes 0 Dir(s) 70,117,621,760 bytes free

#67 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,059 posts
  • MVP

Posted 31 October 2009 - 01:35 PM

when you try and run combofix...do you get an error message about permissions? have you been able to totally disable your security programs?

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#68 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,059 posts
  • MVP

Posted 31 October 2009 - 02:01 PM

Hi,

Please do the following:

From an elevated command prompt: please run the following command:

Go to Start menu.

Type cmd in the Search Menu

Press Ctrl + SHIFT and Click on the cmd shortcut on the Start Menu. Ctrl-Shift-Enter is the general keyboard shortcut that triggers elevation to “Run as Administrator”.

Press Alt+C from the keyboard or click Continue to confirm the UAC elevation warning prompt and the administrative privileged command prompt will be opened.

Then highlight and copy the contents of the codebox then right click in the command window and Paste

ren c:\windows\system32\logevent.dll cngaudit.dll


NEXT

Please post a fresh win32kDiag log

  • Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
  • When it states "Finished! Press any key to exit...", press any key on your keyboard to close the program.
  • Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as a reply to this topic.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#69 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 02:01 PM

No and Yes..

No, get no error messages from ComboFix, it just stays stuck on preparing to run or preparing to make a restore point...

Yes I have disabled AV and PF.. Unless there is something else I am to disable... I run Eset Smart security and I disable it by clicking Temporarily disable Antivirus and Antispyware protection and in the persomal firewall there are 2 option fields; Network Traffic Filtering and under it are these options: Block all network traffic: Disconnect network and what I always click is Disable filtering: Allow all traffic... The other options in firewall is Interacting filtering mode: and under it are these options.. Switch to automatic filtering mode, Switch to automatic filtering mode with exceptions, Configure rules and zones, Change the protection mode of your computer in the network and at the bottom is .. Advanced personal firewall setup...

Edited by Joecastle, 31 October 2009 - 02:02 PM.


#70 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,059 posts
  • MVP

Posted 31 October 2009 - 02:02 PM

OK good, if we can get that one file renamed as per the above instructions then and get a fresh log, then we'll take it from there.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015

    Advertisements

Register to Remove


#71 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 02:08 PM

[quote name='CatByte' date='Oct 31 2009, 04:01 PM' post='607218']
Hi,

Please do the following:

From an elevated command prompt: please run the following command:

Go to Start menu.

Type cmd in the Search Menu

Press Ctrl + SHIFT and Click on the cmd shortcut on the Start Menu. Ctrl-Shift-Enter is the general keyboard shortcut that triggers elevation to “Run as Administrator”.

Press Alt+C from the keyboard or click Continue to confirm the UAC elevation warning prompt and the administrative privileged command prompt will be opened.

Then highlight and copy the contents of the codebox then right click in the command window and Paste

ren c:\windows\system32\logevent.dll cngaudit.dll
After pasting in cmd box, Then what. I hit enter and nothing happens..?

#72 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 02:10 PM

Ahh.. I did it again and it says the following: The system cannot find the file specified..

I am running Win32diag

#73 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 02:15 PM

Here is Win32diag Running from: C:\Users\Viper1\Desktop\Win32kDiag.exe Log file at : C:\Users\Viper1\Desktop\Win32kDiag.txt WARNING: Could not get backup privileges! Searching 'C:\Windows'... Found mount point : C:\Windows\AppPatch\Custom\Custom Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\CSC\v2.0.6\namespace\namespace Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Globalization\Globalization Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Microsoft.NET\authman\authman Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16916_none_ebdb680516458e6e\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16916_none_ebdb680516458e6e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21116_none_ec64dcf22f63617a\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21116_none_ec64dcf22f63617a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16916_none_b2f810b7d9a605d2\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16916_none_b2f810b7d9a605d2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21116_none_b38185a4f2c3d8de\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21116_none_b38185a4f2c3d8de: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18319_none_b4e1503bd6c9e2c8\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18319_none_b4e1503bd6c9e2c8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22508_none_b574be8eefe04a71\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22508_none_b574be8eefe04a71: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18100_none_b6c9915bd3f03513\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18100_none_b6c9915bd3f03513: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22212_none_b74a5eceed14237c\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22212_none_b74a5eceed14237c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16916_none_deda9f807f4ec541\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16916_none_deda9f807f4ec541: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21116_none_df64146d986c984d\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21116_none_df64146d986c984d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18319_none_e0c3df047c72a237\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18319_none_e0c3df047c72a237: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22508_none_e1574d57958909e0\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22508_none_e1574d57958909e0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.16916_none_8d4e9eec54b4aaf6\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.16916_none_8d4e9eec54b4aaf6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.21116_none_8dd813d96dd27e02\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.21116_none_8dd813d96dd27e02: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16916_none_fffdec59a4af2c65\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16916_none_fffdec59a4af2c65: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21116_none_00876146bdccff71\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21116_none_00876146bdccff71: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18319_none_01e72bdda1d3095b\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18319_none_01e72bdda1d3095b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22508_none_027a9a30bae97104\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22508_none_027a9a30bae97104: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18100_none_03cf6cfd9ef95ba6\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18100_none_03cf6cfd9ef95ba6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22212_none_04503a70b81d4a0f\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22212_none_04503a70b81d4a0f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_none_726565555a594d2c\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_none_726565555a594d2c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_none_72eeda4273772038\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_none_72eeda4273772038: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_none_744ea4d9577d2a22\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_none_744ea4d9577d2a22: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_none_74e2132c709391cb\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_none_74e2132c709391cb: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_none_ac471aa909a2040b\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_none_ac471aa909a2040b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_none_acd08f9622bfd717\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_none_acd08f9622bfd717: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_none_ae305a2d06c5e101\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_none_ae305a2d06c5e101: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_none_aec3c8801fdc48aa\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_none_aec3c8801fdc48aa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_none_f9a70f336e9aa6b8\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_none_f9a70f336e9aa6b8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_none_fa30842087b879c4\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_none_fa30842087b879c4: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_none_fb904eb76bbe83ae\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_none_fb904eb76bbe83ae: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_none_fc23bd0a84d4eb57\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_none_fc23bd0a84d4eb57: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_none_fd788fd768e4d5f9\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_none_fd788fd768e4d5f9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_none_fdf95d4a8208c462\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_none_fdf95d4a8208c462: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_none_95db47eb84802ce6\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_none_95db47eb84802ce6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_none_9664bcd89d9dfff2\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_none_9664bcd89d9dfff2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb83283d527f1d\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb83283d527f1d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84f81556705229\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84f81556705229: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4c2ac3a765c13\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4c2ac3a765c13: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_607830ff538cc3bc\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_607830ff538cc3bc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916_none_f1827f5cbd02b6c0\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916_none_f1827f5cbd02b6c0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116_none_f20bf449d62089cc\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116_none_f20bf449d62089cc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319_none_f36bbee0ba2693b6\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319_none_f36bbee0ba2693b6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508_none_f3ff2d33d33cfb5f\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508_none_f3ff2d33d33cfb5f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16916_none_353b610816ff3030\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16916_none_353b610816ff3030: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21116_none_35c4d5f5301d033c\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21116_none_35c4d5f5301d033c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18319_none_3724a08c14230d26\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18319_none_3724a08c14230d26: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22508_none_37b80edf2d3974cf\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22508_none_37b80edf2d3974cf: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_none_45b8a3358f604ac2\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_none_45b8a3358f604ac2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_none_46421822a87e1dce\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_none_46421822a87e1dce: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_none_47a1e2b98c8427b8\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_none_47a1e2b98c8427b8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_none_4835510ca59a8f61\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_none_4835510ca59a8f61: 3 Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl [1] 2009-10-31 15:00:07 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl () Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl [1] 2009-10-31 15:00:10 1368 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl () Found mount point : C:\Windows\tracing\tracing Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\winsxs\Temp\PendingDeletes\PendingDeletes Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\winsxs\Temp\PendingRenames\PendingRenames Mount point destination : \Device\__max++>\^ Finished!

#74 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,059 posts
  • MVP

Posted 31 October 2009 - 02:38 PM

Hi,

Please do the following:

From an elevated command prompt: please run the following command:

Go to Start menu.

Type cmd in the Search Menu

Press Ctrl + SHIFT and Click on the cmd shortcut on the Start Menu. Ctrl-Shift-Enter is the general keyboard shortcut that triggers elevation to “Run as Administrator”.

Press Alt+C from the keyboard or click Continue to confirm the UAC elevation warning prompt and the administrative privileged command prompt will be opened.

Then highlight and copy the contents of the codebox then right click in the command window and Paste

cd "%userprofile%\desktop"
inherit.exe C:\Windows\AppPatch\Custom
inherit.exe C:\Windows\CSC
inherit.exe C:\Windows\Globalization
inherit.exe C:\Windows\Microsoft.NET\authman
inherit.exe C:\Windows\SoftwareDistribution\Download
inherit.exe C:\Windows\tracing
inherit.exe C:\Windows\winsxs\Temp\PendingDeletes

as each line processes there will be a pause, then a message box will pop up that says 'Finished'
press ok on each one


after the last line processes and the Finished message is received, run win32kdiag again, this time with the switches:
  • Click on Windows Key + R, and copy-paste the following command (the bolded text) into the open run box, then click OK.

    "%userprofile%\desktop\win32kdiag.exe" -f -r

  • When it's finished, there will be a log called Win32kDiag.txt on your desktop.
  • Please open it with notepad and post the contents here.



Then reboot and and run win32kdiag without the switches and post that log as well:
  • Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
  • When it states "Finished! Press any key to exit...", press any key on your keyboard to close the program.
  • Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as a reply to this topic.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#75 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 02:47 PM

Before Boot... Running from: C:\Users\Viper1\Desktop\win32kdiag.exe Log file at : C:\Users\Viper1\Desktop\Win32kDiag.txt Removing all found mount points. Attempting to reset file permissions. WARNING: Could not get backup privileges! Searching 'C:\Windows'... Found mount point : C:\Windows\AppPatch\Custom\Custom Mount point destination : \Device\__max++>\^ Removing mount point : C:\Windows\AppPatch\Custom\Custom Found mount point : C:\Windows\CSC\v2.0.6\namespace\namespace Mount point destination : \Device\__max++>\^ Removing mount point : C:\Windows\CSC\v2.0.6\namespace\namespace Found mount point : C:\Windows\Globalization\Globalization Mount point destination : \Device\__max++>\^ Removing mount point : C:\Windows\Globalization\Globalization Found mount point : C:\Windows\Microsoft.NET\authman\authman Mount point destination : \Device\__max++>\^ Removing mount point : C:\Windows\Microsoft.NET\authman\authman Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16916_none_ebdb680516458e6e\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16916_none_ebdb680516458e6e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21116_none_ec64dcf22f63617a\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21116_none_ec64dcf22f63617a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16916_none_b2f810b7d9a605d2\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16916_none_b2f810b7d9a605d2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21116_none_b38185a4f2c3d8de\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21116_none_b38185a4f2c3d8de: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18319_none_b4e1503bd6c9e2c8\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18319_none_b4e1503bd6c9e2c8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22508_none_b574be8eefe04a71\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22508_none_b574be8eefe04a71: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18100_none_b6c9915bd3f03513\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18100_none_b6c9915bd3f03513: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22212_none_b74a5eceed14237c\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22212_none_b74a5eceed14237c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16916_none_deda9f807f4ec541\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16916_none_deda9f807f4ec541: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21116_none_df64146d986c984d\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21116_none_df64146d986c984d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18319_none_e0c3df047c72a237\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18319_none_e0c3df047c72a237: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22508_none_e1574d57958909e0\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22508_none_e1574d57958909e0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.16916_none_8d4e9eec54b4aaf6\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.16916_none_8d4e9eec54b4aaf6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.21116_none_8dd813d96dd27e02\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.21116_none_8dd813d96dd27e02: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16916_none_fffdec59a4af2c65\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16916_none_fffdec59a4af2c65: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21116_none_00876146bdccff71\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21116_none_00876146bdccff71: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18319_none_01e72bdda1d3095b\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18319_none_01e72bdda1d3095b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22508_none_027a9a30bae97104\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22508_none_027a9a30bae97104: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18100_none_03cf6cfd9ef95ba6\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18100_none_03cf6cfd9ef95ba6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22212_none_04503a70b81d4a0f\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22212_none_04503a70b81d4a0f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_none_726565555a594d2c\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_none_726565555a594d2c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_none_72eeda4273772038\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_none_72eeda4273772038: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_none_744ea4d9577d2a22\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_none_744ea4d9577d2a22: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_none_74e2132c709391cb\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_none_74e2132c709391cb: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_none_ac471aa909a2040b\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_none_ac471aa909a2040b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_none_acd08f9622bfd717\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_none_acd08f9622bfd717: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_none_ae305a2d06c5e101\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_none_ae305a2d06c5e101: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_none_aec3c8801fdc48aa\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_none_aec3c8801fdc48aa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_none_f9a70f336e9aa6b8\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_none_f9a70f336e9aa6b8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_none_fa30842087b879c4\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_none_fa30842087b879c4: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_none_fb904eb76bbe83ae\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_none_fb904eb76bbe83ae: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_none_fc23bd0a84d4eb57\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_none_fc23bd0a84d4eb57: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_none_fd788fd768e4d5f9\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_none_fd788fd768e4d5f9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_none_fdf95d4a8208c462\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_none_fdf95d4a8208c462: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_none_95db47eb84802ce6\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_none_95db47eb84802ce6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_none_9664bcd89d9dfff2\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_none_9664bcd89d9dfff2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb83283d527f1d\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb83283d527f1d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84f81556705229\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84f81556705229: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4c2ac3a765c13\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4c2ac3a765c13: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_607830ff538cc3bc\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_607830ff538cc3bc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916_none_f1827f5cbd02b6c0\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916_none_f1827f5cbd02b6c0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116_none_f20bf449d62089cc\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116_none_f20bf449d62089cc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319_none_f36bbee0ba2693b6\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319_none_f36bbee0ba2693b6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508_none_f3ff2d33d33cfb5f\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508_none_f3ff2d33d33cfb5f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16916_none_353b610816ff3030\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16916_none_353b610816ff3030: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21116_none_35c4d5f5301d033c\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21116_none_35c4d5f5301d033c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18319_none_3724a08c14230d26\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18319_none_3724a08c14230d26: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22508_none_37b80edf2d3974cf\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22508_none_37b80edf2d3974cf: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_none_45b8a3358f604ac2\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_none_45b8a3358f604ac2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_none_46421822a87e1dce\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_none_46421822a87e1dce: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_none_47a1e2b98c8427b8\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_none_47a1e2b98c8427b8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_none_4835510ca59a8f61\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_none_4835510ca59a8f61: 3 Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl Attempting to restore permissions of : C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl Attempting to restore permissions of : C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl Found mount point : C:\Windows\tracing\tracing Mount point destination : \Device\__max++>\^ Removing mount point : C:\Windows\tracing\tracing Found mount point : C:\Windows\winsxs\Temp\PendingDeletes\PendingDeletes Mount point destination : \Device\__max++>\^ Removing mount point : C:\Windows\winsxs\Temp\PendingDeletes\PendingDeletes Found mount point : C:\Windows\winsxs\Temp\PendingRenames\PendingRenames Mount point destination : \Device\__max++>\^ Removing mount point : C:\Windows\winsxs\Temp\PendingRenames\PendingRenames Finished!

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users