Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 91981 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

[Resolved]áComputer Infected Please Help...


  • This topic is locked This topic is locked
118 replies to this topic

#76 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 03:00 PM

After Boot.. I got a message after rebooting that the recycle bin for C drive is corrupted do you want to empty the recycle bin for that drive and I clicked Yes.... Running from: C:\Users\Viper1\Desktop\Win32kDiag.exe Log file at : C:\Users\Viper1\Desktop\Win32kDiag.txt WARNING: Could not get backup privileges! Searching 'C:\Windows'... Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16916_none_ebdb680516458e6e\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16916_none_ebdb680516458e6e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21116_none_ec64dcf22f63617a\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21116_none_ec64dcf22f63617a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16916_none_b2f810b7d9a605d2\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16916_none_b2f810b7d9a605d2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21116_none_b38185a4f2c3d8de\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21116_none_b38185a4f2c3d8de: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18319_none_b4e1503bd6c9e2c8\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18319_none_b4e1503bd6c9e2c8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22508_none_b574be8eefe04a71\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22508_none_b574be8eefe04a71: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18100_none_b6c9915bd3f03513\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18100_none_b6c9915bd3f03513: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22212_none_b74a5eceed14237c\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22212_none_b74a5eceed14237c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16916_none_deda9f807f4ec541\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16916_none_deda9f807f4ec541: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21116_none_df64146d986c984d\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21116_none_df64146d986c984d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18319_none_e0c3df047c72a237\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18319_none_e0c3df047c72a237: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22508_none_e1574d57958909e0\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22508_none_e1574d57958909e0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.16916_none_8d4e9eec54b4aaf6\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.16916_none_8d4e9eec54b4aaf6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.21116_none_8dd813d96dd27e02\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.21116_none_8dd813d96dd27e02: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16916_none_fffdec59a4af2c65\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16916_none_fffdec59a4af2c65: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21116_none_00876146bdccff71\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21116_none_00876146bdccff71: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18319_none_01e72bdda1d3095b\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18319_none_01e72bdda1d3095b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22508_none_027a9a30bae97104\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22508_none_027a9a30bae97104: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18100_none_03cf6cfd9ef95ba6\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18100_none_03cf6cfd9ef95ba6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22212_none_04503a70b81d4a0f\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22212_none_04503a70b81d4a0f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_none_726565555a594d2c\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_none_726565555a594d2c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_none_72eeda4273772038\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_none_72eeda4273772038: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_none_744ea4d9577d2a22\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_none_744ea4d9577d2a22: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_none_74e2132c709391cb\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_none_74e2132c709391cb: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_none_ac471aa909a2040b\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_none_ac471aa909a2040b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_none_acd08f9622bfd717\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_none_acd08f9622bfd717: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_none_ae305a2d06c5e101\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_none_ae305a2d06c5e101: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_none_aec3c8801fdc48aa\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_none_aec3c8801fdc48aa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_none_f9a70f336e9aa6b8\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_none_f9a70f336e9aa6b8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_none_fa30842087b879c4\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_none_fa30842087b879c4: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_none_fb904eb76bbe83ae\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_none_fb904eb76bbe83ae: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_none_fc23bd0a84d4eb57\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_none_fc23bd0a84d4eb57: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_none_fd788fd768e4d5f9\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_none_fd788fd768e4d5f9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_none_fdf95d4a8208c462\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_none_fdf95d4a8208c462: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_none_95db47eb84802ce6\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_none_95db47eb84802ce6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_none_9664bcd89d9dfff2\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_none_9664bcd89d9dfff2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb83283d527f1d\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb83283d527f1d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84f81556705229\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84f81556705229: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4c2ac3a765c13\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4c2ac3a765c13: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_607830ff538cc3bc\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_607830ff538cc3bc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916_none_f1827f5cbd02b6c0\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916_none_f1827f5cbd02b6c0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116_none_f20bf449d62089cc\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116_none_f20bf449d62089cc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319_none_f36bbee0ba2693b6\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319_none_f36bbee0ba2693b6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508_none_f3ff2d33d33cfb5f\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508_none_f3ff2d33d33cfb5f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16916_none_353b610816ff3030\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16916_none_353b610816ff3030: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21116_none_35c4d5f5301d033c\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21116_none_35c4d5f5301d033c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18319_none_3724a08c14230d26\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18319_none_3724a08c14230d26: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22508_none_37b80edf2d3974cf\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22508_none_37b80edf2d3974cf: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_none_45b8a3358f604ac2\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_none_45b8a3358f604ac2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_none_46421822a87e1dce\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_none_46421822a87e1dce: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_none_47a1e2b98c8427b8\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_none_47a1e2b98c8427b8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_none_4835510ca59a8f61\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_none_4835510ca59a8f61: 3 Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl [1] 2009-10-31 16:49:25 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl () Found mount point : C:\Windows\winsxs\Temp\PendingDeletes\PendingDeletes Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\winsxs\Temp\PendingRenames\PendingRenames Mount point destination : \Device\__max++>\^ Finished!

    Advertisements

Register to Remove


#77 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 31 October 2009 - 03:47 PM

Hi,

Please do the following:

download the following tool, save it to your desktop. Right click on it and run it as an Administrator:

http://noahdfear.net/downloads/fix.exe


then do this in an elevated command window

Go to Start menu.

Type cmd in the Search Menu

Press Ctrl + SHIFT and Click on the cmd shortcut on the Start Menu. Ctrl-Shift-Enter is the general keyboard shortcut that triggers elevation to ôRun as Administratorö.

Press Alt+C from the keyboard or click Continue to confirm the UAC elevation warning prompt and the administrative privileged command prompt will be opened.

Then highlight and copy the contents of the codebox then right click in the command window and Paste
cd "%userprofile%\desktop"
inherit.exe C:\Windows\winsxs\Temp

after you get a finished message do this at the command prompt:

rmdir /s/q C:\Windows\winsxs\Temp\PendingDeletes\PendingDeletes



To readers of this topic:
NOTE: Please be advised the above instructions are for this user only...DO NOT use this on your machine as it could render your computer inoperable. If you are having similar issues - please start a new topic

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#78 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 04:21 PM

When clicking on fix.exe all i get is an empty note pad box.. I get no finish message when doing the other 2 codes.. The first one gives me a OK box only after pressing enter and the second nothing...

#79 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 31 October 2009 - 04:28 PM

Did you run it as Admin?

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#80 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 04:42 PM

I right clicked on it, clicked on Compatibility tab and down on the Privilege Level section the Run this program as an administrator is faded out and I can not click the box...

#81 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 31 October 2009 - 05:43 PM

Hi, delete that copy and redownload it again. save it to your desk top, save as file type "All files" Right click on it, do nothing else but choose to Run it as Administrator, then allow it to run.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#82 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 06:03 PM

Here it is.. C:\Windows\SOFTWA~1\Download\D46572~1\X8A8AD~1.225\X86_MI~1.225 Deleted Successfully !!

#83 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 31 October 2009 - 06:07 PM

Hi,

we need a fresh win32kdiag log now.
  • Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
  • When it states "Finished! Press any key to exit...", press any key on your keyboard to close the program.
  • Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as a reply to this topic.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#84 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 06:30 PM

Running from: C:\Users\Viper1\Desktop\Win32kDiag.exe Log file at : C:\Users\Viper1\Desktop\Win32kDiag.txt WARNING: Could not get backup privileges! Searching 'C:\Windows'... Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl [1] 2009-10-31 16:49:25 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl () Found mount point : C:\Windows\winsxs\Temp\PendingRenames\PendingRenames Mount point destination : \Device\__max++>\^ Finished!

#85 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 31 October 2009 - 06:36 PM

Hi,

Please do this in an elevated command window

Go to Start menu.

Type cmd in the Search Menu

Press Ctrl + SHIFT and Click on the cmd shortcut on the Start Menu. Ctrl-Shift-Enter is the general keyboard shortcut that triggers elevation to “Run as Administrator”.

Press Alt+C from the keyboard or click Continue to confirm the UAC elevation warning prompt and the administrative privileged command prompt will be opened.

Then highlight and copy the contents of the codebox then right click in the command window and Paste

"%userprofile%\desktop\Inherit.exe" C:\Windows\winsxs


after you get a finished message do this at the command prompt:


rd /s/q C:\Windows\winsxs\Temp\PendingRenames\PendingRenames


Once that is complete...please run win32kdiag again.

Once you have completed that, please download a fresh copy of combofix to your desktop, run it in normal mode.

Here are the links again - save you going back through the thread.

Link 1
Link 2


You can also delete fix.exe and the logs from your desktop.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015

    Advertisements

Register to Remove


#86 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 06:56 PM

I do not get a finish message when running those 2 codes.. Running from: C:\Users\Viper1\Desktop\Win32kDiag.exe Log file at : C:\Users\Viper1\Desktop\Win32kDiag.txt WARNING: Could not get backup privileges! Searching 'C:\Windows'... Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl [1] 2009-10-31 16:49:25 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl () Finished!

#87 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 31 October 2009 - 06:58 PM

That's OK, we were after the removal of the max++ mountpoint, which is now gone. Reboot and try combofix.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#88 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 07:28 PM

Combofix is still a no go.....

#89 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 31 October 2009 - 07:33 PM

Did you delete the existing copy that you had on your desktop? Did you disable your security programs totally? Did you download a fresh copy? Exactly what happens when you try and run it?

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#90 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 31 October 2009 - 07:44 PM

Yes, I deleted and downloaded a fresh copy, disabled eset smart security, deleted combo fix in C drive and ran it... Same thing as before.. It runs and states attempting to make a restore point... I left it without moving mouse for this time period since last post and nothing... How long should it take to run?

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users