Unknown virus, malware, trojan infection

3 posters

GeekPolice :: GeekPolice tech support archive :: Technical Support

Unknown virus, malware, trojan infection11th September 2009, 12:26 pm

I currently run Vista Home Basic. The system is only able to open and run IE in Safe Mode. I attempted to install McAfee Internet Security, but the virusscan component and one other componed failed to install.

I've updated Java JRE and ran JavaRA as instructed. Adobe Reader install failed with message "Windows Installer could not be accessed".

I downloaded and ran "Do a system scan and save logfile" in HijackThis. However, no new window was opened after the scan to show the results. I looked in the location that HijackThis was downloaded for a copy of the results, but when I tried to open the application, the following information was presented: "Windows cannot access the specified device, path or file."

So, I am not able to share the HijackThis log at this time. Please provided suggestions in what I can do next.

Re: Unknown virus, malware, trojan infection11th September 2009, 7:22 pm

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

Double-click SystemLook.exe to run it.
Copy the content of the following codebox into the main textfield:
Code:
:filefind scecli.dll netlogon.dll eventlog.dll cngaudit.dll
Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Re: Unknown virus, malware, trojan infection11th September 2009, 7:54 pm

SystemLook v1.0 by jpshortstuff (29.08.09)
Log created at 15:52 on 11/09/2009 by Dad (Administrator - Elevation successful)

========== filefind ==========

Searching for "scecli.dll"
C:\Windows\System32\scecli.dll --a--- 177152 bytes [02:34 21/01/2008] [02:34 21/01/2008] 28B84EB538F7E8A0FE8B9299D591E0B9
C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll --a--- 177152 bytes [02:34 21/01/2008] [02:34 21/01/2008] 28B84EB538F7E8A0FE8B9299D591E0B9

Searching for "netlogon.dll"
C:\Windows\System32\netlogon.dll --a--- 592384 bytes [02:33 21/01/2008] [02:33 21/01/2008] A8EFC0B6E75B789F7FD3BA5025D4E37F
C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll --a--- 592384 bytes [02:33 21/01/2008] [02:33 21/01/2008] A8EFC0B6E75B789F7FD3BA5025D4E37F

Searching for "eventlog.dll"
No files found.

Searching for "cngaudit.dl"
No files found.

-=End Of File=-

Re: Unknown virus, malware, trojan infection12th September 2009, 5:29 am

Please delete this file in red:
C:\Windows\system32\desot.exe

Next, download this file.

Download it to your Desktop.
Double click it to run it; select yes to the registry merge prompt.

Re: Unknown virus, malware, trojan infection12th September 2009, 11:42 am

I did not locate the desot.exe file on my system.

After downloading ExecuteErrorFix to the desktop and double-click to run, the following message displayed:

"Cannot import C:\Users\Dad\Desktop\ExeError.reg: Not all data was successfully written to the registry. Some keys are open by the sytem or other processes."

I will wait for new instructions...

Re: Unknown virus, malware, trojan infection12th September 2009, 6:08 pm

Please download DDS by sUBs to your Desktop (Important!!) from one of these locations:
Link 1
Link 2
Double click DDS.scr to run.
When complete, two logs will open. Save both of the report to your Desktop.
Copy and paste DDS.txt back here, I don't need to see attach.txt just yet.

Re: Unknown virus, malware, trojan infection12th September 2009, 6:46 pm

This operation failed. I downloaded the dds file to the desktop. When I double-clicked, it opened like it was going to run a program but then closed immediately.

Next suggestion?

Re: Unknown virus, malware, trojan infection12th September 2009, 10:32 pm

Hello.

Please download this file.

Please download Junction.zip and save it.
Unzip it and put junction.exe in the Windows directory (C:\Windows).
Go to Start => Run... => Copy and paste the following command in the run box and click OK:

cmd /c junction -s c:\ >log.txt&log.txt& del log.txt
A command window opens starting to scan the system. Wait until a log file opens. Copy and paste or attach the content of it.

Re: Unknown virus, malware, trojan infection12th September 2009, 11:23 pm

First of 2 posts with log file info:

Junction v1.05 - Windows junction creator and reparse point viewer
Copyright (C) 2000-2007 Mark Russinovich
Systems Internals - http://www.sysinternals.com

\\?\c:\\Documents and Settings: JUNCTION
Print Name : C:\Users
Substitute Name: C:\Users

Failed to open \\?\c:\\pagefile.sys: The process cannot access the file because it is being used by another process.

Failed to open \\?\c:\\System Volume Information: Access is denied.

...

...

...

...

...

...

...

Failed to open \\?\c:\\Program Files\Spybot - Search & Destroy\SpybotSD.exe: Access is denied.

...\\?\c:\\ProgramData\Application Data: JUNCTION
Print Name : C:\ProgramData
Substitute Name: C:\ProgramData

\\?\c:\\ProgramData\Desktop: JUNCTION
Print Name : C:\Users\Public\Desktop
Substitute Name: C:\Users\Public\Desktop

\\?\c:\\ProgramData\Documents: JUNCTION
Print Name : C:\Users\Public\Documents
Substitute Name: C:\Users\Public\Documents

\\?\c:\\ProgramData\Favorites: JUNCTION
Print Name : C:\Users\Public\Favorites
Substitute Name: C:\Users\Public\Favorites

\\?\c:\\ProgramData\Start Menu: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Start Menu
Substitute Name: C:\ProgramData\Microsoft\Windows\Start Menu

\\?\c:\\ProgramData\Templates: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Templates
Substitute Name: C:\ProgramData\Microsoft\Windows\Templates

.
Failed to open \\?\c:\\ProgramData\Microsoft\Crypto\RSA\MachineKeys\138c93f3d772802a10e3f67007f1e24f_d12f4d8e-55ea-468b-89aa-fc8e760505f0: Access is denied.

Failed to open \\?\c:\\ProgramData\Microsoft\Crypto\RSA\MachineKeys\89f23b2b6270a8866ba861d0436f5615_d12f4d8e-55ea-468b-89aa-fc8e760505f0: Access is denied.

.\\?\c:\\Users\All Users: UNKNOWN MICROSOFT REPARSE POINT

\\?\c:\\Users\Default User: JUNCTION
Print Name : C:\Users\Default
Substitute Name: C:\Users\Default

\\?\c:\\Users\All Users\Application Data: JUNCTION
Print Name : C:\ProgramData
Substitute Name: C:\ProgramData

\\?\c:\\Users\All Users\Desktop: JUNCTION
Print Name : C:\Users\Public\Desktop
Substitute Name: C:\Users\Public\Desktop

\\?\c:\\Users\All Users\Documents: JUNCTION
Print Name : C:\Users\Public\Documents
Substitute Name: C:\Users\Public\Documents

\\?\c:\\Users\All Users\Favorites: JUNCTION
Print Name : C:\Users\Public\Favorites
Substitute Name: C:\Users\Public\Favorites

\\?\c:\\Users\All Users\Start Menu: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Start Menu
Substitute Name: C:\ProgramData\Microsoft\Windows\Start Menu

\\?\c:\\Users\All Users\Templates: JUNCTION
Print Name : C:\ProgramData\Microsoft\Windows\Templates
Substitute Name: C:\ProgramData\Microsoft\Windows\Templates

.

Failed to open \\?\c:\\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\138c93f3d772802a10e3f67007f1e24f_d12f4d8e-55ea-468b-89aa-fc8e760505f0: Access is denied.

Failed to open \\?\c:\\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\89f23b2b6270a8866ba861d0436f5615_d12f4d8e-55ea-468b-89aa-fc8e760505f0: Access is denied.

.\\?\c:\\Users\Dad\Application Data: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming
Substitute Name: C:\Users\Dad\AppData\Roaming

\\?\c:\\Users\Dad\Cookies: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Cookies
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Cookies

\\?\c:\\Users\Dad\Local Settings: JUNCTION
Print Name : C:\Users\Dad\AppData\Local
Substitute Name: C:\Users\Dad\AppData\Local

\\?\c:\\Users\Dad\My Documents: JUNCTION
Print Name : C:\Users\Dad\Documents
Substitute Name: C:\Users\Dad\Documents

\\?\c:\\Users\Dad\NetHood: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Network Shortcuts
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\?\c:\\Users\Dad\PrintHood: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

\\?\c:\\Users\Dad\Recent: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Recent
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Recent

\\?\c:\\Users\Dad\SendTo: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\SendTo
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\SendTo

\\?\c:\\Users\Dad\Start Menu: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu

\\?\c:\\Users\Dad\Templates: JUNCTION
Print Name : C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Templates
Substitute Name: C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Templates

.\\?\c:\\Users\Dad\AppData\Local\Application Data: JUNCTION
Print Name : C:\Users\Dad\AppData\Local
Substitute Name: C:\Users\Dad\AppData\Local

\\?\c:\\Users\Dad\AppData\Local\History: JUNCTION
Print Name : C:\Users\Dad\AppData\Local\Microsoft\Windows\History
Substitute Name: C:\Users\Dad\AppData\Local\Microsoft\Windows\History

\\?\c:\\Users\Dad\AppData\Local\Temporary Internet Files: JUNCTION
Print Name : C:\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files
Substitute Name: C:\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files

.

.
Failed to open \\?\c:\\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QFMED9DK\winlogon[1].scr: Access is denied.

..
Failed to open \\?\c:\\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UIJYKFX3\winlogon[1].scr: Access is denied.

Failed to open \\?\c:\\Users\Dad\Desktop\HijackThis.exe: Access is denied.

Failed to open \\?\c:\\Users\Dad\Desktop\hijackthis.scr: Access is denied.

\\?\c:\\Users\Dad\Documents\My Music: JUNCTION
Print Name : C:\Users\Dad\Music
Substitute Name: C:\Users\Dad\Music

\\?\c:\\Users\Dad\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Dad\Pictures
Substitute Name: C:\Users\Dad\Pictures

\\?\c:\\Users\Dad\Documents\My Videos: JUNCTION
Print Name : C:\Users\Dad\Videos
Substitute Name: C:\Users\Dad\Videos

Failed to open \\?\c:\\Users\Dad\Downloads\winlogon.scr: Access is denied.

\\?\c:\\Users\Default\Application Data: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming
Substitute Name: C:\Users\Default\AppData\Roaming

\\?\c:\\Users\Default\Cookies: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies

\\?\c:\\Users\Default\Local Settings: JUNCTION
Print Name : C:\Users\Default\AppData\Local
Substitute Name: C:\Users\Default\AppData\Local

\\?\c:\\Users\Default\My Documents: JUNCTION
Print Name : C:\Users\Default\Documents
Substitute Name: C:\Users\Default\Documents

\\?\c:\\Users\Default\NetHood: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\?\c:\\Users\Default\PrintHood: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

\\?\c:\\Users\Default\Recent: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent

\\?\c:\\Users\Default\SendTo: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo

\\?\c:\\Users\Default\Start Menu: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu

\\?\c:\\Users\Default\Templates: JUNCTION
Print Name : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates
Substitute Name: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates

\\?\c:\\Users\Default\AppData\Local\Application Data: JUNCTION
Print Name : C:\Users\Default\AppData\Local
Substitute Name: C:\Users\Default\AppData\Local

\\?\c:\\Users\Default\AppData\Local\History: JUNCTION
Print Name : C:\Users\Default\AppData\Local\Microsoft\Windows\History
Substitute Name: C:\Users\Default\AppData\Local\Microsoft\Windows\History

\\?\c:\\Users\Default\AppData\Local\Temporary Internet Files: JUNCTION
Print Name : C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files
Substitute Name: C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files

\\?\c:\\Users\Default\Documents\My Music: JUNCTION
Print Name : C:\Users\Default\Music
Substitute Name: C:\Users\Default\Music

\\?\c:\\Users\Default\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Default\Pictures
Substitute Name: C:\Users\Default\Pictures

\\?\c:\\Users\Default\Documents\My Videos: JUNCTION
Print Name : C:\Users\Default\Videos
Substitute Name: C:\Users\Default\Videos

\\?\c:\\Users\Holly\Application Data: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming
Substitute Name: C:\Users\Holly\AppData\Roaming

\\?\c:\\Users\Holly\Cookies: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Cookies
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Cookies

\\?\c:\\Users\Holly\Local Settings: JUNCTION
Print Name : C:\Users\Holly\AppData\Local
Substitute Name: C:\Users\Holly\AppData\Local

\\?\c:\\Users\Holly\My Documents: JUNCTION
Print Name : C:\Users\Holly\Documents
Substitute Name: C:\Users\Holly\Documents

\\?\c:\\Users\Holly\NetHood: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Network Shortcuts
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\?\c:\\Users\Holly\PrintHood: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

\\?\c:\\Users\Holly\Recent: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Recent
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Recent

\\?\c:\\Users\Holly\SendTo: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\SendTo
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\SendTo

\\?\c:\\Users\Holly\Start Menu: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Start Menu
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Start Menu

\\?\c:\\Users\Holly\Templates: JUNCTION
Print Name : C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Templates
Substitute Name: C:\Users\Holly\AppData\Roaming\Microsoft\Windows\Templates

\\?\c:\\Users\Holly\AppData\Local\Application Data: JUNCTION
Print Name : C:\Users\Holly\AppData\Local
Substitute Name: C:\Users\Holly\AppData\Local

\\?\c:\\Users\Holly\AppData\Local\History: JUNCTION
Print Name : C:\Users\Holly\AppData\Local\Microsoft\Windows\History
Substitute Name: C:\Users\Holly\AppData\Local\Microsoft\Windows\History

\\?\c:\\Users\Holly\AppData\Local\Temporary Internet Files: JUNCTION
Print Name : C:\Users\Holly\AppData\Local\Microsoft\Windows\Temporary Internet Files
Substitute Name: C:\Users\Holly\AppData\Local\Microsoft\Windows\Temporary Internet Files

..\\?\c:\\Users\Holly\Documents\My Music: JUNCTION
Print Name : C:\Users\Holly\Music
Substitute Name: C:\Users\Holly\Music

\\?\c:\\Users\Holly\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Holly\Pictures
Substitute Name: C:\Users\Holly\Pictures

\\?\c:\\Users\Holly\Documents\My Videos: JUNCTION
Print Name : C:\Users\Holly\Videos
Substitute Name: C:\Users\Holly\Videos

.\\?\c:\\Users\Public\Documents\My Music: JUNCTION
Print Name : C:\Users\Public\Music
Substitute Name: C:\Users\Public\Music

\\?\c:\\Users\Public\Documents\My Pictures: JUNCTION
Print Name : C:\Users\Public\Pictures
Substitute Name: C:\Users\Public\Pictures

\\?\c:\\Users\Public\Documents\My Videos: JUNCTION
Print Name : C:\Users\Public\Videos
Substitute Name: C:\Users\Public\Videos

\\?\c:\\Windows\AppPatch\Custom\Custom: MOUNT POINT
Substitute Name: \Device\__max++>\^

Re: Unknown virus, malware, trojan infection12th September 2009, 11:26 pm

2nd of 3 posts of log file:

...\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2EBD.tmp\ZAP2EBD.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4AF4.tmp\ZAP4AF4.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9AF7.tmp\ZAP9AF7.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9B0.tmp\ZAP9B0.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA5B0.tmp\ZAPA5B0.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB0D7.tmp\ZAPB0D7.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE420.tmp\ZAPE420.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEA5E.tmp\ZAPEA5E.tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\temp\temp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\assembly\tmp\tmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Debug\UserMode\UserMode: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\Globalization\Globalization: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Help\Corporate\Corporate: MOUNT POINT
Substitute Name: \Device\__max++>\^

..

.\\?\c:\\Windows\Installer\$PatchCache$\Managed\000021091A0090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109411090400000000000F01FEC\12.0.4518\12.0.4518: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109440090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109510090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109511090400000000000F01FEC\12.0.4518\12.0.4518: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109610090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109711090400000000000F01FEC\12.0.4518\12.0.4518: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109810090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109910090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109A10090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Installer\$PatchCache$\Managed\00002109B10090400000000000F01FEC\12.0.6425\12.0.6425: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\LiveKernelReports\LiveKernelReports: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Microsoft.NET\authman\authman: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\Minidump\Minidump: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\nap\configuration\configuration: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Panther\setup.exe\setup.exe: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\PCHEALTH\ERRORREP\QHEADLES\QHEADLES: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\PCHEALTH\ERRORREP\QSIGNOFF\QSIGNOFF: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\PLA\Templates\Templates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Registration\CRMLog\CRMLog: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SchCache\SchCache: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\security\logs\logs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\security\templates\templates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\GameExplorer\GameExplorer: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Local\PnrpSqm\PnrpSqm: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStore\Tfs_DAV\Tfs_DAV: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\Description Documents\Description Documents: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Recent\Recent: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\Templates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Desktop\Desktop: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Documents\Documents: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Downloads\Downloads: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Favorites\Favorites: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Links\Links: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Music\Music: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Pictures\Pictures: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Saved Games\Saved Games: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\LocalService\Videos\Videos: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\GameExplorer\GameExplorer: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\SCPD\SCPD: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Temp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Recent\Recent: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\Templates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Desktop\Desktop: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Documents\Documents: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Downloads\Downloads: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Favorites\Favorites: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Links\Links: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Music\Music: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Pictures\Pictures: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Saved Games\Saved Games: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\ServiceProfiles\NetworkService\Videos\Videos: MOUNT POINT
Substitute Name: \Device\__max++>\^

...

.\\?\c:\\Windows\SoftwareDistribution\AuthCabs\Downloaded\Downloaded: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.16868_none_05136bbbd8da5cfa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6000.21065_none_0599dfcaf1fae401: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.18270_none_06e6d825d6103f24: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6001.22447_none_0797e8a0ef0f39a3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.18049_none_08f6be51d31621ab: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957\x86_microsoft-windows-mediaplayer-wmvcore_31bf3856ad364e35_6.0.6002.22150_none_096c8896ec43f957: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16919_none_f0a013de6e53b9ab\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16919_none_f0a013de6e53b9ab: MOUNT POINT
Substitute Name: \Device\__max++>\^

Re: Unknown virus, malware, trojan infection12th September 2009, 11:27 pm

3 of 3 log file:

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21119_none_f12988cb87718cb7\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21119_none_f12988cb87718cb7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18322_none_f27480926b88b52c\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18322_none_f27480926b88b52c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22511_none_f307eee5849f1cd5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22511_none_f307eee5849f1cd5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18103_none_f4719482689de8ec\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18103_none_f4719482689de8ec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22215_none_f4f261f581c1d755\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22215_none_f4f261f581c1d755: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.16884_none_83e02be57bf1f0b4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18288_none_85ca6bb37914e701: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.22468_none_8669aa3c92224c10: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.18064_none_87c27e31762e9c0e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6002.22170_none_883d49e88f57f26d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132: MOUNT POINT
Substitute Name: \Device\__max++>\^

..

.\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.18091_none_87a35e9f02db5bf5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22200_none_888d4c521bb0e416: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.16908_en-us_80aa46aabe6988cc\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.16908_en-us_80aa46aabe6988cc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.21108_en-us_8133bb97d7875bd8\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6000.21108_en-us_8133bb97d7875bd8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.18311_en-us_827eb35ebb9e844d\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.18311_en-us_827eb35ebb9e844d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.22497_en-us_82b7d285d4f79ba9\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6001.22497_en-us_82b7d285d4f79ba9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.18091_en-us_840ea5e6b905b8f9\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.18091_en-us_840ea5e6b905b8f9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.22200_en-us_84f89399d1db411a\x86_microsoft-windows-netevent.resources_31bf3856ad364e35_6.0.6002.22200_en-us_84f89399d1db411a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.16908_none_586821dd6d61016f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.16908_none_586821dd6d61016f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.21108_none_58f196ca867ed47b\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.21108_none_58f196ca867ed47b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.18311_none_5a3c8e916a95fcf0\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.18311_none_5a3c8e916a95fcf0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.22497_none_5a75adb883ef144c\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.22497_none_5a75adb883ef144c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.18091_none_5bcc811967fd319c\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.18091_none_5bcc811967fd319c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.22200_none_5cb66ecc80d2b9bd\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.22200_none_5cb66ecc80d2b9bd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16908_none_54bd3631b81fb89b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21108_none_5546ab1ed13d8ba7: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22497_none_56cac20cceadcb78: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.16908_en-us_f28bf998a1c9cb0c\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.16908_en-us_f28bf998a1c9cb0c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.21108_en-us_f3156e85bae79e18\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6000.21108_en-us_f3156e85bae79e18: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.18311_en-us_f460664c9efec68d\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.18311_en-us_f460664c9efec68d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.22497_en-us_f4998573b857dde9\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6001.22497_en-us_f4998573b857dde9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.18091_en-us_f5f058d49c65fb39\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.18091_en-us_f5f058d49c65fb39: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.22200_en-us_f6da4687b53b835a\x86_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_6.0.6002.22200_en-us_f6da4687b53b835a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\cc9db45d4d7a49bee9efe23f364bf80b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\cc9db45d4d7a49bee9efe23f364bf80b\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.16917_none_8017d2ec639e89ee: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6000.21117_none_80a147d97cbc5cfa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18320_none_81ec3fa060d3856f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22509_none_829480c379d8ce8d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18101_none_83e953905de8b92f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22213_none_846a2103770ca798: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.16917_none_478cf445c1264c69: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6000.21117_none_48166932da441f75: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.18320_none_496160f9be5b47ea: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6001.22509_none_4a09a21cd7609108: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.18101_none_4b5e74e9bb707baa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13\x86_microsoft-windows-a..bility-assistant-db_31bf3856ad364e35_6.0.6002.22213_none_4bdf425cd4946a13: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.16917_none_0a38314ff5279fa3: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6000.21117_none_0ac1a63d0e4572af: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18320_none_0c0c9e03f25c9b24: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22509_none_0cb4df270b61e442: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18101_none_0e09b1f3ef71cee4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22213_none_0e8a7f670895bd4d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.16917_none_0a393199f526b8fa: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6000.21117_none_0ac2a6870e448c06: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.18320_none_0c0d9e4df25bb47b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6001.22509_none_0cb5df710b60fd99: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.18101_none_0e0ab23def70e83b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4\x86_microsoft-windows-a..ence-mitigations-c2_31bf3856ad364e35_6.0.6002.22213_none_0e8b7fb10894d6a4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16917_none_0a3a31e3f525d251: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.21117_none_0ac3a6d10e43a55d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18320_none_0c0e9e97f25acdd2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22509_none_0cb6dfbb0b6016f0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18101_none_0e0bb287ef700192: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22213_none_0e8c7ffb0893effb: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16917_none_0a3b322df524eba8: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.21117_none_0ac4a71b0e42beb4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18320_none_0c0f9ee1f259e729: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22509_none_0cb7e0050b5f3047: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18101_none_0e0cb2d1ef6f1ae9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22213_none_0e8d804508930952: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16917_none_0a3c3277f52404ff: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.21117_none_0ac5a7650e41d80b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18320_none_0c109f2bf2590080: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22509_none_0cb8e04f0b5e499e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18101_none_0e0db31bef6e3440: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22213_none_0e8e808f089222a9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.16870_none_389b60c97fc740bd\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.16870_none_389b60c97fc740bd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.21067_none_3936a7a898d6a939\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.21067_none_3936a7a898d6a939: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.18272_none_3a83a0037cec045c\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.18272_none_3a83a0037cec045c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.22450_none_3b20ddf895fb36bd\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.22450_none_3b20ddf895fb36bd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.18051_none_3c7eb35f7a03056e\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.18051_none_3c7eb35f7a03056e: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.22152_none_3d095074931fbe8f\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.22152_none_3d095074931fbe8f: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.16870_none_7a810285659cf00c\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.16870_none_7a810285659cf00c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.21067_none_7b1c49647eac5888\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.21067_none_7b1c49647eac5888: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.18272_none_7c6941bf62c1b3ab\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.18272_none_7c6941bf62c1b3ab: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.22450_none_7d067fb47bd0e60c\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.22450_none_7d067fb47bd0e60c: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.18051_none_7e64551b5fd8b4bd\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.18051_none_7e64551b5fd8b4bd: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.22152_none_7eeef23078f56dde\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.22152_none_7eeef23078f56dde: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\Download\f0e7510dbdd98e00504ebcf9a6bc42ad\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\SoftwareDistribution\PostRebootEventCache\PostRebootEventCache: MOUNT POINT
Substitute Name: \Device\__max++>\^

.
Failed to open \\?\c:\\Windows\System32\cngaudit.dll: The process cannot access the file because it is being used by another process.

.
Failed to open \\?\c:\\Windows\System32\mrt.exe: Access is denied.

..
Failed to open \\?\c:\\Windows\System32\WerFault.exe: Access is denied.

\\?\c:\\Windows\System32\0409\0409: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\Branding\en-US\en-US: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}: MOUNT POINT
Substitute Name: \Device\__max++>\^

..\\?\c:\\Windows\System32\com\dmp\dmp: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\Journal\Journal: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\systemprofile\AppData\Local\Acer ePower Management V4\Acer ePower Management V4: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs: MOUNT POINT
Substitute Name: \Device\__max++>\^

.

...

...

...

...

...

...\\?\c:\\Windows\System32\GroupPolicy\Machine\Machine: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\inetsrv\inetsrv: MOUNT POINT
Substitute Name: \Device\__max++>\^

Failed to open \\?\c:\\Windows\System32\LogFiles\WMI\RtBackup: Access is denied.

\\?\c:\\Windows\System32\MUI\dispspec\dispspec: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\OEM\AcerSystem\AcerSystem: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\System32\setup\en-US\en-US: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\SMI\Manifests\Manifests: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\spool\drivers\IA64\IA64: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\System32\spool\drivers\x64\x64: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\spool\PRINTERS\PRINTERS: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\spool\SERVERS\SERVERS: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\Tasks\Microsoft\Windows\SyncCenter\SyncCenter: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\Tasks\Microsoft\Windows\WindowsCalendar\WindowsCalendar: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\Tasks\Microsoft\Windows Defender\Windows Defender: MOUNT POINT
Substitute Name: \Device\__max++>\^

.\\?\c:\\Windows\System32\wbem\Logs\Logs: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\wbem\MOF\bad\bad: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\wbem\MOF\good\good: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\System32\winevt\TraceFormat\TraceFormat: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Temp\Google Toolbar\Google Toolbar: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\Temp\SiteAdvisor\SiteAdvisor: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\tracing\tracing: MOUNT POINT
Substitute Name: \Device\__max++>\^

...

...

...

...

...

...

\\?\c:\\Windows\winsxs\InstallTemp\InstallTemp: MOUNT POINT
Substitute Name: \Device\__max++>\^

...

...

...

...

...

...

...

...

..\\?\c:\\Windows\winsxs\Temp\PendingDeletes\PendingDeletes: MOUNT POINT
Substitute Name: \Device\__max++>\^

\\?\c:\\Windows\winsxs\Temp\PendingRenames\PendingRenames: MOUNT POINT
Substitute Name: \Device\__max++>\^

.

...
Failed to open \\?\c:\\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18000_none_70071ca23cc95139\WerFault.exe: Access is denied.

Failed to open \\?\c:\\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18145_none_6fe0e04a3ce53cd7\WerFault.exe: Access is denied.

Re: Unknown virus, malware, trojan infection14th September 2009, 12:21 am

Hello.

Please download this file.[list]

Place it next to Hijack This on your Desktop, then drag and drop Hijack This onto it.
Wait for it to run and it will say ok.

Try running Hijack This now.

Re: Unknown virus, malware, trojan infection14th September 2009, 1:14 pm

Per my initial post on 9-11, the HJT program does not execute. The HJT desktop icon shows"??"s on it after I attempted to run it initially and says that the file type is: Screen Saver. When I try to move the icon to the recycle bin, I get a message that says: "Destination folder access denied". When I attempt to uninstall the program, I get the message: "You do not have sufficient access to uninstall Hijackthis 2.0.2. Please contact your system adnministrator"

I was able to download a new HJT executable from the link on the Trend Micro site: http://free.antivirus.com/hijackthis/

I double clicked HJT after I had dragged it onto the "Inherit" program. It opened appeared to be running properly, but it then closed. The desktop icon now has "??"s on it and when I try to run it I get a dialog box that says: "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item"

I now await further suggestions from GeekPolice!

Re: Unknown virus, malware, trojan infection14th September 2009, 9:08 pm

Please download SilentRunners from here:
http://www.silentrunners.org/Silent%20Runners.zip
Unzip it to the desktop and double-click on it. If you get any kind of warning message about scripts, please choose to allow the script to run. When the scan is finished, a message will pop up and a logfile will have been created on the desktop. Please post the entire contents of this logfile for me to see.

Re: Unknown virus, malware, trojan infection14th September 2009, 9:32 pm

this seemed to run and post a logfile, but I can't find it. The message that was displayed said the document was located in:

Holly-Laptop 2009-09-14 17.25.34.txt

I did a search on that and could not locate. Please help. thanks.

Re: Unknown virus, malware, trojan infection14th September 2009, 11:11 pm

Hello.
Place silentrunners.vbs in the C:\ drive and re-run it. The log will/should appear in the C:\ drive then.

Re: Unknown virus, malware, trojan infection15th September 2009, 1:43 am

I placed the program in: c:\silentrunners.zip. After running the program, I get a dialoge box that says: "File is located in: Start-up Programs (Holly-Laptop) 09-14-09 21.31.37.16.txt

I can't locate this file anywhere. Is there any other assistance you can offer? I wish we could talk or communicate directly as I feel I'm missing something on my side.

Re: Unknown virus, malware, trojan infection15th September 2009, 5:47 pm

Hello.
Did you extract the vbs file from the zip file?

Unknown virus, malware, trojan infection

descriptionUnknown virus, malware, trojan infection11th September 2009, 12:26 pm

descriptionRe: Unknown virus, malware, trojan infection11th September 2009, 7:22 pm

descriptionRe: Unknown virus, malware, trojan infection11th September 2009, 7:54 pm

descriptionRe: Unknown virus, malware, trojan infection12th September 2009, 5:29 am

descriptionRe: Unknown virus, malware, trojan infection12th September 2009, 11:42 am

descriptionRe: Unknown virus, malware, trojan infection12th September 2009, 6:08 pm

descriptionRe: Unknown virus, malware, trojan infection12th September 2009, 6:46 pm

descriptionRe: Unknown virus, malware, trojan infection12th September 2009, 10:32 pm

descriptionRe: Unknown virus, malware, trojan infection12th September 2009, 11:23 pm

descriptionRe: Unknown virus, malware, trojan infection12th September 2009, 11:26 pm

descriptionRe: Unknown virus, malware, trojan infection12th September 2009, 11:27 pm

descriptionRe: Unknown virus, malware, trojan infection14th September 2009, 12:21 am

descriptionRe: Unknown virus, malware, trojan infection14th September 2009, 1:14 pm

descriptionRe: Unknown virus, malware, trojan infection14th September 2009, 9:08 pm

descriptionRe: Unknown virus, malware, trojan infection14th September 2009, 9:32 pm

descriptionRe: Unknown virus, malware, trojan infection14th September 2009, 11:11 pm

descriptionRe: Unknown virus, malware, trojan infection15th September 2009, 1:43 am

descriptionRe: Unknown virus, malware, trojan infection15th September 2009, 5:47 pm

descriptionRe: Unknown virus, malware, trojan infection