Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Trojan-PCW.Generic


  • Please log in to reply

#1
DylanR

DylanR

    New Member

  • Member
  • Pip
  • 4 posts
I have PC Tools Spyware Doctor, this is the first time I've had any problems. Every time I try to fix it, my comp Blue Screens.

UPDATE: Been trying a lot of the anti-virus and malware stuff, most have been crashing the computer or when trying to access them I am told I don't have the rights to access, even as administrator. Have ran OTL and managed to create the following.

OTL logfile created on: 1/20/2010 6:48:54 PM - Run 1
OTL by OldTimer - Version 3.1.25.3 Folder = C:\Users\Dylan J. Robinson\Documents\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18865)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 78.00% Memory free
7.00 Gb Paging File | 6.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 99.19 Gb Total Space | 29.97 Gb Free Space | 30.21% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 3.34 Gb Free Space | 33.41% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: OMNISSIAH
Current User Name: Dylan J. Robinson
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/01/20 18:48:06 | 00,546,816 | ---- | M] (OldTimer Tools) -- C:\Users\Dylan J. Robinson\Documents\Downloads\OTL.exe
PRC - [2009/12/22 01:57:28 | 00,035,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
PRC - [2009/11/20 20:33:00 | 00,122,984 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvvsvc.exe
PRC - [2009/11/01 03:00:50 | 00,136,176 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
PRC - [2009/10/11 04:17:36 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009/08/05 19:06:31 | 00,190,448 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
PRC - [2009/07/15 08:13:06 | 03,662,632 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchUser.exe
PRC - [2009/07/15 08:13:04 | 00,393,512 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\WTablet\Pen_TabletUser.exe
PRC - [2009/07/15 08:13:04 | 00,112,936 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchService.exe
PRC - [2009/07/15 08:13:02 | 04,408,616 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\Pen_Tablet.exe
PRC - [2009/05/19 10:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2009/04/10 22:28:08 | 00,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\unsecapp.exe
PRC - [2009/04/10 22:27:36 | 02,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/30 15:28:36 | 01,533,808 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2009/03/30 15:28:36 | 00,183,152 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2009/01/26 14:17:19 | 00,303,104 | ---- | M] (Motive Communications, Inc.) -- C:\Program Files\Common Files\Motive\McciCMService.exe
PRC - [2008/01/18 23:33:12 | 00,198,656 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
PRC - [2007/12/02 20:28:06 | 00,405,504 | ---- | M] (IDT, Inc.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
PRC - [2007/12/02 20:27:58 | 00,102,400 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\stacsv.exe
PRC - [2007/12/02 20:27:54 | 00,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\AEstSrv.exe
PRC - [2007/09/07 00:51:00 | 00,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\hidfind.exe
PRC - [2007/09/07 00:50:56 | 00,159,744 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\Apoint.exe
PRC - [2007/09/07 00:50:56 | 00,049,152 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApntEx.exe
PRC - [2007/09/07 00:50:54 | 00,050,736 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe
PRC - [2007/08/27 21:51:42 | 00,036,864 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\OEM02Mon.exe
PRC - [2007/03/21 11:33:44 | 01,548,288 | ---- | M] (Dell Inc.) -- C:\Windows\System32\WLTRAY.EXE
PRC - [2007/03/21 11:33:44 | 00,024,064 | ---- | M] () -- C:\Windows\System32\WLTRYSVC.EXE
PRC - [2007/03/21 11:33:42 | 01,724,416 | ---- | M] (Dell Inc.) -- C:\Windows\System32\BCMWLTRY.EXE
PRC - [2006/11/03 14:55:50 | 00,703,280 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2006/11/03 14:55:48 | 01,583,920 | ---- | M] (Broadcom Corporation.) -- c:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe


========== Modules (SafeList) ==========

MOD - [2010/01/20 18:48:06 | 00,546,816 | ---- | M] (OldTimer Tools) -- C:\Users\Dylan J. Robinson\Documents\Downloads\OTL.exe
MOD - [2009/04/10 22:21:38 | 01,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (IAANTMON) Intel®
SRV - File not found [On_Demand | Stopped] -- -- (DAUpdaterSvc)
SRV - [2009/12/29 16:03:44 | 00,321,320 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009/11/20 20:33:00 | 00,122,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Windows\System32\nvvsvc.exe -- (nvsvc)
SRV - [2009/09/24 17:27:04 | 00,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009/08/05 19:07:05 | 00,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate1ca1642fd434fa0) Google Update Service (gupdate1ca1642fd434fa0)
SRV - [2009/08/05 19:06:31 | 00,190,448 | ---- | M] (Google) [Auto | Running] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2009/07/15 08:13:04 | 00,112,936 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\WTouch\WTouchService.exe -- (WTouchService)
SRV - [2009/07/15 08:13:02 | 04,408,616 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Windows\System32\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2009/05/19 10:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2009/03/30 15:28:36 | 01,533,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009/02/06 17:08:58 | 00,533,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2009/01/26 14:17:19 | 00,303,104 | ---- | M] (Motive Communications, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Motive\McciCMService.exe -- (McciCMService)
SRV - [2009/01/04 06:19:36 | 00,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008/11/04 01:06:28 | 00,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2008/01/18 23:38:24 | 00,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/12/02 20:27:58 | 00,102,400 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\stacsv.exe -- (STacSV)
SRV - [2007/12/02 20:27:54 | 00,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\AEstSrv.exe -- (AESTFilters)
SRV - [2007/12/02 15:34:30 | 00,074,384 | R--- | M] (MicroVision Development, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\SureThing Shared\stllssvr.exe -- (stllssvr)
SRV - [2007/03/21 11:33:44 | 00,024,064 | ---- | M] () [Auto | Running] -- C:\Windows\System32\WLTRYSVC.EXE -- (wltrysvc)
SRV - [2007/03/19 09:44:44 | 00,070,656 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\DellSupport\brkrsvc.exe -- (DSBrokerService)
SRV - [2006/11/02 04:35:29 | 00,013,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\ehome\ehstart.dll -- (ehstart)
SRV - [2006/10/26 14:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005/04/03 23:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)


========== Driver Services (SafeList) ==========

DRV - [2009/11/20 18:34:54 | 11,515,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/05/20 14:14:32 | 00,013,224 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WacomVTHid.sys -- (WacomVTHid)
DRV - [2009/05/20 11:54:06 | 00,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2009/02/06 17:08:52 | 00,055,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fssfltr.sys -- (fssfltr)
DRV - [2009/01/30 13:29:50 | 00,015,656 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/01/26 14:17:09 | 00,021,248 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MREMP50.sys -- (MREMP50)
DRV - [2009/01/26 14:17:08 | 00,020,096 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MRESP50.sys -- (MRESP50)
DRV - [2008/03/19 04:27:51 | 00,020,152 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2008/03/19 04:27:51 | 00,019,128 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2008/03/19 04:27:51 | 00,017,592 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2007/12/06 08:51:00 | 00,298,496 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\yk60x86.sys -- (yukonwlh)
DRV - [2007/12/02 20:28:08 | 00,330,240 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007/11/14 00:00:00 | 00,043,840 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2007/10/10 16:03:00 | 00,235,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Dev.sys -- (OEM02Dev)
DRV - [2007/09/07 01:27:32 | 00,209,408 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ianvstor.sys -- (iaNvStor) Intel®
DRV - [2007/09/07 01:22:34 | 00,304,920 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\iastor.sys -- (iaStor)
DRV - [2007/09/07 00:50:54 | 00,155,136 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2007/09/06 22:35:46 | 00,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/09/06 22:35:44 | 00,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007/09/06 22:35:42 | 00,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007/08/27 21:51:44 | 00,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Vfx.sys -- (OEM02Vfx)
DRV - [2007/04/16 19:44:34 | 00,046,992 | ---- | M] (UPEK Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tcusb.sys -- (TcUsb)
DRV - [2007/03/21 11:33:46 | 00,534,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BCMWL6.SYS -- (BCM43XX)
DRV - [2007/02/25 09:10:48 | 00,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\dsunidrv.sys -- (dsunidrv)
DRV - [2007/02/16 11:12:36 | 00,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV - [2007/02/15 16:11:28 | 00,011,440 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WacomVKHid.sys -- (WacomVKHid)
DRV - [2006/11/06 17:37:16 | 00,078,128 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btwaudio.sys -- (btwaudio)
DRV - [2006/11/06 15:13:52 | 00,016,560 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btwrchid.sys -- (btwrchid)
DRV - [2006/11/06 15:13:50 | 00,080,176 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btwavdt.sys -- (btwavdt)
DRV - [2006/11/02 01:51:45 | 00,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006/11/02 01:51:38 | 00,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006/11/02 01:51:34 | 00,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006/11/02 01:51:32 | 00,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006/11/02 01:51:25 | 00,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006/11/02 01:51:25 | 00,232,040 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006/11/02 01:51:00 | 00,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006/11/02 01:50:45 | 00,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006/11/02 01:50:41 | 00,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006/11/02 01:50:35 | 00,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006/11/02 01:50:35 | 00,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006/11/02 01:50:35 | 00,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006/11/02 01:50:24 | 00,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006/11/02 01:50:19 | 00,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006/11/02 01:50:17 | 00,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006/11/02 01:50:16 | 00,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006/11/02 01:50:13 | 00,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006/11/02 01:50:11 | 00,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006/11/02 01:50:10 | 00,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006/11/02 01:50:10 | 00,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006/11/02 01:50:10 | 00,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006/11/02 01:50:10 | 00,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006/11/02 01:50:09 | 00,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006/11/02 01:50:09 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006/11/02 01:50:07 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006/11/02 01:50:05 | 00,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006/11/02 01:50:05 | 00,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006/11/02 01:50:04 | 00,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006/11/02 01:50:03 | 00,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006/11/02 01:49:59 | 00,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006/11/02 01:49:56 | 00,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006/11/02 01:49:53 | 00,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006/11/02 00:25:24 | 00,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006/11/02 00:24:47 | 00,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006/11/02 00:24:46 | 00,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006/11/02 00:24:45 | 00,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006/11/02 00:24:44 | 00,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006/11/02 00:24:44 | 00,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006/11/01 23:36:50 | 00,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006/11/01 23:36:43 | 02,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2006/11/01 23:30:55 | 00,200,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel®
DRV - [2006/11/01 23:30:54 | 00,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel®
DRV - [2006/11/01 22:37:21 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv)
DRV - [2006/10/05 14:07:28 | 00,004,736 | ---- | M] (Gteko Ltd.) [Kernel | On_Demand | Stopped] -- C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys -- (DSproct)
DRV - [2005/02/23 13:58:56 | 00,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\afc.sys -- (Afc)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.google.com"
FF - prefs.js..extensions.enabledItems: [email protected]:7
FF - prefs.js..extensions.enabledItems: {69D30031-F4A8-452a-A5B3-5D6787C3C5CF}:3.4



[2009/09/08 16:22:38 | 00,000,000 | ---D | M] -- C:\Users\Dylan J. Robinson\AppData\Roaming\Mozilla\Extensions
[2009/12/04 21:04:55 | 00,000,000 | ---D | M] -- C:\Users\Dylan J. Robinson\AppData\Roaming\Mozilla\Firefox\Profiles\p2rnwqse.default\extensions
[2009/09/08 18:48:51 | 00,000,000 | ---D | M] (OldFactory Black) -- C:\Users\Dylan J. Robinson\AppData\Roaming\Mozilla\Firefox\Profiles\p2rnwqse.default\extensions\{69D30031-F4A8-452a-A5B3-5D6787C3C5CF}
[2009/12/23 13:12:13 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2008/01/04 00:38:50 | 00,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll

O1 HOSTS File: ([2006/09/18 13:41:30 | 00,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Windows\System32\WLTRAY.EXE (Dell Inc.)
O4 - HKLM..\Run: [DELL Webcam Manager] C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [ECenter] C:\DELL\E-Center\EULALauncher.exe ( )
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe File not found
O4 - HKLM..\Run: [NVHotkey] C:\Windows\System32\nvHotkey.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [PSQLLauncher] C:\Program Files\Fingerprint Reader Suite\launcher.exe (UPEK Inc.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\rmtray.exe (PC Tools)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {2042B57E-6336-459E-B7CE-2A0F6C9E6AF8} file:///E:/win/setup/iaieplay.dll (IEPlayInterface Class)
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.co...iaSmartScan.cab (NVIDIA Smart Scan)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8B67B37E-1AE2-4B99-B8CF-55AF4D58DF0D} file:///E:/win/setup/iamce.dll (IAMCE Class)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (vrlogon.dll) - C:\Windows\System32\vrlogon.dll (UPEK Inc.)
O20 - Winlogon\Notify\psfus: DllName - C:\Windows\system32\psqlpwd.dll - C:\Windows\System32\psqlpwd.dll (UPEK Inc.)
O24 - Desktop WallPaper: C:\Users\Dylan J. Robinson\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Dylan J. Robinson\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 13:43:36 | 00,000,024 | -HS- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{16a5e302-0752-11dd-9d78-001e4ce5ae8f}\Shell\Auto\command - "" = sal.xls.exe
O33 - MountPoints2\{3e7ba2de-fd01-11dc-9f9b-001d09404859}\Shell\AutoRun\command - "" = F:\setupSNK.exe -- File not found
O33 - MountPoints2\{56c68cc3-b1b0-11dd-bc21-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{56c68cc3-b1b0-11dd-bc21-806e6f6e6963}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found
O33 - MountPoints2\{56c68cc4-b1b0-11dd-bc21-806e6f6e6963}\Shell\Auto\command - "" = F:\sal.xls.exe -- File not found
O33 - MountPoints2\{7eda730a-ff5f-11dc-b335-001e4ce5ae8f}\Shell\Auto\command - "" = F:\sal.xls.exe -- File not found
O33 - MountPoints2\{9cb7f7a8-106c-11de-be4e-001d09404859}\Shell - "" = AutoRun
O33 - MountPoints2\{9cb7f7a8-106c-11de-be4e-001d09404859}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found
O33 - MountPoints2\{a06e86dd-0652-11dd-bddd-001e4ce5ae8f}\Shell\Auto\command - "" = G:\sal.xls.exe -- File not found
O33 - MountPoints2\{a06e86e2-0652-11dd-bddd-001e4ce5ae8f}\Shell - "" = AutoRun
O33 - MountPoints2\{a06e86e2-0652-11dd-bddd-001e4ce5ae8f}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O33 - MountPoints2\F\Shell\Auto\command - "" = F:\sal.xls.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias [2008/07/31 11:14:23 | 00,000,000 | ---D | M]
NetSvcs: Irmon - C:\Windows\System32\irmon.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
OTL cannot create restorepoints on Vista OSs!

========== Files/Folders - Created Within 30 Days ==========

[2010/01/20 17:29:30 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/01/20 17:29:29 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/01/20 17:29:29 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/01/19 21:06:41 | 00,000,000 | ---D | C] -- C:\Program Files\TrendMicro
[2010/01/19 20:49:41 | 00,000,000 | ---D | C] -- C:\Users\Dylan J. Robinson\AppData\Roaming\AVG8
[2010/01/19 20:37:28 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2010/01/19 20:37:28 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2010/01/15 15:59:05 | 00,000,000 | ---D | C] -- C:\Users\Dylan J. Robinson\Documents\OverlordDemo
[2009/12/29 19:56:16 | 00,000,000 | ---D | C] -- C:\ProgramData\UAB
[2009/12/29 19:56:15 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Drivers HeadQuarters
[2009/12/29 19:56:13 | 00,000,000 | ---D | C] -- C:\Users\Dylan J. Robinson\AppData\Local\PC_Drivers_Headquarters
[2009/12/29 19:55:13 | 00,000,000 | ---D | C] -- C:\Program Files\PC Drivers HeadQuarters
[2009/12/29 12:58:10 | 00,000,000 | ---D | C] -- C:\Users\Dylan J. Robinson\Documents\Bioshock
[2009/12/29 12:58:10 | 00,000,000 | ---D | C] -- C:\Users\Dylan J. Robinson\AppData\Roaming\Bioshock

========== Files - Modified Within 30 Days ==========

[2010/01/20 18:48:47 | 04,456,448 | ---- | M] () -- C:\Users\Dylan J. Robinson\ntuser.dat
[2010/01/20 18:48:08 | 00,000,868 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2010/01/20 18:47:42 | 00,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/01/20 18:47:41 | 00,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/01/20 18:46:50 | 00,089,529 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2010/01/20 18:46:50 | 00,089,529 | ---- | M] () -- C:\ProgramData\nvModes.001
[2010/01/20 18:46:02 | 00,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/01/20 18:45:53 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/01/20 18:45:50 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/01/20 17:50:36 | 00,001,076 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010/01/20 17:46:24 | 33,508,0721 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/01/20 17:34:06 | 00,802,012 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/01/20 17:34:06 | 00,174,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/01/20 17:34:06 | 00,005,078 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/01/20 17:26:37 | 00,524,288 | -HS- | M] () -- C:\Users\Dylan J. Robinson\ntuser.dat{85aa6ec8-0580-11df-9359-001e4ce5ae8f}.TMContainer00000000000000000001.regtrans-ms
[2010/01/20 17:26:37 | 00,065,536 | -HS- | M] () -- C:\Users\Dylan J. Robinson\ntuser.dat{85aa6ec8-0580-11df-9359-001e4ce5ae8f}.TM.blf
[2010/01/20 17:26:35 | 02,591,952 | -H-- | M] () -- C:\Users\Dylan J. Robinson\AppData\Local\IconCache.db
[2010/01/20 17:06:06 | 00,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/01/19 21:15:19 | 00,524,288 | -HS- | M] () -- C:\Users\Dylan J. Robinson\ntuser.dat{85aa6ec8-0580-11df-9359-001e4ce5ae8f}.TMContainer00000000000000000002.regtrans-ms
[2010/01/19 20:39:29 | 00,524,288 | -HS- | M] () -- C:\Users\Dylan J. Robinson\ntuser.dat{a7f7d902-9da5-11de-b0bd-001e4ce5ae8f}.TMContainer00000000000000000001.regtrans-ms
[2010/01/19 20:39:29 | 00,065,536 | -HS- | M] () -- C:\Users\Dylan J. Robinson\ntuser.dat{a7f7d902-9da5-11de-b0bd-001e4ce5ae8f}.TM.blf
[2010/01/17 20:15:02 | 00,001,889 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/01/10 12:27:19 | 00,033,045 | ---- | M] () -- C:\Users\Dylan J. Robinson\Documents\YourGrade.jpg
[2010/01/08 18:51:21 | 00,046,660 | ---- | M] () -- C:\Users\Dylan J. Robinson\Documents\185120.jpg
[2010/01/07 16:07:14 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/01/07 16:07:04 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/01/06 17:18:23 | 00,208,896 | ---- | M] () -- C:\Users\Dylan J. Robinson\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/03 11:09:47 | 00,011,273 | ---- | M] () -- C:\Users\Dylan J. Robinson\Documents\Khatover.docx
[2009/12/31 10:33:44 | 00,001,742 | ---- | M] () -- C:\Users\Dylan J. Robinson\Desktop\BioShock.lnk
[2009/12/29 18:07:17 | 02,206,856 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/12/29 12:11:36 | 00,066,208 | ---- | M] () -- C:\Users\Dylan J. Robinson\AppData\Local\GDIPFONTCACHEV1.DAT
[2009/12/29 12:00:46 | 00,000,219 | ---- | M] () -- C:\Windows\win.ini

========== Files Created - No Company Name ==========

[2010/01/19 21:03:14 | 00,524,288 | -HS- | C] () -- C:\Users\Dylan J. Robinson\ntuser.dat{85aa6ec8-0580-11df-9359-001e4ce5ae8f}.TMContainer00000000000000000002.regtrans-ms
[2010/01/19 21:03:14 | 00,524,288 | -HS- | C] () -- C:\Users\Dylan J. Robinson\ntuser.dat{85aa6ec8-0580-11df-9359-001e4ce5ae8f}.TMContainer00000000000000000001.regtrans-ms
[2010/01/19 21:03:14 | 00,065,536 | -HS- | C] () -- C:\Users\Dylan J. Robinson\ntuser.dat{85aa6ec8-0580-11df-9359-001e4ce5ae8f}.TM.blf
[2010/01/17 20:15:02 | 00,001,889 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/01/10 12:27:19 | 00,033,045 | ---- | C] () -- C:\Users\Dylan J. Robinson\Documents\YourGrade.jpg
[2010/01/08 18:51:45 | 00,046,660 | ---- | C] () -- C:\Users\Dylan J. Robinson\Documents\185120.jpg
[2010/01/03 11:09:46 | 00,011,273 | ---- | C] () -- C:\Users\Dylan J. Robinson\Documents\Khatover.docx
[2009/12/31 10:33:44 | 00,001,742 | ---- | C] () -- C:\Users\Dylan J. Robinson\Desktop\BioShock.lnk
[2009/11/19 20:18:54 | 18,030,130 | ---- | C] () -- C:\ProgramData\vlc-1.0.3-win32.exe
[2009/11/06 10:58:04 | 00,178,975 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2009/08/25 21:18:21 | 00,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/08/03 14:07:42 | 00,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/05/30 16:56:52 | 00,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/05/08 07:50:45 | 00,089,529 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009/05/08 07:50:39 | 00,089,529 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2008/10/07 08:13:30 | 00,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008/10/07 08:13:22 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 08:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008/10/07 08:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008/10/07 08:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 08:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008/10/07 08:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008/10/07 08:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008/10/07 08:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008/10/07 08:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2008/04/18 19:28:16 | 00,000,552 | ---- | C] () -- C:\Users\Dylan J. Robinson\AppData\Local\d3d8caps.dat
[2008/04/07 13:59:40 | 00,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2008/03/31 12:18:08 | 00,001,356 | ---- | C] () -- C:\Users\Dylan J. Robinson\AppData\Local\d3d9caps.dat
[2008/03/29 12:30:10 | 00,000,105 | ---- | C] () -- C:\Users\Dylan J. Robinson\AppData\Local\fusioncache.dat
[2008/03/28 13:27:17 | 00,056,353 | ---- | C] () -- C:\Users\Dylan J. Robinson\AppData\Roaming\nvModes.001
[2008/03/28 13:27:02 | 00,056,353 | ---- | C] () -- C:\Users\Dylan J. Robinson\AppData\Roaming\nvModes.dat
[2008/03/28 11:54:09 | 00,208,896 | ---- | C] () -- C:\Users\Dylan J. Robinson\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/03/19 04:28:15 | 00,167,936 | ---- | C] () -- C:\Windows\System32\nvccoin.dll
[2008/03/19 04:28:14 | 00,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2008/03/18 20:43:33 | 00,065,536 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll
[2006/11/03 14:25:56 | 00,389,120 | ---- | C] () -- C:\Windows\System32\btwhidcs.dll
[2006/11/02 04:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 02:25:44 | 00,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006/11/02 00:43:04 | 00,061,952 | ---- | C] () -- C:\Windows\System32\cngaudit.dll
[2006/11/01 23:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2001/11/14 09:56:00 | 01,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll

========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >
[2008/04/11 08:03:48 | 00,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe


< MD5 for: AGP440.SYS >
[2008/01/18 23:42:25 | 00,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008/01/18 23:42:25 | 00,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008/01/18 23:42:25 | 00,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008/01/18 23:42:25 | 00,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2008/03/19 04:15:47 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=8B10CE1C1F9F1D47E4DEB1A547A00CD4 -- C:\Windows\System32\drivers\AGP440.sys
[2008/03/19 04:15:47 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=8B10CE1C1F9F1D47E4DEB1A547A00CD4 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_8ed06b47\AGP440.sys
[2008/03/19 04:15:47 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=8B10CE1C1F9F1D47E4DEB1A547A00CD4 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.16400_none_b82caac9c18a4e3b\AGP440.sys
[2008/03/19 04:15:47 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=BF34B4A0E0B64440C5389AA6B902F4AD -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.20496_none_b85af81edaeb8461\AGP440.sys
[2006/11/02 01:49:52 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/04/10 22:32:26 | 00,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009/04/10 22:32:26 | 00,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/10 22:32:26 | 00,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/18 23:41:30 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/18 23:41:30 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2008/03/19 04:16:22 | 00,021,688 | ---- | M] (Microsoft Corporation) MD5=3E39E69F31F95D056703212E94320899 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_e6b2949c\atapi.sys
[2008/03/19 04:16:22 | 00,021,688 | ---- | M] (Microsoft Corporation) MD5=3E39E69F31F95D056703212E94320899 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20544_none_dbb443eb3d9db847\atapi.sys
[2006/11/02 01:49:36 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2008/03/19 04:16:11 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=5653737BAD8C6C10136451C195C19881 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20485_none_db8a029f3dbd443b\atapi.sys
[2008/03/19 04:27:51 | 00,021,688 | ---- | M] (Microsoft Corporation) MD5=61CA2C1E145809813C28752298CF9843 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_5da5d093\atapi.sys
[2008/03/19 04:27:51 | 00,021,688 | ---- | M] (Microsoft Corporation) MD5=61CA2C1E145809813C28752298CF9843 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20580_none_db8503133dc1c2af\atapi.sys
[2008/03/19 04:27:51 | 00,021,688 | ---- | M] (Microsoft Corporation) MD5=7EB55F6BEFB392BD312CD0CD5263305D -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_6c3af7d3\atapi.sys
[2008/03/19 04:27:51 | 00,021,688 | ---- | M] (Microsoft Corporation) MD5=7EB55F6BEFB392BD312CD0CD5263305D -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16470_none_db063634249c06f4\atapi.sys
[2008/03/19 04:15:45 | 00,021,688 | ---- | M] (Microsoft Corporation) MD5=9E7E85EC61D1C9C3171CC08427108863 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_5a9555b4\atapi.sys
[2008/03/19 04:15:45 | 00,021,688 | ---- | M] (Microsoft Corporation) MD5=9E7E85EC61D1C9C3171CC08427108863 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20509_none_dbe4850d3d78c736\atapi.sys
[2008/03/19 04:16:11 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=A779CA2C76DA4FCB595E692C05E8E4EB -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_82339ef2\atapi.sys
[2008/03/19 04:16:11 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=A779CA2C76DA4FCB595E692C05E8E4EB -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16391_none_daf194c024ab5b06\atapi.sys
[2008/03/28 12:26:11 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2008/03/28 12:26:11 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2008/03/28 12:26:10 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_64dfd8ea\atapi.sys
[2008/03/28 12:26:10 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2006/11/02 01:46:03 | 00,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
[2006/11/02 01:46:03 | 00,061,952 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\cngaudit.dll

< MD5 for: EVENTLOG.DLL >
[2007/04/16 20:06:36 | 00,033,280 | ---- | M] (UPEK Inc.) MD5=E2D8E32A93945F3FCE220D0F71FDFB27 -- C:\Program Files\Fingerprint Reader Suite\eventlog.dll

< MD5 for: IASTOR.SYS >
[2007/09/07 01:27:28 | 00,277,784 | ---- | M] (Intel Corporation) MD5=5DF93509037399B53D3ECAA8A67B6C58 -- C:\Drivers\storage\R166201\iaStor.sys
[2007/09/07 01:27:28 | 00,277,784 | ---- | M] (Intel Corporation) MD5=5DF93509037399B53D3ECAA8A67B6C58 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_b92fa6ec\iaStor.sys
[2007/09/07 01:27:28 | 00,277,784 | ---- | M] (Intel Corporation) MD5=5DF93509037399B53D3ECAA8A67B6C58 -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_9af7e4ab\iaStor.sys
[2007/09/07 01:22:34 | 00,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Drivers\storage\R166200\iastor.sys
[2007/09/07 01:22:34 | 00,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Windows\System32\drivers\iaStor.sys
[2007/09/07 01:22:34 | 00,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_3a63e5a6\iaStor.sys
[2007/09/07 01:22:34 | 00,304,920 | ---- | M] (Intel Corporation) MD5=997E8F5939F2D12CD9F2E6B395724C16 -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_5f6e7be5\iaStor.sys

< MD5 for: IASTORV.SYS >
[2008/01/18 23:42:51 | 00,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008/01/18 23:42:51 | 00,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006/11/02 01:51:25 | 00,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006/11/02 01:51:25 | 00,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys

< MD5 for: LOGEVENT.DLL >
[2006/11/02 01:46:03 | 00,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\logevent.dll

< MD5 for: NETLOGON.DLL >
[2006/11/02 01:46:11 | 00,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
[2009/04/10 22:28:23 | 00,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009/04/10 22:28:23 | 00,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008/01/18 23:35:36 | 00,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2006/11/02 01:50:13 | 00,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys
[2006/11/02 01:50:13 | 00,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008/01/18 23:42:09 | 00,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008/01/18 23:42:09 | 00,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys

< MD5 for: SCECLI.DLL >
[2008/01/18 23:36:19 | 00,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2006/11/02 01:46:12 | 00,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
[2009/04/10 22:28:24 | 00,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009/04/10 22:28:24 | 00,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2007/03/21 11:33:40 | 00,065,536 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\bcmwlrmt.dll
[2006/11/02 01:46:03 | 00,061,952 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\cngaudit.dll
[2009/04/10 22:27:47 | 00,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2009/04/10 22:28:23 | 00,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll

< %systemroot%\Tasks\*.job /lockedfiles >

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\Windows\AppPatch\Custom\Custom] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp\ZAP2DF2.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP521F.tmp\ZAP521F.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5955.tmp\ZAP5955.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp\ZAP81A.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC715.tmp\ZAPC715.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp\ZAPE752.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp\ZAPEEF0.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\temp\temp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\assembly\tmp\tmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ehome\CreateDisc\style\style] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ftpcache\ftpcache] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Globalization\Globalization] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Help\Corporate\Corporate] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109511090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109610090400000000000F01FEC\12.0.6215\12.0.6215] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109810090400000000000F01FEC\12.0.6215\12.0.6215] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109A10090400000000000F01FEC\12.0.6215\12.0.6215] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109A10090400000000000F01FEC\12.0.6425\12.0.6425] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109B10090400000000000F01FEC\12.0.6215\12.0.6215] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109E60090400000000000F01FEC\12.0.6215\12.0.6215] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109F100A0C00000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\0D756077321A70C3E844C138CE981581\8.0.50727\8.0.50727] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\9.3.0] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Installer\{49C88E44-1B38-4FC6-824E-2BDA3063B0E3}\{49C88E44-1B38-4FC6-824E-2BDA3063B0E3}] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\LiveKernelReports\WATCHDOG\WATCHDOG] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Microsoft.NET\authman\authman] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Minidump\Minidump] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ModemLogs\ModemLogs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\nap\configuration\configuration] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Panther\setup.exe\setup.exe] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\PCHEALTH\ERRORREP\QHEADLES\QHEADLES] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\PCHEALTH\ERRORREP\QSIGNOFF\QSIGNOFF] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\PLA\Templates\Templates] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\registration\CRMLog\CRMLog] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SchCache\SchCache] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\security\templates\templates] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\GameExplorer\GameExplorer] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\PnrpSqm\PnrpSqm] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStore\Tfs_DAV\Tfs_DAV] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Media Center Programs\Media Center Programs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\Description Documents\Description Documents] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Recent\Recent] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\Templates] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Desktop\Desktop] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Documents\Documents] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Downloads\Downloads] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Favorites\Favorites] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Links\Links] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Music\Music] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Pictures\Pictures] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Saved Games\Saved Games] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\LocalService\Videos\Videos] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\SCPD\SCPD] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\GameExplorer\GameExplorer] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Media Center Programs\Media Center Programs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Quick Launch] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Network Shortcuts] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Printer Shortcuts] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Recent\Recent] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\Templates] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Desktop\Desktop] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Documents\Documents] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Downloads\Downloads] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Favorites\Favorites] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Links\Links] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Music\Music] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Pictures\Pictures] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Saved Games\Saved Games] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\ServiceProfiles\NetworkService\Videos\Videos] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\AuthCabs\Downloaded\Downloaded] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\048167a0e1ade3ad1df23834faa1532e\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6000.16922_none_c5603d92a849343f\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6000.16922_none_c5603d92a849343f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\048167a0e1ade3ad1df23834faa1532e\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6000.21122_none_c5e9b27fc167074b\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6000.21122_none_c5e9b27fc167074b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\048167a0e1ade3ad1df23834faa1532e\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6001.18326_none_c74a7d60a56c2a8c\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6001.18326_none_c74a7d60a56c2a8c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\048167a0e1ade3ad1df23834faa1532e\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6001.22515_none_c7ddebb3be829235\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6001.22515_none_c7ddebb3be829235] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\048167a0e1ade3ad1df23834faa1532e\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6002.18106_none_c9469106a28244f5\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6002.18106_none_c9469106a28244f5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\048167a0e1ade3ad1df23834faa1532e\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6002.22218_none_c9c75e79bba6335e\x86_microsoft-windows-msasn1_31bf3856ad364e35_6.0.6002.22218_none_c9c75e79bba6335e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\057d458a5288ce359a4a46636ed70a4e\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18842_none_83af6d0646d60121\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18842_none_83af6d0646d60121] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\057d458a5288ce359a4a46636ed70a4e\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22933_none_8444da075fea9e51\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22933_none_8444da075fea9e51] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\0ce8014e64ad9281a8256633d08ad4d3\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18852_none_f5f82740381d7455\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18852_none_f5f82740381d7455] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\0ce8014e64ad9281a8256633d08ad4d3\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.22942_none_f68c93f75132f82e\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.22942_none_f68c93f75132f82e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\0ed8525cd34c2e596682ba760f74f197\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16960_none_f06101a86e846151\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16960_none_f06101a86e846151] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\0ed8525cd34c2e596682ba760f74f197\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21162_none_f0ec772987a0670b\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21162_none_f0ec772987a0670b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\0ed8525cd34c2e596682ba760f74f197\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18364_none_f24b41766ba7579e\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18364_none_f24b41766ba7579e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\0ed8525cd34c2e596682ba760f74f197\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22564_none_f2d4e02784c4f48f\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22564_none_f2d4e02784c4f48f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\0ed8525cd34c2e596682ba760f74f197\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18146_none_f44955b068bba4b5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18146_none_f44955b068bba4b5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\0ed8525cd34c2e596682ba760f74f197\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22268_none_f4bf533781e7af0f\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22268_none_f4bf533781e7af0f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18865_none_1f70ca4508073b77\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18865_none_1f70ca4508073b77] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.22956_none_20063746211bd8a7\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.22956_none_20063746211bd8a7] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18865_none_defb349ff0bb64f4\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18865_none_defb349ff0bb64f4] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22956_none_df90a1a109d00224\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22956_none_df90a1a109d00224] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18865_none_474fb235c4186a78\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18865_none_474fb235c4186a78] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.22956_none_47e51f36dd2d07a8\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.22956_none_47e51f36dd2d07a8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18865_none_f5f058323822dc4b\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18865_none_f5f058323822dc4b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.22956_none_f685c5335137797b\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.22956_none_f685c5335137797b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18865_none_72dc29f56089fd94\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18865_none_72dc29f56089fd94] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.22956_none_737196f6799e9ac4\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.22956_none_737196f6799e9ac4] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18865_none_2a3a758bb0326402\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18865_none_2a3a758bb0326402] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.22956_none_2acfe28cc9470132\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.22956_none_2acfe28cc9470132] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18865_none_a87dfaba7472aa9d\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18865_none_a87dfaba7472aa9d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22956_none_a91367bb8d8747cd\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22956_none_a91367bb8d8747cd] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18865_none_fe3f5f66cff5e762\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18865_none_fe3f5f66cff5e762] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\17dd77db334b381135b35167e1657bbe\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.22956_none_fed4cc67e90a8492\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.22956_none_fed4cc67e90a8492] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6000.16939_none_b3c27d2921dd6669\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6000.16939_none_b3c27d2921dd6669] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6000.21142_none_b43a20243b09a405\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6000.21142_none_b43a20243b09a405] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6001.18344_none_b598ea711f109498\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6001.18344_none_b598ea711f109498] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6001.22544_none_b6228922382e3189\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6001.22544_none_b6228922382e3189] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6002.18124_none_b794fe171c26af01\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6002.18124_none_b794fe171c26af01] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6002.22247_none_b80bfbe83551d2b2\x86_microsoft-windows-font-embedding_31bf3856ad364e35_6.0.6002.22247_none_b80bfbe83551d2b2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.16939_none_a7d5725a5d6ffbb2\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.16939_none_a7d5725a5d6ffbb2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.21142_none_a84d1555769c394e\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6000.21142_none_a84d1555769c394e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18344_none_a9abdfa25aa329e1\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18344_none_a9abdfa25aa329e1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22544_none_aa357e5373c0c6d2\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22544_none_aa357e5373c0c6d2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18124_none_aba7f34857b9444a\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18124_none_aba7f34857b9444a] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\19dcb4d7ce20e97b7a9f6c3ca4d2bfdf\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22247_none_ac1ef11970e467fb\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22247_none_ac1ef11970e467fb] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1a0b7baeebffa6ce5672fb92bf0f43c5\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16901_none_6a4b28f6b6fb9243\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16901_none_6a4b28f6b6fb9243] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1a0b7baeebffa6ce5672fb92bf0f43c5\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.21101_none_6ad49de3d019654f\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.21101_none_6ad49de3d019654f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1a0b7baeebffa6ce5672fb92bf0f43c5\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18304_none_6c34687ab41f6f39\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18304_none_6c34687ab41f6f39] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1a0b7baeebffa6ce5672fb92bf0f43c5\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22489_none_6c6c8757cd796d3e\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22489_none_6c6c8757cd796d3e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1a0b7baeebffa6ce5672fb92bf0f43c5\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18082_none_6dc25a6eb1887137\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18082_none_6dc25a6eb1887137] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1a0b7baeebffa6ce5672fb92bf0f43c5\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22191_none_6e402703caaf139b\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22191_none_6e402703caaf139b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1abf59ad881ccbd69aeb722934f822df\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16926_none_0973ec0f51fdf005\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16926_none_0973ec0f51fdf005] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1abf59ad881ccbd69aeb722934f822df\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21125_none_09fc60b26b1ca9ba\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21125_none_09fc60b26b1ca9ba] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1abf59ad881ccbd69aeb722934f822df\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18330_none_0b49590d4f3204dd\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18330_none_0b49590d4f3204dd] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1abf59ad881ccbd69aeb722934f822df\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22520_none_0bddc7aa684785dd\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22520_none_0bddc7aa684785dd] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1abf59ad881ccbd69aeb722934f822df\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18111_none_0d466cfd4c47389d\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18111_none_0d466cfd4c47389d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\1abf59ad881ccbd69aeb722934f822df\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22223_none_0dc73a70656b2706\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22223_none_0dc73a70656b2706] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\2ce815ede05b14339b85a58f16a18859\x86_wsdapi_31bf3856ad364e35_6.0.6000.16903_none_bcd054bd502d52a6\x86_wsdapi_31bf3856ad364e35_6.0.6000.16903_none_bcd054bd502d52a6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\2ce815ede05b14339b85a58f16a18859\x86_wsdapi_31bf3856ad364e35_6.0.6000.21103_none_bd59c9aa694b25b2\x86_wsdapi_31bf3856ad364e35_6.0.6000.21103_none_bd59c9aa694b25b2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\2ce815ede05b14339b85a58f16a18859\x86_wsdapi_31bf3856ad364e35_6.0.6001.18306_none_beb994414d512f9c\x86_wsdapi_31bf3856ad364e35_6.0.6001.18306_none_beb994414d512f9c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\2ce815ede05b14339b85a58f16a18859\x86_wsdapi_31bf3856ad364e35_6.0.6001.22491_none_bedce04e66bc4c2c\x86_wsdapi_31bf3856ad364e35_6.0.6001.22491_none_bedce04e66bc4c2c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\2ce815ede05b14339b85a58f16a18859\x86_wsdapi_31bf3856ad364e35_6.0.6002.18085_none_c048867f4ab94af1\x86_wsdapi_31bf3856ad364e35_6.0.6002.18085_none_c048867f4ab94af1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\2ce815ede05b14339b85a58f16a18859\x86_wsdapi_31bf3856ad364e35_6.0.6002.22194_none_c0c6531463dfed55\x86_wsdapi_31bf3856ad364e35_6.0.6002.22194_none_c0c6531463dfed55] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\33c6dbd62afdd63b131f4eba491de2db\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16908_none_b71543169d58fafc\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16908_none_b71543169d58fafc] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\33c6dbd62afdd63b131f4eba491de2db\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.21108_none_b79eb803b676ce08\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.21108_none_b79eb803b676ce08] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\33c6dbd62afdd63b131f4eba491de2db\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.18311_none_b8e9afca9a8df67d\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.18311_none_b8e9afca9a8df67d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\33c6dbd62afdd63b131f4eba491de2db\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.22497_none_b922cef1b3e70dd9\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.22497_none_b922cef1b3e70dd9] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\33c6dbd62afdd63b131f4eba491de2db\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.18091_none_ba79a25297f52b29\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.18091_none_ba79a25297f52b29] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\33c6dbd62afdd63b131f4eba491de2db\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.22200_none_bb639005b0cab34a\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.22200_none_bb639005b0cab34a] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\37967479ddfb920bfbc3ce0ecc48ed41\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6000.16913_none_22dff16cc5023274\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6000.16913_none_22dff16cc5023274] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\37967479ddfb920bfbc3ce0ecc48ed41\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6000.21113_none_23696659de200580\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6000.21113_none_23696659de200580] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\37967479ddfb920bfbc3ce0ecc48ed41\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6001.18315_none_24c830a6c226f613\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6001.18315_none_24c830a6c226f613] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\37967479ddfb920bfbc3ce0ecc48ed41\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6001.22504_none_255b9ef9db3d5dbc\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6001.22504_none_255b9ef9db3d5dbc] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\37967479ddfb920bfbc3ce0ecc48ed41\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6002.18096_none_26592378bf8d4416\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6002.18096_none_26592378bf8d4416] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\37967479ddfb920bfbc3ce0ecc48ed41\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6002.22208_none_27461209d860183c\x86_microsoft.windows.winhttp_31bf3856ad364e35_5.1.6002.22208_none_27461209d860183c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehepg_31bf3856ad364e35_6.0.6000.16919_none_d9bb3268d1c1d4a1\msil_ehepg_31bf3856ad364e35_6.0.6000.16919_none_d9bb3268d1c1d4a1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehepg_31bf3856ad364e35_6.0.6000.21119_none_da44a755eadfa7ad\msil_ehepg_31bf3856ad364e35_6.0.6000.21119_none_da44a755eadfa7ad] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehepg_31bf3856ad364e35_6.0.6001.18322_none_db8f9f1ccef6d022\msil_ehepg_31bf3856ad364e35_6.0.6001.18322_none_db8f9f1ccef6d022] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehepg_31bf3856ad364e35_6.0.6001.22511_none_dc230d6fe80d37cb\msil_ehepg_31bf3856ad364e35_6.0.6001.22511_none_dc230d6fe80d37cb] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehepg_31bf3856ad364e35_6.0.6002.18103_none_dd8cb30ccc0c03e2\msil_ehepg_31bf3856ad364e35_6.0.6002.18103_none_dd8cb30ccc0c03e2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehepg_31bf3856ad364e35_6.0.6002.22215_none_de0d807fe52ff24b\msil_ehepg_31bf3856ad364e35_6.0.6002.22215_none_de0d807fe52ff24b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehexthost_31bf3856ad364e35_6.0.6000.16919_none_bd00af1ec1b137ec\msil_ehexthost_31bf3856ad364e35_6.0.6000.16919_none_bd00af1ec1b137ec] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehexthost_31bf3856ad364e35_6.0.6000.21119_none_bd8a240bdacf0af8\msil_ehexthost_31bf3856ad364e35_6.0.6000.21119_none_bd8a240bdacf0af8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehiextens_31bf3856ad364e35_6.0.6000.16919_none_fbe3b60309b695e1\msil_ehiextens_31bf3856ad364e35_6.0.6000.16919_none_fbe3b60309b695e1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehiextens_31bf3856ad364e35_6.0.6000.21119_none_fc6d2af022d468ed\msil_ehiextens_31bf3856ad364e35_6.0.6000.21119_none_fc6d2af022d468ed] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehrecobj_31bf3856ad364e35_6.0.6000.16919_none_88f94fd24b0cabe6\msil_ehrecobj_31bf3856ad364e35_6.0.6000.16919_none_88f94fd24b0cabe6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehrecobj_31bf3856ad364e35_6.0.6000.21119_none_8982c4bf642a7ef2\msil_ehrecobj_31bf3856ad364e35_6.0.6000.21119_none_8982c4bf642a7ef2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehrecobj_31bf3856ad364e35_6.0.6001.18322_none_8acdbc864841a767\msil_ehrecobj_31bf3856ad364e35_6.0.6001.18322_none_8acdbc864841a767] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehrecobj_31bf3856ad364e35_6.0.6001.22511_none_8b612ad961580f10\msil_ehrecobj_31bf3856ad364e35_6.0.6001.22511_none_8b612ad961580f10] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehrecobj_31bf3856ad364e35_6.0.6002.18103_none_8ccad0764556db27\msil_ehrecobj_31bf3856ad364e35_6.0.6002.18103_none_8ccad0764556db27] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehrecobj_31bf3856ad364e35_6.0.6002.22215_none_8d4b9de95e7ac990\msil_ehrecobj_31bf3856ad364e35_6.0.6002.22215_none_8d4b9de95e7ac990] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehshell_31bf3856ad364e35_6.0.6000.16919_none_89ae4da9447562f3\msil_ehshell_31bf3856ad364e35_6.0.6000.16919_none_89ae4da9447562f3] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehshell_31bf3856ad364e35_6.0.6000.21119_none_8a37c2965d9335ff\msil_ehshell_31bf3856ad364e35_6.0.6000.21119_none_8a37c2965d9335ff] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehshell_31bf3856ad364e35_6.0.6001.18322_none_8b82ba5d41aa5e74\msil_ehshell_31bf3856ad364e35_6.0.6001.18322_none_8b82ba5d41aa5e74] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehshell_31bf3856ad364e35_6.0.6001.22511_none_8c1628b05ac0c61d\msil_ehshell_31bf3856ad364e35_6.0.6001.22511_none_8c1628b05ac0c61d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehshell_31bf3856ad364e35_6.0.6002.18103_none_8d7fce4d3ebf9234\msil_ehshell_31bf3856ad364e35_6.0.6002.18103_none_8d7fce4d3ebf9234] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_ehshell_31bf3856ad364e35_6.0.6002.22215_none_8e009bc057e3809d\msil_ehshell_31bf3856ad364e35_6.0.6002.22215_none_8e009bc057e3809d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_mcstore_31bf3856ad364e35_6.0.6000.16919_none_c3b09a0a40ad4247\msil_mcstore_31bf3856ad364e35_6.0.6000.16919_none_c3b09a0a40ad4247] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_mcstore_31bf3856ad364e35_6.0.6000.21119_none_c43a0ef759cb1553\msil_mcstore_31bf3856ad364e35_6.0.6000.21119_none_c43a0ef759cb1553] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_mcstore_31bf3856ad364e35_6.0.6001.18322_none_c58506be3de23dc8\msil_mcstore_31bf3856ad364e35_6.0.6001.18322_none_c58506be3de23dc8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_mcstore_31bf3856ad364e35_6.0.6001.22511_none_c618751156f8a571\msil_mcstore_31bf3856ad364e35_6.0.6001.22511_none_c618751156f8a571] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_mcstore_31bf3856ad364e35_6.0.6002.18103_none_c7821aae3af77188\msil_mcstore_31bf3856ad364e35_6.0.6002.18103_none_c7821aae3af77188] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_mcstore_31bf3856ad364e35_6.0.6002.22215_none_c802e821541b5ff1\msil_mcstore_31bf3856ad364e35_6.0.6002.22215_none_c802e821541b5ff1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.16919_none_4eabf16098b9d989\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.16919_none_4eabf16098b9d989] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.21119_none_4f35664db1d7ac95\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.21119_none_4f35664db1d7ac95] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6001.18322_none_50805e1495eed50a\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6001.18322_none_50805e1495eed50a] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6001.22511_none_5113cc67af053cb3\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6001.22511_none_5113cc67af053cb3] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6002.18103_none_527d7204930408ca\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6002.18103_none_527d7204930408ca] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6002.22215_none_52fe3f77ac27f733\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6002.22215_none_52fe3f77ac27f733] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.16919_none_313a40105a0dd6a3\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.16919_none_313a40105a0dd6a3] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.21119_none_31c3b4fd732ba9af\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.21119_none_31c3b4fd732ba9af] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6001.18322_none_330eacc45742d224\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6001.18322_none_330eacc45742d224] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6001.22511_none_33a21b17705939cd\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6001.22511_none_33a21b17705939cd] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6002.18103_none_350bc0b4545805e4\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6002.18103_none_350bc0b4545805e4] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6002.22215_none_358c8e276d7bf44d\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6002.22215_none_358c8e276d7bf44d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.16919_none_23959903cf2642b9\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.16919_none_23959903cf2642b9] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.21119_none_241f0df0e84415c5\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.21119_none_241f0df0e84415c5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6001.18322_none_256a05b7cc5b3e3a\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6001.18322_none_256a05b7cc5b3e3a] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6001.22511_none_25fd740ae571a5e3\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6001.22511_none_25fd740ae571a5e3] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6002.18103_none_276719a7c97071fa\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6002.18103_none_276719a7c97071fa] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6002.22215_none_27e7e71ae2946063\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6002.22215_none_27e7e71ae2946063] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.0.6000.16919_none_b4272457a51e9088\x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.0.6000.16919_none_b4272457a51e9088] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.0.6000.21119_none_b4b09944be3c6394\x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.0.6000.21119_none_b4b09944be3c6394] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.0.6001.18322_none_b5fb910ba2538c09\x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.0.6001.18322_none_b5fb910ba2538c09] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.0.6001.22511_none_b68eff5ebb69f3b2\x86_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_6.0.6001.22511_none_b68eff5ebb69f3b2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6000.16919_none_cc3b9dbbcca0c455\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6000.16919_none_cc3b9dbbcca0c455] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6000.21119_none_ccc512a8e5be9761\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6000.21119_none_ccc512a8e5be9761] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6001.18322_none_ce100a6fc9d5bfd6\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6001.18322_none_ce100a6fc9d5bfd6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6001.22511_none_cea378c2e2ec277f\x86_microsoft-windows-ehome-cbva_31bf3856ad364e35_6.0.6001.22511_none_cea378c2e2ec277f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.16919_none_2df5b0db851b701f\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.16919_none_2df5b0db851b701f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.21119_none_2e7f25c89e39432b\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.21119_none_2e7f25c89e39432b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6000.16919_none_2d53d4336cfb74fa\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6000.16919_none_2d53d4336cfb74fa] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6000.21119_none_2ddd492086194806\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6000.21119_none_2ddd492086194806] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6001.18322_none_2f2840e76a30707b\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6001.18322_none_2f2840e76a30707b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6001.22511_none_2fbbaf3a8346d824\x86_microsoft-windows-ehome-ehglid_31bf3856ad364e35_6.0.6001.22511_none_2fbbaf3a8346d824] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6000.16919_none_2bd15bd5bbe22a69\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6000.16919_none_2bd15bd5bbe22a69] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6000.21119_none_2c5ad0c2d4fffd75\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6000.21119_none_2c5ad0c2d4fffd75] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6001.18322_none_2da5c889b91725ea\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6001.18322_none_2da5c889b91725ea] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6001.22511_none_2e3936dcd22d8d93\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6001.22511_none_2e3936dcd22d8d93] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6002.18103_none_2fa2dc79b62c59aa\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6002.18103_none_2fa2dc79b62c59aa] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6002.22215_none_3023a9eccf504813\x86_microsoft-windows-ehome-ehplayer_31bf3856ad364e35_6.0.6002.22215_none_3023a9eccf504813] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6000.16919_none_5023fdaf535192a0\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6000.16919_none_5023fdaf535192a0] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6000.21119_none_50ad729c6c6f65ac\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6000.21119_none_50ad729c6c6f65ac] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6001.18322_none_51f86a6350868e21\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6001.18322_none_51f86a6350868e21] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6001.22511_none_528bd8b6699cf5ca\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6001.22511_none_528bd8b6699cf5ca] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6002.18103_none_53f57e534d9bc1e1\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6002.18103_none_53f57e534d9bc1e1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6002.22215_none_54764bc666bfb04a\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6002.22215_none_54764bc666bfb04a] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.16919_none_36d4c2db16b955b5\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.16919_none_36d4c2db16b955b5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.21119_none_375e37c82fd728c1\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.21119_none_375e37c82fd728c1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6000.16919_none_ccdc1605cc4128ba\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6000.16919_none_ccdc1605cc4128ba] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6000.21119_none_cd658af2e55efbc6\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6000.21119_none_cd658af2e55efbc6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6001.18322_none_ceb082b9c976243b\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6001.18322_none_ceb082b9c976243b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6001.22511_none_cf43f10ce28c8be4\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6001.22511_none_cf43f10ce28c8be4] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehuihlp_31bf3856ad364e35_6.0.6000.16919_none_3a23083c2e16dd5c\x86_microsoft-windows-ehome-ehuihlp_31bf3856ad364e35_6.0.6000.16919_none_3a23083c2e16dd5c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehuihlp_31bf3856ad364e35_6.0.6000.21119_none_3aac7d294734b068\x86_microsoft-windows-ehome-ehuihlp_31bf3856ad364e35_6.0.6000.21119_none_3aac7d294734b068] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6000.16919_none_4980b80557951a97\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6000.16919_none_4980b80557951a97] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6000.21119_none_4a0a2cf270b2eda3\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6000.21119_none_4a0a2cf270b2eda3] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6001.18322_none_4b5524b954ca1618\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6001.18322_none_4b5524b954ca1618] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6001.22511_none_4be8930c6de07dc1\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.0.6001.22511_none_4be8930c6de07dc1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6000.16919_none_de90102a91400756\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6000.16919_none_de90102a91400756] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6000.21119_none_df198517aa5dda62\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6000.21119_none_df198517aa5dda62] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6001.18322_none_e0647cde8e7502d7\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6001.18322_none_e0647cde8e7502d7] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\471f83cd4b9c2294c1f02fbc9be65d35\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6001.22511_none_e0f7eb31a78b6a80\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6001.22511_none_e0f7eb31a78b6a80] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-raschap_31bf3856ad364e35_6.0.6000.16932_none_10ba5ae17a3c63eb\x86_microsoft-windows-raschap_31bf3856ad364e35_6.0.6000.16932_none_10ba5ae17a3c63eb] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-raschap_31bf3856ad364e35_6.0.6000.21134_none_1145d062935869a5\x86_microsoft-windows-raschap_31bf3856ad364e35_6.0.6000.21134_none_1145d062935869a5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-raschap_31bf3856ad364e35_6.0.6001.18336_none_12a49aaf775f5a38\x86_microsoft-windows-raschap_31bf3856ad364e35_6.0.6001.18336_none_12a49aaf775f5a38] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-raschap_31bf3856ad364e35_6.0.6001.22536_none_132e3960907cf729\x86_microsoft-windows-raschap_31bf3856ad364e35_6.0.6001.22536_none_132e3960907cf729] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6000.16932_none_6a6083ca5313cd52\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6000.16932_none_6a6083ca5313cd52] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6000.21134_none_6aebf94b6c2fd30c\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6000.21134_none_6aebf94b6c2fd30c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6001.18336_none_6c4ac3985036c39f\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6001.18336_none_6c4ac3985036c39f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6001.22536_none_6cd4624969546090\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6001.22536_none_6cd4624969546090] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6002.18116_none_6e46d73e4d4cde08\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6002.18116_none_6e46d73e4d4cde08] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\72f350f63bdbd0c0e8d4ddab02a0321d\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6002.22240_none_6eaa02896688399b\x86_microsoft-windows-rastls_31bf3856ad364e35_6.0.6002.22240_none_6eaa02896688399b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.16868_none_9a40172a0fc4863e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6000.21065_none_9ac68b3928e50d45] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18270_none_9c1383940cfa6868] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.22447_none_9cc4940f25f962e7] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18049_none_9e2369c00a004aef] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\8515290af8e2a11b58a5fdcb5018cdf3\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22150_none_9e993405232e229b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16919_none_f0a013de6e53b9ab\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16919_none_f0a013de6e53b9ab] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21119_none_f12988cb87718cb7\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21119_none_f12988cb87718cb7] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18322_none_f27480926b88b52c\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18322_none_f27480926b88b52c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22511_none_f307eee5849f1cd5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22511_none_f307eee5849f1cd5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18103_none_f4719482689de8ec\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18103_none_f4719482689de8ec] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\900b4a4eda74f4f6355031d2463ada66\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22215_none_f4f261f581c1d755\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22215_none_f4f261f581c1d755] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.16884_none_9a0b894107fccf79] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6000.21082_none_9a92fd9a211c6fd7] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.22468_none_9c9507981e2d2ad5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18064_none_9deddb8d02397ad3] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\98feee1bafb0596b2f2987bc05c79171\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.22170_none_9e68a7441b62d132] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\a3727e909e12c210a7a4be6cf1bce78a\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6000.16891_none_d406d35b8367d5f1\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6000.16891_none_d406d35b8367d5f1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\a3727e909e12c210a7a4be6cf1bce78a\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6000.21090_none_d48f47fe9c868fa6\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6000.21090_none_d48f47fe9c868fa6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\a3727e909e12c210a7a4be6cf1bce78a\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6001.18295_none_d5f11329808acc3e\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6001.18295_none_d5f11329808acc3e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\a3727e909e12c210a7a4be6cf1bce78a\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6001.22476_none_d69151fc99974aa4\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6001.22476_none_d69151fc99974aa4] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\a3727e909e12c210a7a4be6cf1bce78a\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6002.18072_none_d7ea25f17da39aa2\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6002.18072_none_d7ea25f17da39aa2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\a3727e909e12c210a7a4be6cf1bce78a\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6002.22181_none_d867f28696ca3d06\x86_microsoft-windows-ehome-ehkeyctl_31bf3856ad364e35_6.0.6002.22181_none_d867f28696ca3d06] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd285578ce285b\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd285578ce285b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d1618975e9b345\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d1618975e9b345] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a80213731ca5a7\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a80213731ca5a7] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.21125_none_395fe8aa98b803ee\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.21125_none_395fe8aa98b803ee] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.22518_none_3b5421de95d38ed8\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.22518_none_3b5421de95d38ed8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.22223_none_3d2ac2689306813a\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.22223_none_3d2ac2689306813a] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.16926_none_7abd15c3656ef988\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.16926_none_7abd15c3656ef988] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.21125_none_7b458a667e8db33d\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.21125_none_7b458a667e8db33d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.18330_none_7c9282c162a30e60\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.18330_none_7c9282c162a30e60] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.22518_none_7d39c39a7ba93e27\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.22518_none_7d39c39a7ba93e27] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.18111_none_7e8f96b15fb84220\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.18111_none_7e8f96b15fb84220] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b3da37d1490a6f1e10a887a163a78ba5\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.22223_none_7f10642478dc3089\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.22223_none_7f10642478dc3089] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.16908_none_586821dd6d61016f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.16908_none_586821dd6d61016f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.21108_none_58f196ca867ed47b\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6000.21108_none_58f196ca867ed47b] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.18311_none_5a3c8e916a95fcf0\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.18311_none_5a3c8e916a95fcf0] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.22497_none_5a75adb883ef144c\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6001.22497_none_5a75adb883ef144c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.18091_none_5bcc811967fd319c\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.18091_none_5bcc811967fd319c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.22200_none_5cb66ecc80d2b9bd\x86_microsoft-windows-netevent_31bf3856ad364e35_6.0.6002.22200_none_5cb66ecc80d2b9bd] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21108_none_cbcfae32467adc51] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.16908_none_30e8bd0651b053ef] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6000.21108_none_317231f36ace26fb] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18311_none_32bd29ba4ee54f70] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.22497_none_32f648e1683e66cc] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18091_none_344d1c424c4c841c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\b635b7a7651f5dd1a95f6d85f3bb620f\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.22200_none_353709f565220c3d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\bd64172cd2143fb5d6d9c864a6da8395\bd64172cd2143fb5d6d9c864a6da8395] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cbd5036f9b9ae5acef10d317a308b436\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6000.16942_none_8d9cb465c6c1faf5\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6000.16942_none_8d9cb465c6c1faf5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cbd5036f9b9ae5acef10d317a308b436\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6000.21145_none_8e292a30dfdd1a06\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6000.21145_none_8e292a30dfdd1a06] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cbd5036f9b9ae5acef10d317a308b436\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6001.18347_none_8f87f47dc3e40a99\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6001.18347_none_8f87f47dc3e40a99] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cbd5036f9b9ae5acef10d317a308b436\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6001.22547_none_9011932edd01a78a\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6001.22547_none_9011932edd01a78a] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cbd5036f9b9ae5acef10d317a308b436\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6002.18127_none_91840823c0fa2502\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6002.18127_none_91840823c0fa2502] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cbd5036f9b9ae5acef10d317a308b436\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6002.22250_none_91e63324da36673e\x86_microsoft-windows-timedate_31bf3856ad364e35_6.0.6002.22250_none_91e63324da36673e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cc8fd54031b3d2ce381429cad6a365e5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16939_none_f08a74066e63f18d\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16939_none_f08a74066e63f18d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cc8fd54031b3d2ce381429cad6a365e5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21142_none_f102170187902f29\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21142_none_f102170187902f29] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cc8fd54031b3d2ce381429cad6a365e5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18344_none_f260e14e6b971fbc\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18344_none_f260e14e6b971fbc] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cc8fd54031b3d2ce381429cad6a365e5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22544_none_f2ea7fff84b4bcad\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22544_none_f2ea7fff84b4bcad] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cc8fd54031b3d2ce381429cad6a365e5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18124_none_f45cf4f468ad3a25\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18124_none_f45cf4f468ad3a25] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\cc8fd54031b3d2ce381429cad6a365e5\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22247_none_f4d3f2c581d85dd6\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22247_none_f4d3f2c581d85dd6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16866_none_3fdf3668c441aa88\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16866_none_3fdf3668c441aa88] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21062_none_4064aa2ddd631838\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21062_none_4064aa2ddd631838] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18267_none_41c67558c16754d0\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18267_none_41c67558c16754d0] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22444_none_4262b303da776dda\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22444_none_4262b303da776dda] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18046_none_43c188b4be7e55e2\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18046_none_43c188b4be7e55e2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d2d2847d8d293b748203da2d4ed8109b\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22147_none_444c25c9d79b0f03\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22147_none_444c25c9d79b0f03] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_40164834c4183551] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_409fbd21dd36085d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_41eab4e8c14d30d2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_4292f60bda5279f0] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_43e7c8d8be626492] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\d7480a065993d63dcab7527fa2107fee\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_4468964bd78652fb] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e299352e102f0c24faf167d1ff954d68\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6001.22522_none_044c3353295315ad\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6001.22522_none_044c3353295315ad] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e299352e102f0c24faf167d1ff954d68\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6000.16927_none_d7f7c2a8f95f038d\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6000.16927_none_d7f7c2a8f95f038d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e299352e102f0c24faf167d1ff954d68\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6000.21127_none_d8813796127cd699\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6000.21127_none_d8813796127cd699] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e299352e102f0c24faf167d1ff954d68\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6001.18331_none_d9cd2fa6f6931865\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6001.18331_none_d9cd2fa6f6931865] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e299352e102f0c24faf167d1ff954d68\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6001.22522_none_da629e8e0fa7b2bc\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6001.22522_none_da629e8e0fa7b2bc] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e299352e102f0c24faf167d1ff954d68\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6002.18112_none_dbca4396f3a84c25\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6002.18112_none_dbca4396f3a84c25] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e299352e102f0c24faf167d1ff954d68\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6002.22225_none_dc4c11540ccb53e5\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6002.22225_none_dc4c11540ccb53e5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.16903_none_868b088499acd4c5\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.16903_none_868b088499acd4c5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.21103_none_87147d71b2caa7d1\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.21103_none_87147d71b2caa7d1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.18306_none_8874480896d0b1bb\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.18306_none_8874480896d0b1bb] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.22492_none_8898945fb03ae7a2\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.22492_none_8898945fb03ae7a2] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6002.18087_none_8a053ada9436ffbe\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6002.18087_none_8a053ada9436ffbe] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6002.22196_none_8a83076fad5da222\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6002.22196_none_8a83076fad5da222] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.16903_none_868ac42c99ad21a8\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.16903_none_868ac42c99ad21a8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.21103_none_87143919b2caf4b4\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.21103_none_87143919b2caf4b4] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.18306_none_887403b096d0fe9e\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.18306_none_887403b096d0fe9e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.22492_none_88985007b03b3485\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.22492_none_88985007b03b3485] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6002.18087_none_8a04f68294374ca1\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6002.18087_none_8a04f68294374ca1] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e46c934496bf8631cc4eed6952b15a78\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6002.22196_none_8a82c317ad5def05\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6002.22196_none_8a82c317ad5def05] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6000.16951_en-us_10da107fd946a243\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6000.16951_en-us_10da107fd946a243] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6000.21154_en-us_1166864af261c154\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6000.21154_en-us_1166864af261c154] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6001.18356_en-us_12c55097d668b1e7\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6001.18356_en-us_12c55097d668b1e7] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6001.22556_en-us_134eef48ef864ed8\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6001.22556_en-us_134eef48ef864ed8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6002.18136_en-us_14c1643dd37ecc50\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6002.18136_en-us_14c1643dd37ecc50] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6002.22258_en-us_153761c4ecaad6aa\x86_microsoft-windows-http.resources_31bf3856ad364e35_6.0.6002.22258_en-us_153761c4ecaad6aa] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6000.16951_none_aaa5b4031bdbf8a8\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6000.16951_none_aaa5b4031bdbf8a8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6000.21154_none_ab3229ce34f717b9\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6000.21154_none_ab3229ce34f717b9] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6001.18356_none_ac90f41b18fe084c\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6001.18356_none_ac90f41b18fe084c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6001.22556_none_ad1a92cc321ba53d\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6001.22556_none_ad1a92cc321ba53d] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6002.18136_none_ae8d07c1161422b5\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6002.18136_none_ae8d07c1161422b5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6002.22258_none_af0305482f402d0f\x86_microsoft-windows-http_31bf3856ad364e35_6.0.6002.22258_none_af0305482f402d0f] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6000.16951_none_f390f4b9a04ce563\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6000.16951_none_f390f4b9a04ce563] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6000.21154_none_f41d6a84b9680474\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6000.21154_none_f41d6a84b9680474] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.18356_none_f57c34d19d6ef507\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.18356_none_f57c34d19d6ef507] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22556_none_f605d382b68c91f8\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6001.22556_none_f605d382b68c91f8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.18136_none_f77848779a850f70\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.18136_none_f77848779a850f70] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22258_none_f7ee45feb3b119ca\x86_microsoft-windows-http-api_31bf3856ad364e35_6.0.6002.22258_none_f7ee45feb3b119ca] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.16951_none_7191de9e777b7949\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.16951_none_7191de9e777b7949] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.21154_none_721e54699096985a\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.21154_none_721e54699096985a] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6001.18356_none_737d1eb6749d88ed\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6001.18356_none_737d1eb6749d88ed] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6001.22556_none_7406bd678dbb25de\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6001.22556_none_7406bd678dbb25de] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6002.18136_none_7579325c71b3a356\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6002.18136_none_7579325c71b3a356] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\e5714d593b88012159cc710921e85968\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6002.22258_none_75ef2fe38adfadb0\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6002.22258_none_75ef2fe38adfadb0] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\f01c4bbfa608298ce96317823815654c\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6000.16838_none_f831274072c7bd51\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6000.16838_none_f831274072c7bd51] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\f01c4bbfa608298ce96317823815654c\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6000.21033_none_f8b59abb8bea11aa\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6000.21033_none_f8b59abb8bea11aa] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\f01c4bbfa608298ce96317823815654c\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6001.18234_none_fa1364be6ff1e8e6\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6001.18234_none_fa1364be6ff1e8e6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\f01c4bbfa608298ce96317823815654c\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6001.22403_none_fabc72e988f818ad\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6001.22403_none_fabc72e988f818ad] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\f01c4bbfa608298ce96317823815654c\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6002.18034_none_fbf9d88c6d183b31\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6002.18034_none_fbf9d88c6d183b31] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\f01c4bbfa608298ce96317823815654c\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6002.22131_none_fc80747986388ef6\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.0.6002.22131_none_fc80747986388ef6] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\f9870fa09c866a37752cd50336c30a22\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18819_none_83d6ded046b75eaf\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18819_none_83d6ded046b75eaf] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\f9870fa09c866a37752cd50336c30a22\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22909_none_846b4b875fcce288\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22909_none_846b4b875fcce288] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18828_none_1f9f0ad307e417b8\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18828_none_1f9f0ad307e417b8] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.22918_none_2033778a20f99b91\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.22918_none_2033778a20f99b91] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18828_none_df29752df0984135\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18828_none_df29752df0984135] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22918_none_dfbde1e509adc50e\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22918_none_dfbde1e509adc50e] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18828_none_477df2c3c3f546b9\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18828_none_477df2c3c3f546b9] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.22918_none_48125f7add0aca92\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.22918_none_48125f7add0aca92] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18828_none_f61e98c037ffb88c\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18828_none_f61e98c037ffb88c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.22918_none_f6b3057751153c65\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.22918_none_f6b3057751153c65] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18828_none_730a6a836066d9d5\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18828_none_730a6a836066d9d5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.22918_none_739ed73a797c5dae\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.22918_none_739ed73a797c5dae] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18828_none_2a68b619b00f4043\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18828_none_2a68b619b00f4043] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.22918_none_2afd22d0c924c41c\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.22918_none_2afd22d0c924c41c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18828_none_a8ac3b48744f86de\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18828_none_a8ac3b48744f86de] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22918_none_a940a7ff8d650ab7\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22918_none_a940a7ff8d650ab7] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18828_none_fe6d9ff4cfd2c3a3\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18828_none_fe6d9ff4cfd2c3a3] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\Download\fa8c2d28d4f83f2d821668f4c68d7ffc\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.22918_none_ff020cabe8e8477c\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.22918_none_ff020cabe8e8477c] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\PostRebootEventCache\PostRebootEventCache] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\SoftwareDistribution\ScanFile\ScanFile] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Sun\Java\Deployment\Deployment] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\0409\0409] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\Branding\en-US\en-US] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\com\dmp\dmp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\Journal\Journal] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\Manifest\Initial\Initial] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production\temp\temp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Messenger\Messenger] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\OFFICE\OFFICE] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Content.IE5] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Local\Temp\Temp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\Silverlight\Silverlight] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\Deployment] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production\temp\temp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\Certificates] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\CRLs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\CTLs] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\directx\directx] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\ENU\ENU] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\GroupPolicy\GroupPolicy] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\GroupPolicyUsers\GroupPolicyUsers] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\inetsrv\inetsrv] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\Microsoft\Crypto\RSA\MachineKeys\MachineKeys] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\MUI\dispspec\dispspec] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\setup\en-US\en-US] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\SMI\Manifests\Manifests] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\spool\drivers\IA64\IA64] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\spool\drivers\x64\x64] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\spool\PRINTERS\PRINTERS] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\spool\SERVERS\SERVERS] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\Tasks\Microsoft\Windows Defender\Windows Defender] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\Tasks\Microsoft\Windows\PLA\System\System] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\Tasks\Microsoft\Windows\RestartManager\RestartManager] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\Tasks\Microsoft\Windows\SyncCenter\SyncCenter] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\Tasks\Microsoft\Windows\WindowsCalendar\WindowsCalendar] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\wbem\MOF\bad\bad] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\wbem\MOF\good\good] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\WDI\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\WDI\{67144949-5132-4859-8036-a737b43825d8}\{67144949-5132-4859-8036-a737b43825d8}] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\WDI\{ecfb03d1-58ee-4cc7-a1b5-9bc6febcb915}\{ecfb03d1-58ee-4cc7-a1b5-9bc6febcb915}] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\WDI\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\System32\winevt\TraceFormat\TraceFormat] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\Temp\Temp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\tracing\tracing] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\winsxs\InstallTemp\InstallTemp] -> \Device\__max++>\^ -> Mount Point
[C:\Windows\winsxs\Temp\PendingRenames\PendingRenames] -> \Device\__max++>\^ -> Mount Point

========== Alternate Data Streams ==========

@Alternate Data Stream - 161 bytes -> C:\ProgramData\TEMP:1CA73D29
@Alternate Data Stream - 156 bytes -> C:\ProgramData\TEMP:D1B5B4F1
@Alternate Data Stream - 142 bytes -> C:\Windows\System32:YÈwzÊwYÈwl?%t́ñơpctlsp.log
@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:DFC5A2B2
< End of report >

Edited by DylanR, 20 January 2010 - 09:02 PM.

  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP
Remember when running a program in Vista you should right click and Run As Administrator.

Copy the text between the lines of stars by highlighting and Ctrl + c.

******************************************************************
reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2" /f

**********************************************************************

Start, Programs, Accessories, then right click on Command Prompt and select Run As Administrator, to bring up a Command Prompt. Rightclick and select Paste and the above text should appear. Make sure you got it all and then hit Enter.

Close the Command Prompt window.

Download Flash_Disinfector.exe by sUBs
http://download.blee...Disinfector.exe
and save it to your desktop.

* Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
* The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
* Wait until it has finished scanning and then exit the program.
* Reboot your computer when done.


Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.


Run:

Malwarebytes' Anti-Malware
:!: If you have a previous version of MalwareBytes', remove it via Add or Remove Programs and download a fresh copy. :!:

http://www.malwarebytes.org/mbam.php

SAVE Malwarebytes' Anti-Malware to your desktop.

* Rightclick on mbam-setup.exe & run as administrator and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.

* Be sure that everything is checked, and click Remove Selected.

* When completed, a log will open in Notepad. Please save it to a convenient location.
* The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
* Post that log back here.


Download but do not yet run ComboFix
:!: If you have a previous version of Combofix.exe, delete it and download a fresh copy. :!:

:!: It must be saved to your desktop, do not run it :!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html


Download and Rename this file -- (call it george.exe ) to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

right click on george and Run As Administrator.
to start the program.



* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix. Allow it to install the Recovery Console then Continue. When the scan completes Notepad will open with with your results log open. Do a File, Exit and answer 'Yes' to save changes.


A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

A file will be created at => C:\Combofix.txt. I'll need to see that in your reply.

Re-activate your protection programs at this time :!:

Reboot now, please :!:

Post Back (copy/paste the .txt files, do not use attachments)
After following the above, post back with:


1.Contents of C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

2. Contents of C:\Combofix.txt

Ron

Edited by RKinner, 21 January 2010 - 05:39 PM.

  • 0

#3
DylanR

DylanR

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
First: Thank you so much for your help! This so far is a huge help.

However: It won't even let me run the Flash Disinfector. It confirms that I want to allow the program to run, and then nothing happens. Tried it a few times: Then looking at Task Manager the program starts but then just Poof! vanishes.

I tried to go ahead and do a full Malware Bytes scan, but as soon as the scan starts, it crashes out. Then tells me I don't have administrator rights to run it.
  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP
Were you able to run the reg command? Try rebooting after running the command.

You can also try booting into Safe Mode (Start tapping F8 when you see the maker's logo and keep tapping until you see the menu. Select Safe Mode. Then try running MBAM or combofix. They won't be able to update or install the recovery console but may be able to run.

Ron

Edited by RKinner, 21 January 2010 - 10:28 PM.

  • 0

#5
DylanR

DylanR

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
MBam wouldn't go, even in safe mode. ComboFix provided the following:

ComboFix 10-01-21.08 - Dylan J. Robinson 01/22/2010 17:37:33.1.2 - x86 MINIMAL
Running from: c:\users\Dylan J. Robinson\Desktop\George.exe
AV: PC-cillin Internet Security - Virus Protection *On-access scanning enabled* (Outdated) {7D2296BC-32CC-4519-917E-52E652474AF5}
FW: PC-cillin Internet Security - Firewall *enabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}
SP: PC-cillin Internet Security - Spyware Protection *enabled* (Outdated) {003DD9A8-02A6-43CF-81BA-5D403CAD001E}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
ADS - system32: deleted 142 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-1062721192-3546382429-859977361-1003
c:\$recycle.bin\S-1-5-21-1062721192-3546382429-859977361-500
c:\$recycle.bin\S-1-5-21-1400113804-1914402855-3429530994-500
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
C:\install.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
c:\programdata\vlc-1.0.3-win32.exe

Infected copy of c:\windows\system32\cngaudit.dll was found and disinfected
Restored copy from - c:\windows\system32\logevent.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226ED}
-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226EE}


((((((((((((((((((((((((( Files Created from 2009-12-23 to 2010-01-23 )))))))))))))))))))))))))))))))
.

2010-01-23 01:41 . 2010-01-23 01:41 -------- d-----w- c:\users\Otto\AppData\Local\temp
2010-01-23 01:41 . 2010-01-23 01:41 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Local\temp
2010-01-23 01:41 . 2010-01-23 01:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-23 01:29 . 2010-01-08 00:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-23 01:29 . 2010-01-23 01:29 -------- d-----w- c:\program files\Malwarebytes
2010-01-23 01:29 . 2010-01-08 00:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-22 03:38 . 2010-01-23 01:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-20 05:06 . 2010-01-20 05:06 -------- d-----w- c:\program files\TrendMicro
2010-01-20 04:49 . 2010-01-20 04:49 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Roaming\AVG8
2010-01-20 04:37 . 2009-10-19 13:38 156672 ----a-w- c:\windows\system32\t2embed.dll
2010-01-20 04:37 . 2009-10-19 13:35 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-12-30 03:56 . 2009-12-30 03:56 -------- d-----w- c:\programdata\PC Drivers HeadQuarters
2009-12-29 20:58 . 2010-01-17 21:15 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Roaming\Bioshock
2009-12-26 19:25 . 2009-12-26 19:25 690952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-23 01:47 . 2009-05-08 15:50 89529 ----a-w- c:\programdata\nvModes.dat
2010-01-23 01:47 . 2009-10-21 01:17 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Roaming\WTablet
2010-01-23 01:35 . 2008-03-31 20:18 1356 ----a-w- c:\users\Dylan J. Robinson\AppData\Local\d3d9caps.dat
2010-01-23 01:24 . 2008-03-19 04:34 1076 ----a-w- c:\windows\bthservsdp.dat
2010-01-22 02:18 . 2009-08-24 02:58 -------- d-----w- c:\program files\Common Files\PC Tools
2010-01-22 02:18 . 2008-08-26 03:47 -------- d-----w- c:\program files\Spyware Doctor
2010-01-20 04:59 . 2008-04-07 22:08 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-20 04:38 . 2009-12-17 22:32 -------- d-----w- c:\programdata\Microsoft Help
2010-01-18 08:41 . 2008-04-28 03:52 -------- d-----w- c:\program files\Steam
2010-01-18 04:15 . 2008-03-19 04:54 -------- d-----w- c:\program files\Common Files\Adobe
2009-12-30 03:33 . 2008-04-28 03:53 -------- d-----w- c:\program files\Common Files\Steam
2009-12-29 20:11 . 2008-03-28 19:46 66208 ----a-w- c:\users\Dylan J. Robinson\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-29 20:02 . 2009-12-17 22:38 -------- d-----w- c:\program files\Microsoft Works
2009-12-29 19:49 . 2008-03-19 05:19 -------- d-----w- c:\programdata\NVIDIA
2009-12-23 22:17 . 2009-12-18 21:14 -------- d-----w- c:\program files\Carbonite
2009-12-23 21:13 . 2008-03-19 04:43 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-19 02:54 . 2009-05-11 01:21 127903 ----a-w- c:\users\Dylan J. Robinson\AppData\Roaming\Move Networks\uninstall.exe
2009-12-19 02:54 . 2009-05-27 23:29 4183416 ----a-w- c:\users\Dylan J. Robinson\AppData\Roaming\Move Networks\plugins\npqmp071502000008.dll
2009-12-19 02:54 . 2009-05-11 01:21 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Roaming\Move Networks
2009-12-18 21:15 . 2009-12-18 21:15 -------- d-----w- c:\programdata\Seagate
2009-12-18 21:15 . 2009-12-18 21:15 -------- d-----w- c:\program files\Seagate
2009-12-17 23:14 . 2009-12-17 23:14 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Roaming\Stardock
2009-12-17 23:14 . 2009-12-17 23:14 -------- dc-h--w- c:\programdata\{1EB63B4B-5639-4477-8E24-05C31B5F8019}
2009-12-17 23:13 . 2009-12-17 23:13 -------- d-----w- c:\program files\Stardock
2009-12-17 23:13 . 2008-03-31 22:24 -------- d-----w- c:\programdata\Stardock
2009-12-17 23:13 . 2009-12-17 23:13 -------- d-----w- c:\program files\Stardock Games
2009-12-17 23:00 . 2009-05-08 15:45 -------- d-----w- c:\program files\Microsoft
2009-12-17 22:38 . 2009-12-17 22:38 -------- d-----w- c:\program files\Microsoft.NET
2009-12-14 05:56 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-13 22:18 . 2009-12-13 22:18 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Roaming\Braid
2009-12-13 07:44 . 2009-12-13 07:44 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Roaming\runic games
2009-12-13 05:52 . 2009-03-13 03:44 -------- d-----w- c:\programdata\Media Center Programs
2009-12-06 06:15 . 2009-12-06 06:15 -------- d-----w- c:\program files\NVIDIA Corporation
2009-12-05 05:00 . 2009-11-11 21:28 -------- d-----w- c:\users\Dylan J. Robinson\AppData\Roaming\BitTorrent
2009-12-01 02:02 . 2009-12-01 02:02 171144 ----a-w- c:\windows\system32\xliveinstall.dll
2009-12-01 02:02 . 2009-12-01 02:02 72840 ----a-w- c:\windows\system32\xliveinstallhost.exe
2009-11-27 07:45 . 2009-05-09 23:46 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-11-26 16:26 . 2008-04-02 07:20 -------- d-----w- c:\program files\DivX
2009-11-21 06:40 . 2009-12-10 01:02 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-10 01:02 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 06:34 . 2009-12-10 01:02 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 04:59 . 2009-12-10 01:02 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-21 04:33 . 2009-11-21 04:33 87144 ----a-w- c:\windows\system32\nvhotkey.dll
2009-11-21 04:33 . 2009-11-21 04:33 812648 ----a-w- c:\windows\system32\nvsvc.dll
2009-11-21 04:33 . 2009-11-21 04:33 1323624 ----a-w- c:\windows\system32\nvsvcr.dll
2009-11-21 04:33 . 2009-11-21 04:33 12685928 ----a-w- c:\windows\system32\nvcpl.dll
2009-11-21 04:33 . 2009-11-21 04:33 122984 ----a-w- c:\windows\system32\nvvsvc.exe
2009-11-21 04:33 . 2009-11-21 04:33 110184 ----a-w- c:\windows\system32\nvmctray.dll
2009-11-20 05:42 . 2007-10-05 04:24 592488 ----a-w- c:\windows\system32\nvuninst.exe
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47 696320 ----a-w- c:\windows\system32\DivX.dll
2009-11-09 12:31 . 2009-12-11 19:24 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-11-09 12:30 . 2009-12-11 19:24 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-11-09 10:36 . 2009-12-11 19:24 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-11-06 18:59 . 2009-11-06 18:59 15406728 ----a-w- c:\windows\system32\xlive.dll
2009-11-06 18:59 . 2009-11-06 18:59 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-11-05 02:17 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-10-29 09:17 . 2009-11-26 06:42 2048 ----a-w- c:\windows\system32\tzres.dll
2008-03-19 04:47 . 2008-03-19 04:47 76 --sh--r- c:\windows\CT4CET.bin
2008-03-19 12:27 . 2008-03-19 12:15 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
2006-09-18 21:43 . 2006-11-02 06:25 10 --sha-w- c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6000.16386_none_fbd6b71e75a2c6c8\config.sys
2006-09-18 21:43 . 2006-11-02 06:25 10 --sha-w- c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\config.sys
2006-09-18 21:43 . 2006-11-02 06:25 10 --sha-w- c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\config.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay]
@="{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}"
[HKEY_CLASSES_ROOT\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}]
2007-04-17 04:13 721408 ----a-w- c:\program files\Fingerprint Reader Suite\farchns.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen]
@="{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}"
[HKEY_CLASSES_ROOT\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}]
2007-04-17 04:13 721408 ----a-w- c:\program files\Fingerprint Reader Suite\farchns.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"RegistryMechanic"="c:\program files\Registry Mechanic\rmtray.exe" [2008-07-03 812952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2007-05-25 17920]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-09-07 159744]
"OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2007-08-28 36864]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-03-21 1548288]
"PSQLLauncher"="c:\program files\Fingerprint Reader Suite\launcher.exe" [2007-04-17 49168]
"DELL Webcam Manager"="c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 118784]
"SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2007-12-03 405504]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-27 413696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2009-11-21 87144]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2007-9-7 1180952]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableCAD"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2007-04-17 04:04 86528 ----a-w- c:\windows\System32\psqlpwd.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli psqlpwd

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):31,73,b0,44,99,e1,c9,01

R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [x]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [x]
R2 gupdate1ca1642fd434fa0;Google Update Service (gupdate1ca1642fd434fa0);c:\program files\Google\Update\GoogleUpdate.exe [2009-08-06 133104]
R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\program files\steam\steamapps\common\dragon age origins\bin_ship\DAUpdaterSvc.Service.exe [x]
R3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe [2008-01-19 21504]
R3 fssfltr;fssfltr;c:\windows\system32\DRIVERS\fssfltr.sys [2009-02-07 55280]
R3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-07 533360]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [x]
R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [2009-01-30 15656]
R4 iaNvStor;Intel® Turbo Memory Controller;c:\windows\system32\drivers\ianvstor.sys [2007-09-07 209408]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\aestsrv.exe [2007-12-03 73728]
S2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2009-07-15 4408616]
S2 WTouchService;WTouch Service;c:\program files\WTouch\WTouchService.exe [2009-07-15 112936]
S3 WacomVTHid;Virtual Touch Driver;c:\windows\system32\DRIVERS\WacomVTHid.sys [2009-05-20 13224]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder

2010-01-23 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-08-06 03:06]

2010-01-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-06 03:07]

2010-01-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-06 03:07]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
DPF: {8B67B37E-1AE2-4B99-B8CF-55AF4D58DF0D} - file:///E:/win/setup/iamce.dll
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-IAAnotif - c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
SafeBoot-Wdf01000.sys



**************************************************************************
scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1062721192-3546382429-859977361-1000\Software\SecuROM\License information*]
"datasecu"=hex:0c,07,d0,d2,17,de,ba,eb,c7,2e,92,db,76,31,b3,6d,dc,8d,45,80,cc,
18,3c,81,ec,ec,b6,82,0b,a1,7d,e6,69,65,1c,7d,7c,89,30,e6,72,47,57,2d,2c,d9,\
"rkeysecu"=hex:82,c3,15,4f,bb,1d,3b,7f,84,f5,53,93,76,d6,d1,ff

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(2956)
c:\program files\Fingerprint Reader Suite\farchns.dll
c:\program files\Fingerprint Reader Suite\infra.dll
c:\windows\system32\btncopy.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\nvvsvc.exe
c:\windows\System32\WLTRYSVC.EXE
c:\windows\System32\bcmwltry.exe
c:\program files\Common Files\Motive\McciCMService.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
c:\windows\system32\STacSV.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\WTouch\WTouchUser.exe
c:\windows\system32\WTablet\Pen_TabletUser.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Completion time: 2010-01-22 17:50:09 - machine was rebooted
ComboFix-quarantined-files.txt 2010-01-23 01:49

Pre-Run: 30,612,635,648 bytes free
Post-Run: 30,774,501,376 bytes free

- - End Of File - - 59EF72BAE99A464BC40D4E02C05DBFDE
  • 0

#6
DylanR

DylanR

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
Just finished running a scanning with my former PCTools stuff, was able to get a full scan and removal of the Trojan.

It was the ComboFix in safe mode that seemed to do the trick at last. Thanks for the help!
  • 0

#7
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP
See if you can run MBAM & flash-disinfector now.

Also is PC tools updating OK? Combofix said it was out of date and also showed some problems with its drivers.

We need to clean up System Restore. Follow Jim's procedure here:
http://forum.aumha.o...581099691bf108f

I expect you do not have the latest Java. Get the latest at:

http://www.java.com/...nload/index.jsp


Once you install it, go into Control Panel, Add/Remove Software and remove any old versions (which may call themselves: Java Runtime, Runtime Environment, Runtime,

JRE, Java Virtual Machine, Virtual Machine, Java VM, JVM, VM, J2RE, J2SE)

Also make sure you have the latest versions of any adobe.com products you use like Shockwave, Flash or Acrobat. Adobe is fond of foisting GetPlus on you. You can let them install it and then afterwards, go into Control Panel, Add/Remove Software and remove it. It probably doesn't hurt to leave it but I don't see the need for it
and it has caused problems in the past.

Whether you use adobe reader, acrobat or fox-it to read pdf files you need to disable Javascript in the program. There is an exploit out there now that can use it to get on your PC. For Adobe Reader: Start, All Programs, Adobe Reader, Edit, Preferences, Click on Javascript in the left column and uncheck Enable Acrobat Javascript. OK Close program. It's the same for Foxit reader except you uncheck Enable Javascript Actions.

If your current antivirus is not a paid up subscription you should dump it and install the free Avast
http://www.avast.com...avast-home.html

You do need to register but it's free. Once you install it will want to reboot and it will ask you if it should do a bootscan. Tell it that you want the bootscan (but be warned it will take hours to complete and you will need to check back with it periodically to see if it found anything and needs you to tell it what to do).

At first you will get two balls in the systray. Rightclick on the first one and it will allow you to merge it with the other ball. You can turn off the sound if you want to. Right click on the ball then Program Settings then Sounds and check or uncheck the box where it says Disable Avast Sounds. There will be a slight delay at boot as it scans your system for rootkits and memory resident malware. If you find this delay objectionable you can disable rootkit scanning under Troubleshooting and the memory scan under General.


Ron
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP