TechSpot

Malware will not let me open malware programs even in safe mode

By edteach
Sep 8, 2009
Topic Status:
Not open for further replies.
  1. I think I have a bad one. I hit a X button and it was not an X it was an 88kb something and it was done before I could do anything. Now I ran immediately ran MBMA and it started then I got a message that the path way was not valid. I tried to run it in Safe mode but it gave me the same, so I removed the program and reinstalled it in safe mode, It did the same thing I also tried to run Hijack this and it shut down,and combofix and it opens then shuts down. Something is shutting down my malware. Any ideas how to clean this? Thanks
  2. edteach

    edteach TS Rookie Topic Starter Posts: 42

    --------------------------------------------------------------------------------

    I ran AVG and let it run, I finaly emptied out the valut and then super anti spyware started. I am letting it run its cycle and hope this cleans it enough to let the other apps run. Any help would be appreciated. Thanks
  3. Zyldar

    Zyldar TS Rookie Posts: 34

    Just last week I worked on an infected pc that did the same thing. I ended up removing the hard drive, plugged it in as a slave hard drive on a clean pc and ran scans to clean it.

    See if you can download, unrar, & move from a clean computer to the infected 1:
    http://ad13.geekstogo.com/RootRepeal.rar

    Hopefully you can run & post it's log without the program being closed down.

    From the start menu type: services.msc - Action menu - Export List : post the services txt file

    Hope that helps
    Zyldar
  4. edteach

    edteach TS Rookie Topic Starter Posts: 42

    Ran AVG anti spyware and then superantispyware

    Ran AVG anti spyware and then superantispyware and only found 8 and 12 tracking cookies respectively
    I removed and reinstalled Malware bytes and it shuts down 5 seconds after starting scan. I ran hijackthis and it ran a log but before I could view it it shut down.
  5. edteach

    edteach TS Rookie Topic Starter Posts: 42

    logs for winkdiag.exe and peak.bat

    I can not run Malware bytes even after I removed it from A/R programs, and reinstalled it with another name. I can not run combofix or hijack this, when I open hijack this it runs a log then shuts down before I can do anything with it. I did run win32kdiag.exe and this is the what I got,

    win32kdiag.exe

    Log file is located at: C:\Documents and Settings\Owner\Desktop\Win32kDiag.txt

    WARNING: Could not get backup privileges!

    Searching 'C:\WINDOWS'...



    Found mount point : C:\WINDOWS\$hf_mig$\KB890046\KB890046

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB916281\KB916281

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB920213\KB920213

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB924496\KB924496

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB925454\KB925454

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB928090\KB928090

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB929338\KB929338

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB931768\KB931768

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB931784\KB931784

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB933566\KB933566

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB937143\KB937143

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB939653\KB939653

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB942615\KB942615

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB944533\KB944533

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\$hf_mig$\KB947864\KB947864

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\addins\addins

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP135.tmp\ZAP135.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP144.tmp\ZAP144.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP149.tmp\ZAP149.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP14A.tmp\ZAP14A.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP151.tmp\ZAP151.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP19E.tmp\ZAP19E.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP1BC.tmp\ZAP1BC.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP1CB.tmp\ZAP1CB.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP202.tmp\ZAP202.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP2B.tmp\ZAP2B.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP2EF.tmp\ZAP2EF.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAP9.tmp\ZAP9.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPD.tmp\ZAPD.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPD2.tmp\ZAPD2.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPDA.tmp\ZAPDA.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPDB.tmp\ZAPDB.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPDF.tmp\ZAPDF.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPE3.tmp\ZAPE3.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPEC.tmp\ZAPEC.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPF3.tmp\ZAPF3.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPF4.tmp\ZAPF4.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPF9.tmp\ZAPF9.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Tem p\ZAPFA1.tmp\ZAPFA1.tmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\assembly\temp\temp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Cache\Cache

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Config\Config

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Debug\UserMode\UserMode

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\ime\chsime\applets\applets

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\ime\CHTIME\Applets\Applets

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\ime\imejp\applets\applets

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\ime\imejp98\imejp98

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\ime\imjp8_1\applets\applets

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\ime\imkr6_1\applets\applets

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\ime\imkr6_1\dicts\dicts

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\ime\shared\res\res

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\inf\ASM\ASM

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109 411090400000000000F01FEC\12.0.4518\12.0.4518

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109 440090400000000000F01FEC\12.0.4518\12.0.4518

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109 511090400000000000F01FEC\12.0.4518\12.0.4518

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109 711090400000000000F01FEC\12.0.4518\12.0.4518

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109 910090400000000000F01FEC\12.0.4518\12.0.4518

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109 B10090400000000000F01FEC\12.0.4518\12.0.4518

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109 F100A0C00000000000F01FEC\12.0.4518\12.0.4518

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\00002109 F100C0400000000000F01FEC\12.0.4518\12.0.4518

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\1F3B805B A42A0C233B0158879691FE82\2.1.21022\2.1.21022

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F98 62C648A4DB8BE2A5B47BE100\1.0.0\1.0.0

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\java\classes\classes

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\java\trustlib\trustlib

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temp orary ASP.NET Files\Temporary ASP.NET Files
  6. edteach

    edteach TS Rookie Topic Starter Posts: 42

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Minidump\Minidump

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\msapps\msinfo\msinfo

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\mui\mui

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\pchealth\ERRORREP\UserDumps\UserDumps

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\pchealth\helpctr\BATCH\BATCH

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\Chec kPoint

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\Installe dSKUs

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\pchealth\helpctr\System_OEM\System_OEM

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\security\logs\logs

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloade d\Downloaded

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\bb546fbc47a59146ba0fcd75a5ff4ea3\bb546fbc47a591 46ba0fcd75a5ff4ea3

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\1025\1025

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\1028\1028

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\1031\1031

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\1037\1037

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\1041\1041

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\1042\1042

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\1054\1054

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\2052\2052

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\3076\3076

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\3com_dmi\3com_dmi

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\Adobe\update\update

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\Identities\{9F3F1FB5-9CCB-44C4-8345-B1DFB7F0F848}\{9F3F1FB5-9CCB-44C4-8345-B1DFB7F0F848}

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\Microsoft\Credentials\Credentials

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\Microsoft\Crypto\RSA\RSA

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\Microsoft\Media Player\Media Player

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\Microsoft\SystemCertificates\My\Certificates\ Certificates

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\Microsoft\SystemCertificates\My\CRLs\CRLs

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\Microsoft\SystemCertificates\My\CTLs\CTLs

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\SampleView\SampleView

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Applicati on Data\You've Got Pictures Screensaver\PictureDir\PictureDir

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Desktop\D esktop

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Google\Google

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\CD Burning\CD Burning

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Credentials\Credentials

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Money\15.0\Webcache\Webcache

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\OFFICE\Groove\System\System

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\OFFICE\Groove\User\User

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\temp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\NetHood\N etHood

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\PrintHood \PrintHood

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\config\systemprofile\WINDOWS\s ystem\system

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\dhcp\dhcp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\drivers\disdn\disdn

    Mount point destination : \Device\__max++>\^

    Cannot access: C:\WINDOWS\system32\eventlog.dll

    [1] 2004-08-04 14:00:00 55808 C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll (Microsoft Corporation)

    [1] 2008-04-13 19:11:53 56320 C:\WINDOWS\ServicePackFiles\i386\eventlog.dll (Microsoft Corporation)

    [1] 2008-04-13 19:11:53 61952 C:\WINDOWS\system32\eventlog.dll ()

    [2] 2008-04-13 19:11:53 56320 C:\WINDOWS\system32\logevent.dll (Microsoft Corporation)



    Found mount point : C:\WINDOWS\system32\export\export

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\IME\CINTLGNT\CINTLGNT

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\IME\PINTLGNT\PINTLGNT

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\IME\TINTLGNT\TINTLGNT

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\inetsrv\inetsrv

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\mui\dispspec\dispspec

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\oobe\sample\sample

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\ShellExt\ShellExt

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\spool\drivers\WIN40\WIN40

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\spool\PRINTERS\PRINTERS

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\wbem\mof\bad\bad

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\wbem\mof\good\good

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\wbem\snmp\snmp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\wins\wins

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\system32\xircom\xircom

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp

    Mount point destination : \Device\__max++>\^

    Found mount point : C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0(2).0_x-ww_7d5f3790\x86_System.EnterpriseServices_b03f5f7f 11d50a3a_2.0.0(2).0_x-ww_7d5f3790

    Mount point destination : \Device\__max++>\^



    Finished!


    peak.bat log
    Volume in drive C has no label.
    Volume Serial Number is 98C2-C5DD

    Directory of C:\WINDOWS\$NtServicePackUninstall$

    08/04/2004 02:00 PM 180,224 scecli.dll

    Directory of C:\WINDOWS\$NtServicePackUninstall$

    08/04/2004 02:00 PM 407,040 netlogon.dll

    Directory of C:\WINDOWS\$NtServicePackUninstall$

    08/04/2004 02:00 PM 55,808 eventlog.dll
    3 File(s) 643,072 bytes

    Directory of C:\WINDOWS\ServicePackFiles\i386

    04/13/2008 07:12 PM 181,248 scecli.dll

    Directory of C:\WINDOWS\ServicePackFiles\i386

    04/13/2008 07:12 PM 407,040 netlogon.dll

    Directory of C:\WINDOWS\ServicePackFiles\i386

    04/13/2008 07:11 PM 56,320 eventlog.dll
    3 File(s) 644,608 bytes

    Directory of C:\WINDOWS\system32

    04/13/2008 07:12 PM 181,248 scecli.dll

    Directory of C:\WINDOWS\system32

    04/13/2008 07:12 PM 407,040 netlogon.dll
  7. edteach

    edteach TS Rookie Topic Starter Posts: 42

    Directory of C:\WINDOWS\system32

    04/13/2008 07:11 PM 61,952 eventlog.dll
    3 File(s) 650,240 bytes

    Total Files Listed:
    9 File(s) 1,937,920 bytes
    0 Dir(s) 27,058,704,384 bytes free
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.