Running from: C:\Users\Administrator\Downloads\Win32kDiag.exe Log file at : C:\Users\Administrator\Desktop\Win32kDiag.txt
WARNING: Could not get backup privileges!
Searching 'C:\Windows'...
Found symbolic link : C:\Windows\$NtUninstallKB29595$
Found symlink destination : \Device\svchost.exe\setup
Cannot access: C:\Windows\assembly\GAC_MSIL\Desktop.ini
[1] 2009-07-13 21:42:31 227 C:\Windows\assembly\Desktop.ini ()
[1] 2011-08-03 22:22:28 25600 C:\Windows\assembly\GAC_MSIL\Desktop.ini ()
[1] 2009-07-13 21:52:25 65 C:\Windows\Downloaded Program Files\desktop.ini ()
[1] 2009-06-10 14:31:19 65 C:\Windows\Fonts\desktop.ini ()
[1] 2009-07-14 00:54:31 81 C:\Windows\Globalization\MCT\MCT-AU\Wallpaper\desktop.ini ()
[1] 2009-07-14 00:54:53 81 C:\Windows\Globalization\MCT\MCT-CA\Wallpaper\desktop.ini ()
[1] 2009-07-14 00:55:15 262 C:\Windows\Globalization\MCT\MCT-GB\Link\desktop.ini ()
[1] 2009-07-14 00:55:15 82 C:\Windows\Globalization\MCT\MCT-GB\Wallpaper\desktop.ini ()
[1] 2009-07-14 00:55:38 210 C:\Windows\Globalization\MCT\MCT-US\Link\desktop.ini ()
[1] 2009-07-14 00:55:38 82 C:\Windows\Globalization\MCT\MCT-US\Wallpaper\desktop.ini ()
[1] 2009-07-14 00:55:57 82 C:\Windows\Globalization\MCT\MCT-ZA\Wallpaper\desktop.ini ()
[1] 2009-07-13 21:52:26 1278 C:\Windows\Media\Afternoon\Desktop.ini ()
[1] 2009-07-13 21:52:25 1278 C:\Windows\Media\Calligraphy\Desktop.ini ()
[1] 2009-07-13 21:52:25 1278 C:\Windows\Media\Characters\Desktop.ini ()
[1] 2009-07-13 21:52:25 1278 C:\Windows\Media\Cityscape\Desktop.ini ()
[1] 2009-07-13 21:52:26 1278 C:\Windows\Media\Delta\Desktop.ini ()
[1] 2009-06-10 14:22:39 3050 C:\Windows\Media\Desktop.ini ()
[1] 2009-07-13 21:52:25 1278 C:\Windows\Media\Festival\Desktop.ini ()
[1] 2009-07-13 21:52:25 1278 C:\Windows\Media\Garden\Desktop.ini ()
[1] 2009-07-13 21:52:25 1278 C:\Windows\Media\Heritage\Desktop.ini ()
[1] 2009-07-13 21:52:26 1278 C:\Windows\Media\Landscape\Desktop.ini ()
[1] 2009-07-13 21:52:26 1278 C:\Windows\Media\Quirky\Desktop.ini ()
[1] 2009-07-13 21:52:25 1278 C:\Windows\Media\Raga\Desktop.ini ()
[1] 2009-07-13 21:52:26 1278 C:\Windows\Media\Savanna\Desktop.ini ()
[1] 2009-07-13 21:52:26 1278 C:\Windows\Media\Sonata\Desktop.ini ()
[1] 2009-07-13 21:52:26 65 C:\Windows\Offline Web Pages\desktop.ini ()
[1] 2010-10-20 20:48:58 145 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\desktop.ini ()
[1] 2010-10-20 20:48:58 145 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini ()
[1] 2010-10-20 20:48:58 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7HI1GMJX\desktop.ini ()
[1] 2010-10-20 20:48:57 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini ()
[1] 2010-10-20 20:48:58 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F43ZMZZ8\desktop.ini ()
[1] 2010-10-20 20:48:58 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IOW7P1BI\desktop.ini ()
[1] 2010-10-20 20:48:58 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VEQZ4LQT\desktop.ini ()
[1] 2010-10-20 20:48:57 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini ()
[1] 2010-10-24 16:09:24 145 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\desktop.ini ()
[1] 2010-10-24 16:09:24 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\BQOZ4LM3\desktop.ini ()
[1] 2010-10-24 16:09:24 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\desktop.ini ()
[1] 2010-10-24 16:09:24 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\G2FRSLSR\desktop.ini ()
[1] 2010-10-24 16:09:24 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\JANLW4T1\desktop.ini ()
[1] 2010-10-24 16:09:24 67 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\P2R15HOE\desktop.ini ()
[1] 2009-07-13 21:34:14 440 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini ()
[1] 2009-07-13 21:34:14 166 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini ()
[1] 2009-07-13 21:34:14 170 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini ()
[1] 2009-07-13 21:34:14 170 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini ()
[1] 2009-07-13 21:34:14 170 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini ()
[1] 2009-07-13 21:34:13 440 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini ()
[1] 2009-07-13 21:34:13 166 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini ()
[1] 2009-07-13 21:34:13 170 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini ()
[1] 2009-07-13 21:34:13 170 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini ()
[1] 2009-07-13 21:34:13 170 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini ()
[1] 2009-07-13 21:41:53 145 C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\desktop.ini ()
[1] 2009-07-13 21:41:53 145 C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini ()
[1] 2010-10-20 19:02:02 67 C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini ()
[1] 2010-10-20 19:02:02 67 C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GBMCUAB8\desktop.ini ()
[1] 2010-10-20 19:02:02 67 C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MU4N543O\desktop.ini ()
[1] 2010-10-20 19:02:02 67 C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YSJAPYE2\desktop.ini ()
[1] 2010-10-20 19:02:02 67 C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZZXMGT7I\desktop.ini ()
[1] 2010-10-20 19:02:02 67 C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini ()
[1] 2009-07-13 21:42:29 73 C:\Windows\System32\desktop.ini ()
[1] 2009-07-14 00:48:36 81 C:\Windows\Web\Wallpaper\Architecture\Desktop.ini ()
[1] 2009-07-14 00:48:36 81 C:\Windows\Web\Wallpaper\Characters\Desktop.ini ()
[1] 2009-07-14 00:48:36 81 C:\Windows\Web\Wallpaper\Landscapes\Desktop.ini ()
[1] 2009-07-14 00:48:36 81 C:\Windows\Web\Wallpaper\Nature\Desktop.ini ()
[1] 2009-07-14 00:48:36 81 C:\Windows\Web\Wallpaper\Scenes\Desktop.ini ()
[1] 2009-06-10 14:43:35 80 C:\Windows\winsxs\x86_microsoft-windows-ehome-reg-inf_31bf3856ad364e35_6.1.7600.16385_none_f50296a82442d6ca\desktop.ini ()
[1] 2009-06-10 14:43:36 171 C:\Windows\winsxs\x86_microsoft-windows-ehome-samplemedia_31bf3856ad364e35_6.1.7600.16385_none_5a9b169fb8adc6cc\desktop.ini ()
[1] 2009-06-10 14:31:19 65 C:\Windows\winsxs\x86_microsoft-windows-fontext_31bf3856ad364e35_6.1.7600.16385_none_9e5beea654f0e08f\desktop.ini ()
[1] 2009-06-10 14:20:41 746 C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.1.7600.16385_none_41d6a532229096ec\Desktop.ini ()
[1] 2009-06-10 14:15:07 65 C:\Windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.7600.16385_none_51b70586ec78a39f\desktop.ini ()
[1] 2009-06-10 14:15:34 65 C:\Windows\winsxs\x86_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_8.0.7600.16385_none_7bbc80532a0f1e83\desktop.ini ()
[1] 2009-07-14 00:55:14 262 C:\Windows\winsxs\x86_microsoft-windows-m..-gb-links-component_31bf3856ad364e35_6.1.7600.16385_none_b0506f4c29c81b62\desktop.ini ()
[1] 2009-07-14 00:55:38 210 C:\Windows\winsxs\x86_microsoft-windows-m..-us-links-component_31bf3856ad364e35_6.1.7600.16385_none_54d5fafce815ded5\desktop.ini ()
[1] 2009-07-14 00:54:31 81 C:\Windows\winsxs\x86_microsoft-windows-m..ttheme-au-component_31bf3856ad364e35_6.1.7600.16385_none_d855c602bd91962f\desktop.ini ()
[1] 2009-07-14 00:54:52 81 C:\Windows\winsxs\x86_microsoft-windows-m..ttheme-ca-component_31bf3856ad364e35_6.1.7600.16385_none_9c90b2572b625b49\desktop.ini ()
[1] 2009-07-14 00:55:14 82 C:\Windows\winsxs\x86_microsoft-windows-m..ttheme-gb-component_31bf3856ad364e35_6.1.7600.16385_none_34856afd75952bc6\desktop.ini ()
[1] 2009-07-14 00:55:38 82 C:\Windows\winsxs\x86_microsoft-windows-m..ttheme-us-component_31bf3856ad364e35_6.1.7600.16385_none_56d5c461d90038b9\desktop.ini ()
[1] 2009-07-14 00:55:56 82 C:\Windows\winsxs\x86_microsoft-windows-m..ttheme-za-component_31bf3856ad364e35_6.1.7600.16385_none_4742bbc8c4f5499a\desktop.ini ()
[1] 2009-06-10 14:29:17 645 C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\Desktop.ini ()
[1] 2009-06-10 14:41:17 208 C:\Windows\winsxs\x86_microsoft-windows-musicsamples_31bf3856ad364e35_6.1.7600.16385_none_aa2ab686137b7805\desktop.ini ()
[1] 2009-06-10 14:41:17 475 C:\Windows\winsxs\x86_microsoft-windows-photosamples_31bf3856ad364e35_6.1.7600.16385_none_974f72e1e322d188\desktop.ini ()
[1] 2009-06-10 14:41:18 612 C:\Windows\winsxs\x86_microsoft-windows-ringtonesamples_31bf3856ad364e35_6.1.7600.16385_none_b73fb7eb03882af2\desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..-soundthemes-garden_31bf3856ad364e35_6.1.7600.16385_none_9b86239a5d28cceb\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..-soundthemes-quirky_31bf3856ad364e35_6.1.7600.16385_none_8935696c2c3e4895\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..-soundthemes-sonata_31bf3856ad364e35_6.1.7600.16385_none_c3f8b73d5a679656\Desktop.ini ()
[1] 2009-06-10 14:28:23 81 C:\Windows\winsxs\x86_microsoft-windows-s..allpaper-characters_31bf3856ad364e35_6.1.7600.16385_none_61c24f69cc3498eb\Desktop.ini ()
[1] 2009-06-10 14:28:29 81 C:\Windows\winsxs\x86_microsoft-windows-s..allpaper-landscapes_31bf3856ad364e35_6.1.7600.16385_none_895c1fabae7e0073\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..dthemes-calligraphy_31bf3856ad364e35_6.1.7600.16385_none_6521e04384521cc6\Desktop.ini ()
[1] 2009-06-10 14:18:18 166 C:\Windows\winsxs\x86_microsoft-windows-s..i-accessibilityuser_31bf3856ad364e35_6.1.7600.16385_none_631ad0256a1095cc\Desktop.ini ()
[1] 2009-06-10 14:18:18 170 C:\Windows\winsxs\x86_microsoft-windows-s..ini-accessoriesuser_31bf3856ad364e35_6.1.7600.16385_none_23da83d97579563a\Desktop.ini ()
[1] 2009-06-10 14:18:18 170 C:\Windows\winsxs\x86_microsoft-windows-s..ini-maintenanceuser_31bf3856ad364e35_6.1.7600.16385_none_05ddf62fb732aa51\Desktop.ini ()
[1] 2009-06-10 14:18:19 170 C:\Windows\winsxs\x86_microsoft-windows-s..ini-systemtoolsuser_31bf3856ad364e35_6.1.7600.16385_none_208203e244db0d22\Desktop.ini ()
[1] 2009-06-10 14:18:18 170 C:\Windows\winsxs\x86_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_6.1.7600.16385_none_ebed72081abd7309\Desktop.ini ()
[1] 2009-06-10 14:18:18 170 C:\Windows\winsxs\x86_microsoft-windows-s..ktopini-maintenance_31bf3856ad364e35_6.1.7600.16385_none_5e708a1ffe7aa932\Desktop.ini ()
[1] 2009-06-10 14:18:19 170 C:\Windows\winsxs\x86_microsoft-windows-s..ktopini-systemtools_31bf3856ad364e35_6.1.7600.16385_none_7e4396bce8f78221\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..l-soundthemes-delta_31bf3856ad364e35_6.1.7600.16385_none_9fd944e3d3073382\Desktop.ini ()
[1] 2009-06-10 14:28:23 81 C:\Windows\winsxs\x86_microsoft-windows-s..lpaper-architecture_31bf3856ad364e35_6.1.7600.16385_none_7d726b356f4d064c\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..ndthemes-characters_31bf3856ad364e35_6.1.7600.16385_none_acbb972d455020ea\Desktop.ini ()
[1] 2009-06-10 14:18:18 166 C:\Windows\winsxs\x86_microsoft-windows-s..opini-accessibility_31bf3856ad364e35_6.1.7600.16385_none_da41b324de9c3847\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..oundthemes-festival_31bf3856ad364e35_6.1.7600.16385_none_b6008531a6ae6d32\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..oundthemes-heritage_31bf3856ad364e35_6.1.7600.16385_none_fc5424ff54aed611\Desktop.ini ()
[1] 2009-06-10 14:18:18 440 C:\Windows\winsxs\x86_microsoft-windows-s..sktopini-sendtouser_31bf3856ad364e35_6.1.7600.16385_none_081ae7a4f56c5467\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..soundthemes-savanna_31bf3856ad364e35_6.1.7600.16385_none_28e34d1952a3a85c\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..undthemes-afternoon_31bf3856ad364e35_6.1.7600.16385_none_cde749f9a255f468\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..undthemes-cityscape_31bf3856ad364e35_6.1.7600.16385_none_ff2a58ae8feb93cd\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-s..undthemes-landscape_31bf3856ad364e35_6.1.7600.16385_none_1e650d9135666d13\Desktop.ini ()
[1] 2009-06-10 14:22:39 3050 C:\Windows\winsxs\x86_microsoft-windows-shell-sounds_31bf3856ad364e35_6.1.7600.16385_none_16e8d25616dd2c98\Desktop.ini ()
[1] 2009-06-10 14:22:41 1278 C:\Windows\winsxs\x86_microsoft-windows-shell-soundthemes-raga_31bf3856ad364e35_6.1.7600.16385_none_d3c4653bd6165c87\Desktop.ini ()
[1] 2009-06-10 14:28:29 81 C:\Windows\winsxs\x86_microsoft-windows-shell-wallpaper-nature_31bf3856ad364e35_6.1.7600.16385_none_7971f9ecb7ec988a\Desktop.ini ()
[1] 2009-06-10 14:28:29 81 C:\Windows\winsxs\x86_microsoft-windows-shell-wallpaper-scenes_31bf3856ad364e35_6.1.7600.16385_none_481a9f966ced79b8\Desktop.ini ()
[1] 2009-06-10 14:27:32 91 C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_1787de7505ebcb56\Desktop.ini ()
[1] 2009-10-12 00:28:42 266 C:\Windows\winsxs\x86_microsoft-windows-v..alpc-ui-knownfolder_31bf3856ad364e35_7.1.7600.16393_none_4629d716ee0102da\desktop.ini ()
[1] 2009-06-10 14:41:19 78 C:\Windows\winsxs\x86_microsoft-windows-videosamples_31bf3856ad364e35_6.1.7600.16385_none_f583837f77a63ec7\desktop.ini ()
[1] 2009-06-10 14:46:41 81 C:\Windows\winsxs\x86_subsystem-for-unix-based-applications_31bf3856ad364e35_6.1.7600.16385_none_73beade95143314a\Desktop.ini ()
Cannot access: C:\Windows\CSC\v2.0.6\pq
[1] 2010-10-20 19:04:14 64 C:\Windows\CSC\v2.0.6\pq ()
Cannot access: C:\Windows\CSC\v2.0.6\sm
[1] 2010-10-20 19:04:14 4 C:\Windows\CSC\v2.0.6\sm ()
Cannot access: C:\Windows\CSC\v2.0.6\temp\ea-{1e9aedf5-dcb7-11df-b0a1-88ae1d21d2fc}
[1] 2010-10-20 19:04:14 0 C:\Windows\CSC\v2.0.6\temp\ea-{1e9aedf5-dcb7-11df-b0a1-88ae1d21d2fc} ()
Finished!
Download and launch ProcMon | Attempt to launch your AV software | Once it fails, kill ProcMon's hook | Locate the POF (Point Of Failure) | Post your results here.
I downloaded Proc Mon, but can't launch it. It says "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item"...something like that. It happens with everything I download
Rename the file explorer.exe and attempt to launch it.
Says I need a permission from WIN-K7P7V7K3IPH/Administrator to change the file. Looks like I have some mean stuff messin' with my computer
"Looks like I have some mean stuff messin' with my computer"
Correct, now to outsmart it.Two things to try.
1: Rename any download before it starts the download.
2: Use Safe mode.
The easiest thing here, is to launch cmd as admin and use either move or rename commands.
just do a full scan with malwarebytes and fix all it finds for starters Some HELP in posting on Computing.net plus free progs and instructions Cheers
"Says I need a permission from WIN-K7P7V7K3IPH/Administrator to change the file"
Did you right click on the program & select > Run as administrator?
Yes (14) | ![]() | |
No (14) | ![]() | |
I don't know (15) | ![]() |