New
#11
that's perfectly normal.
We'll have to keep looking then....
please run the following command
DIR C:\Windows /AH /S
All I need from that is the number of files found at the end - it should be somewhere below 500. If it's much higher then we may have a pointer.
reg query HKU\S-1-5-20 /s
please upload the results from that
dir C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform /s
dir C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform /s /ah
dir C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform /s /ar
dir C:\Windows\ServiceProfiles\NetworkService /ar /s
post the results of the above
dir C:\Windows /ar /s
I only need the number of files count from that
Last edited by NoelDP; 16 May 2012 at 04:37. Reason: include forgotten switch in last command