[Win8/8.1] GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions

Morath · Jan 15, 2016

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

Hi, I am trying to use SFCfix.exe in order to fix the problems specified in the original post. However, when I run it and tell it to begin the process, nothing seems to happen. I do not see any progress bar and leaving SFCfix open for extended periods of time doesn't seem to do anything. The same thing happens when I try to run DISM as well.
Any ideas as to why this does not work would be great. I am running windows 8.1 on an Acer Aspire s3 series.

Thanks.

Aura · Jan 15, 2016

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

Hi Morath :)

Can you create a new thread in the Windows Update section and post your issue? We'll assist you directly in it.

Thank you!

akousticplyr · Apr 28, 2016

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

Morath said:
Hi, I am trying to use SFCfix.exe in order to fix the problems specified in the original post. However, when I run it and tell it to begin the process, nothing seems to happen. I do not see any progress bar and leaving SFCfix open for extended periods of time doesn't seem to do anything. The same thing happens when I try to run DISM as well.
Any ideas as to why this does not work would be great. I am running windows 8.1 on an Acer Aspire s3 series.

Thanks.

Just joined the forum here due to crashes and the dreaded AMD CNBJ2530 corruption. Hoping to get my system repaired also.

I noticed your issue as well when trying to rerun sfc /scannow. It might be running a scan in the background. Restarting the computer worked for me. Hope this helps anyone else who runs into it.

tidepool · Jul 17, 2016

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

I created an account specifically to say thank you so much this is a huge help thank you thank you thank you

LinuxIsTheCancer · Aug 11, 2016

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

I found the serious BUG which affect wide range of Windows systems, from Vista to 10, including Windows Server.
I've found that standard "defrag.exe" can cause file corruption under some circumstances.
The mentioned file corruption can happen during automatic maintenance (which compresses some files with NTFS compression and runs defrag.exe) and scheduled/manual defragmentation on system volumes with compressed (NTFS compression) files.

During investigation i've found some interesting facts:
1. The file corruption is always happen with compressed (NTFS compression) files hardlinked to WinSxS file repository
2. The file corruption is always happen only with some specific files
3. This specific files should be fragmented (NTFS compression causes file fragmentation)
4. The file corruption does not change the file size
5. The file corruption is always resides at the end of the file, look like the data and the end of the corrupted files is just overriten with some garbage
6. The data written by the "defrag.exe" to the end of each corrupted file is random, but the data pattern is the same for each particular file

On my test system (Windows 8.1 Enterprise with Update) only those files was corrupted by the "defrag.exe":

SHA1 checksum before defragmentation:

Code:

[COLOR=#222222][FONT=inherit]25afca7b7d459eae47359691c7f54133d79b3892 *Windows\System32\DriverStore\FileRepository\prncacla.inf_amd64_19fbb18075fefb90\Amd64\CNBJ2530.DPB[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]25afca7b7d459eae47359691c7f54133d79b3892 *Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]f97cea19c3dd45ff153d88fc6852172d4750c178 *Windows\System32\NL7Models0404.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]f97cea19c3dd45ff153d88fc6852172d4750c178 *Windows\WinSxS\amd64_microsoft-windows-w..chinese_traditional_31bf3856ad364e35_6.3.9600.16384_none_da1970df8c4dae3f\NL7Models0404.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]60a7c773083b2f39a7564d6d2e78f0c73a339739 *Windows\SysWOW64\NlsData0414.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]60a7c773083b2f39a7564d6d2e78f0c73a339739 *Windows\WinSxS\x86_microsoft-windows-naturallanguage6-0414_31bf3856ad364e35_6.3.9600.17415_none_d48386f27bb83f5d\NlsData0414.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]e2de8a477c4cf0ee859b23e961b2cf3b981c2283 *Windows\SysWOW64\wbemcomn.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]e2de8a477c4cf0ee859b23e961b2cf3b981c2283 *Windows\WinSxS\wow64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.3.9600.17415_none_fedad3362b50a192\wbemcomn.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]1155fcc96a4b690fde73ee949abd5a467b5fcc97 *Windows\WinSxS\x86_microsoft-windows-store-runtime_31bf3856ad364e35_6.3.9600.17415_none_85d0e5ba5abd52cc\WSShared.dll[/FONT][/COLOR]

SHA1 checksum after defragmentation:

Code:

[COLOR=#222222][FONT=inherit]ef3e85c9217f063f34f641185dc581f3e10977df *Windows\System32\DriverStore\FileRepository\prncacla.inf_amd64_19fbb18075fefb90\Amd64\CNBJ2530.DPB[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]ef3e85c9217f063f34f641185dc581f3e10977df *Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]0f7dda1fdf64a56e94fccede01c8f281e27e9f26 *Windows\System32\NL7Models0404.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]0f7dda1fdf64a56e94fccede01c8f281e27e9f26 *Windows\WinSxS\amd64_microsoft-windows-w..chinese_traditional_31bf3856ad364e35_6.3.9600.16384_none_da1970df8c4dae3f\NL7Models0404.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]b90e6467ac4e45b63afe16288051135a84531d43 *Windows\SysWOW64\NlsData0414.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]b90e6467ac4e45b63afe16288051135a84531d43 *Windows\WinSxS\x86_microsoft-windows-naturallanguage6-0414_31bf3856ad364e35_6.3.9600.17415_none_d48386f27bb83f5d\NlsData0414.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]384cd54e920ae6c41f8937f7419a07621cdc7fdc *Windows\SysWOW64\wbemcomn.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]384cd54e920ae6c41f8937f7419a07621cdc7fdc *Windows\WinSxS\wow64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.3.9600.17415_none_fedad3362b50a192\wbemcomn.dll[/FONT][/COLOR]
[COLOR=#222222][FONT=inherit]8fe2945539080bc6e1b29849ca10baf6a318a905 *Windows\WinSxS\x86_microsoft-windows-store-runtime_31bf3856ad364e35_6.3.9600.17415_none_85d0e5ba5abd52cc\WSShared.dll[/FONT][/COLOR]

Checksums of corrupted files can vary due to the random nature of corruption.

Serious BUG which affect wide range of Windows systems

LinuxIsTheCancer · Aug 11, 2016

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

For now the only way to prevent files corruption is to disable scheduled defragmentation / boot defragmentation / automatic maintenance or rename "defrag.exe" to something else, for example "defrag.exe.bak". File corruption happens when "defrag.exe" tries to defragment some files in WinSxS repository, previously compressed with NTFS compression by automatic maintenance (command "Dism /Online /Cleanup-Image /StartComponentCleanup" do the same as automatic maintenance, but automatic maintenance also runs "defrag.exe").

pribbens · Aug 30, 2016

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

tidepool said:
I created an account specifically to say thank you so much this is a huge help thank you thank you thank you

Ditto, and made a donation.
Thanks again.

osen · Dec 9, 2016

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

This solution worked for me, so thank you, but be aware that the script in the SFCFix.zip for amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01 is broken. It dumps the directory into %SystemRoot% (C:\Windows\). To fix this simply edit the SFCfix.txt in the SFCfix.zip archive, from "{ARCHIVE} %SystemRoot% [DIR]" to "{ARCHIVE} %SystemRoot%\winsxs [DIR]". Hope this saves someone else the trouble of troubleshooting this.

DarwinAirola · Aug 27, 2017

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

osen said:
This solution worked for me, so thank you, but be aware that the script in the SFCFix.zip for amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01 is broken. It dumps the directory into %SystemRoot% (C:\Windows\). To fix this simply edit the SFCfix.txt in the SFCfix.zip archive, from "{ARCHIVE} %SystemRoot% [DIR]" to "{ARCHIVE} %SystemRoot%\winsxs [DIR]". Hope this saves someone else the trouble of troubleshooting this.

I am having an issue with the same version of CNBJ2530.DPB. The command "dism /Online /Cleanup-Image /RestoreHealth" cannot complete due to corruption in this file. I tried copying the file from a working machine, but the problem still exists.

I ran SFCFix.exe, and it said that it fixed the file. However, when I ran "sfc /scannow" (after running SFCFix.exe), the problem with the (CNBJ2530.DPB) file still exists. Furthermore, after rebooting and rerunning "dism /Online /Cleanup-Image /RestoreHealth", this command still fails as a result of the "CSI Payload Corrupt" CNBJ2530.DPB file.

Can you please provide the script that you mentioned?

xilolee · Aug 27, 2017

Re: GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions - Windows 8/8.1

Hi DarwinAirola. :welcome:

DarwinAirola said:
Can you please provide the script that you mentioned?

You can find the SFCFix.txt script in the first post, i.e. in Tekno Venus' post.
I also checked the script and it seems Tekno Venus already corrected it.
Anyway, I'll post it also here: https://app.box.com/s/85m4pwduk8ewutw0gg7wg341l919hsm1 (click)
Previous script/download is valid only for this SFCFIX analysis:

CORRUPT: C:\WINDOWS\winsxs\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB

:wave:

Tekno Venus · Aug 27, 2017

Yup, I corrected the script a while back - forgot to post here. Thanks xilolee.

Squall Leonhart · Apr 22, 2019

I just want to say that the cause posted by LinuxIsTheCancer is confirmed, and it is not specifically the defrag.exe but the api's which are being used.
I am also reasonably certain compact api's are not involved as CNBJ2530.DPB is not compressed in any way and the EOF corruption still occurs once the file has been relocated.

The same thing can be reliably reproduced using Perfectdisk (which uses the windows defrag api's) to perform defrag tasks such as free space consolidation, particularly for VM's in which you are preparing to compact their VDI file.

I saw his post on the technet forum though where he states it occurs in all windows versions, however this is not the case, it is specific to 8 and 8.1 and is not reproducible under 7 or 10.

It is a shame that DISM has been unable to retrieve this file from online sources for some time.

Squall Leonhart · May 3, 2019

A buffer overflow occurs in FSCTL_GET_RETRIEVAL_POINTERS during File System Control operations involving DefragOnlineMoveFile,

However, I don't think thats the issue

I think the issue is what i logged below

The FS Api should only open the file once, do its fs control tasks and then close it once.

Instead, there are two createfile handles open allowing garbage data to be written to the file upon the second close file.

Code:

4:57:56.7377869 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:56.7378190 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:56.7378334 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:56.7379521 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:56.7380197 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:56.8443131 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:56.8443403 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:56.8443688 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    END OF FILE    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:56.8443836 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS   
4:57:56.8447648 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS

And indeed, prior to this, every other Create file and Close file are matched.

Code:

4:56:33.9701409 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:56:33.9701922 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:56:33.9714093 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:56:33.9714255 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:56:33.9714465 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    END OF FILE    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:56:33.9714586 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:56:33.9716863 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:56:33.9717216 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:56:33.9717345 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    

4:57:15.3626170 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3626484 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3644616 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3644811 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3645039 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3645161 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3645292 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3647294 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3647540 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:57:15.3647654 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3649107 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3649389 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3667781 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3668664 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3668903 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3669027 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3669153 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3671065 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3671304 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:57:15.3671768 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3673145 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3673418 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3691258 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3691511 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3691711 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3691830 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3691966 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3696067 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3696532 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:57:15.3696692 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3698789 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3699286 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3755461 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3755811 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3756049 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3756171 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3756329 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3759795 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3760109 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:57:15.3760231 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3761605 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3761885 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3775940 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3776171 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3776361 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3776483 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3776619 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3779127 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3779399 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:57:15.3779514 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3780968 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3781253 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3796610 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3797274 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3797610 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3797994 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.3798240 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.3803730 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.3804265 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:57:15.3804576 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.4545542 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.4545868 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4625624 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    BUFFER OVERFLOW    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4625853 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4626072 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4626181 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4626303 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.4629664 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.4629932 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:57:15.4630054 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.4631443 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.4631725 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4665277 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4665472 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4665659 AM    PDEngine.exe    1492    FileSystemControl    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    END OF FILE    Control: FSCTL_GET_RETRIEVAL_POINTERS
4:57:15.4665798 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    
4:57:15.4669133 AM    PDEngine.exe    1492    CreateFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open By ID, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
4:57:15.4669476 AM    PDEngine.exe    1492    QueryStandardInformationFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS    AllocationSize: 1,683,456, EndOfFile: 1,945,600, NumberOfLinks: 1, DeletePending: False, Directory: False
4:57:15.4669595 AM    PDEngine.exe    1492    CloseFile    C:\Windows\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB    SUCCESS

[Win8/8.1] GUIDE: CNBJ2530.DPB and prncacla.inf Corruptions

Morath

New member

Aura

Sysnative Staff, Security Analyst

akousticplyr

New member

tidepool

New member

LinuxIsTheCancer

New member

LinuxIsTheCancer

New member

pribbens

Contributor

osen

New member

DarwinAirola

New member

xilolee

Moderator

Tekno Venus

Senior Administrator, Developer

Squall Leonhart

New member

Squall Leonhart

New member