Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Powerlik Victim - Requesting Help


  • This topic is locked This topic is locked
15 replies to this topic

#1 Adriannzinha

Adriannzinha

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 09 November 2014 - 01:06 PM

Hello,

Sadly, I can add myself to the growing list of those with hijacked computers due to this malware. In the task manager I show numerous instances of "dllhost.exe Com surrogate" processes.

I'm currently unable to download the tools I've seen mentioned in other topics such as the FRST scanner. The reason is that any download I attempt is blocked via a popup saying "your current security settings do not allow for this file to be downloaded".

I already had malwarebytes on my PC and had updated and run it, but it does not detect the powerlik or other malware.

This is all taking place on a Windows 7 x64-bit system.

I know the malware removal experts are very busy but any help would be greatly appreciated.
 
Edit(1): I modified my internet explorer security settings and now I can download tools. The first thing I did was to download and run the FRST tool. I've pasted the two logs here in case they are helpful to anyone looking at this topic.

 

Edit(2): The computer is running quite slowly with these COM-Surrogate processes are taking over 1000k of memory.

 

FRST.EXE SCAN

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-11-2014
Ran by Administrator (administrator) on ADRIANNAZINHA on 09-11-2014 13:11:01
Running from C:\Users\Administrator\Desktop
Loaded Profile: Administrator (Available profiles: Administrator & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6962400 2012-12-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKU\S-1-5-21-906571277-2069127330-1933695136-500\...\MountPoints2: {78dd3943-f950-11e2-90b7-d43d7eb13fce} - F:\Skyrim_setup.exe
HKU\S-1-5-21-906571277-2069127330-1933695136-500\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks!
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\conhost.exe (Console Window Host)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.economicpolicyjournal.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x10E1760AB17ECE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://elliottwave5pointzeroreboot.blogspot.com/

http://www.nws.noaa.gov/climate/index.php?wfo=tbw
URLSearchHook: HKCU - (No Name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No File
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {EDBD7A8E-B615-4B67-B2BD-1656CF5F74ED} URL = https://duckduckgo.com/?q={searchTerms}
SearchScopes: HKCU - {EDBD7A8E-B615-4B67-B2BD-1656CF5F74ED} URL = https://duckduckgo.com/?q={searchTerms}
SearchScopes: HKCU - {FC378612-7BD2-4372-B495-51181A8FE00B} URL = http://search.conduit.com/Results.aspx?ctid=CT3304761&SearchSource=45&UM=2&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} ->  No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://investools-events.webex.com/client/WBXclient-T28L10NSP12-16655/nbr/ieatgpc1.cab
Tcpip\Parameters: [DhcpNameServer] 65.32.5.111 65.32.5.112

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: tdameritrade.com/thinkorswim -> C:\Program Files (x86)\thinkorswim\npthinkorswim.dll No File
FF Plugin HKCU: tdameritrade.com/tossc -> C:\Program Files (x86)\thinkorswim\nptossc.dll No File

Chrome:
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-01-24] (BitRaider, LLC)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2009-07-13] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-18] ()
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.)
S3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [58664 2008-07-11] (SafeNet, Inc.)
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-09 13:11 - 2014-11-09 13:11 - 00009440 _____ () C:\Users\Administrator\Desktop\FRST.txt
2014-11-09 13:10 - 2014-11-09 13:10 - 02115584 _____ (Farbar) C:\Users\Administrator\Desktop\FRST64.exe
2014-11-09 13:09 - 2014-11-09 13:11 - 00000000 ____D () C:\FRST
2014-11-09 13:07 - 2014-11-09 13:09 - 02115584 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-11-09 12:24 - 2014-11-09 12:24 - 00000000 ____D () C:\Users\Administrator\Desktop\rkill
2014-11-06 21:57 - 2014-11-06 21:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Downloads\rkill.exe
2014-11-06 21:57 - 2014-11-06 21:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Desktop\rkill.exe
2014-11-06 21:56 - 2014-11-07 12:47 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-11-06 21:55 - 2014-11-06 22:59 - 00000000 ____D () C:\Users\Administrator\Desktop\mbar
2014-11-06 21:55 - 2014-11-06 21:55 - 14349744 _____ (Malwarebytes Corp.) C:\Users\Administrator\Downloads\mbar-1.07.0.1012.exe
2014-11-06 21:55 - 2014-11-06 21:55 - 14349744 _____ (Malwarebytes Corp.) C:\Users\Administrator\Desktop\mbar-1.07.0.1012.exe
2014-11-06 21:52 - 2014-11-06 21:52 - 00032707 _____ () C:\Users\Administrator\Desktop\Result.txt
2014-11-06 21:51 - 2014-11-06 21:51 - 00002681 _____ () C:\Users\Administrator\Desktop\FSS.txt
2014-11-06 21:50 - 2014-11-06 21:49 - 00854448 _____ () C:\Users\Administrator\Desktop\SecurityCheck.exe
2014-11-06 21:49 - 2014-11-06 21:49 - 00854448 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-11-06 21:46 - 2014-11-06 21:46 - 00000000 ____D () C:\Windows\pss
2014-11-02 12:25 - 2014-11-02 12:25 - 00002553 _____ () C:\Users\Administrator\AppData\Local\recently-used.xbel
2014-11-02 12:24 - 2014-11-02 12:24 - 00108855 _____ () C:\Users\Administrator\Desktop\water-bill.jpeg
2014-11-02 12:21 - 2014-11-02 12:21 - 00625427 _____ () C:\Users\Administrator\Desktop\water-bill.xcf
2014-10-21 20:33 - 2014-10-21 20:33 - 00172293 _____ () C:\Users\Administrator\Desktop\p7002j@gmail.com

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-09 12:26 - 2014-07-07 09:22 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-09 12:25 - 2014-04-01 19:26 - 00002148 _____ () C:\Users\Administrator\Desktop\Rkill.txt
2014-11-09 12:12 - 2009-07-13 23:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-09 12:12 - 2009-07-13 23:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-09 12:11 - 2009-07-14 00:13 - 00866920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-09 12:05 - 2014-10-07 20:46 - 00000000 ____D () C:\Users\Administrator\Documents\Europe-2014-trip
2014-11-09 12:05 - 2013-07-28 18:46 - 00082379 _____ () C:\Windows\setupact.log
2014-11-09 12:05 - 2013-07-12 00:34 - 00259586 _____ () C:\Windows\PFRO.log
2014-11-09 12:05 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-06 22:07 - 2014-07-07 09:20 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 22:04 - 2014-01-10 21:55 - 00000000 ____D () C:\Users\Administrator\AppData\Local\SWTORPerf
2014-11-06 22:04 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\IME
2014-11-03 21:15 - 2013-09-04 17:33 - 00000000 ____D () C:\Users\Administrator\Documents\Gustavo-Entrenamiento
2014-11-02 21:53 - 2013-09-07 11:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Audacity
2014-11-02 20:37 - 2014-08-01 19:33 - 00000000 ____D () C:\Users\Administrator\Desktop\Mission_Make_Food_Lovee_Likes
2014-11-02 12:43 - 2014-08-14 15:33 - 00000000 ____D () C:\Users\Administrator\.gimp-2.8
2014-11-02 12:25 - 2014-08-14 15:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\gtk-2.0
2014-11-02 11:31 - 2013-12-29 15:16 - 00000000 ____D () C:\Users\Administrator\Documents\Finance
2014-10-25 12:52 - 2014-07-07 09:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-25 12:52 - 2014-07-07 09:20 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-25 12:52 - 2013-07-30 09:38 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-23 19:32 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-23 16:57 - 2013-07-11 20:28 - 02285128 _____ () C:\Windows\WindowsUpdate.log
2014-10-16 16:37 - 2014-08-30 12:20 - 00000000 ____D () C:\Users\Administrator\Documents\Guitar
2014-10-12 19:32 - 2013-12-19 23:22 - 00000000 ____D () C:\Users\Administrator\Documents\venice

Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\BRSVC_12532402_hlp.exe
C:\Users\Administrator\AppData\Local\Temp\jna1096930038884064691.dll
C:\Users\Administrator\AppData\Local\Temp\jna8573322048017471148.dll
C:\Users\Administrator\AppData\Local\Temp\oi_{DFC97380-DBD3-419D-954A-6888B16E9E57}.exe
C:\Users\Administrator\AppData\Local\Temp\ose00001.exe
C:\Users\Administrator\AppData\Local\Temp\Quarantine.exe
C:\Users\Administrator\AppData\Local\Temp\stream.exe
C:\Users\Administrator\AppData\Local\Temp\vcredist2005_x64.exe
C:\Users\Administrator\AppData\Local\Temp\vcredist2005_x86.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-11-07 13:04

==================== End Of Log ============================

***************************************************************************************************************

***************************************************************************************************************

============================================================

ADDITION.TXT SCAN

===========================================================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-11-2014
Ran by Administrator at 2014-11-09 13:11:17
Running from C:\Users\Administrator\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
Audacity 2.0.4 (HKLM-x32\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Fender FUSE (HKCU\...\1596363673.fuse.fender.com) (Version:  - fuse.fender.com)
Fender FUSE 2.7.1.48 (HKLM-x32\...\Fender FUSE) (Version:  - )
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 (HKLM-x32\...\{DCDEC776-BADD-48B9-8F9A-DFF513C3D7FA}) (Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft Camera Codec Pack (HKLM\...\{A6A4A258-0A48-4F76-B8F1-61F0514594DD}) (Version: 16.4.1970.0624 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK (HKLM-x32\...\{189AEA94-DAFB-487A-8CEE-F9D3DDE0A748}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (11.1.20627.00) (HKLM-x32\...\{FA804794-2CCB-4301-954F-2C2894698876}) (Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (HKLM-x32\...\{790E9425-8570-493F-9AE7-81AFC9E46930}) (Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31125 - Microsoft Corporation)
Microsoft Web Deploy 3.0 (HKLM\...\{AA72C306-30BE-4BB1-9E42-59552BAD2CDF}) (Version: 3.1236.1631 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft Web Platform Installer 4.0 (HKLM\...\{E2B8249D-895C-4685-8C83-00F3B1A13028}) (Version: 4.0.1622 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.50.3 - Black Tree Gaming)
Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6813 - Realtek Semiconductor Corp.)
SavingsBull (x32 Version: 1.0.0.0 - SavingsBull) Hidden <==== ATTENTION
The Elder Scrolls V Skyrim (HKLM-x32\...\{C57EEBB9-168C-4C98-8162-FD19E7F0AE77}_is1) (Version: 1.9.32.0.8 - Bethesda Softworks)
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VLC media player 2.0.8 (HKLM-x32\...\VLC media player) (Version: 2.0.8 - VideoLAN)
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-906571277-2069127330-1933695136-500_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 247 more characters). <==== Poweliks?

==================== Restore Points  =========================

27-10-2014 00:16:12 Windows Backup
03-11-2014 00:00:07 Windows Backup
07-11-2014 03:03:58 Malwarebytes Anti-Rootkit Restore Point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {7CAA3525-447B-4AEC-B7FA-066C119AB3D3} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

==================== Loaded Modules (whitelisted) =============

2011-03-16 23:07 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-20 14:23 - 2010-10-20 14:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Administrator^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk => C:\Windows\pss\MagicDisc.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Administrator\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: Jing => C:\Program Files (x86)\TechSmith\Jing\Jing.exe
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: OfficeSyncProcess => "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
MSCONFIG\startupreg: SearchProtection => "C:\Users\Administrator\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

========================= Accounts: ==========================

Administrator (S-1-5-21-906571277-2069127330-1933695136-500 - Administrator - Enabled) => C:\Users\Administrator
Guest (S-1-5-21-906571277-2069127330-1933695136-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-906571277-2069127330-1933695136-1008 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Sentinel64
Description: Sentinel64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: Sentinel64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================
Error: (11/08/2014 06:35:46 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Windows cannot access the file  for one of the following reasons:
there is a problem with the network connection, the disk that the file is stored on, or the storage
drivers installed on this computer; or the disk is missing.
Windows closed the program Internet Explorer because of this error.

Program: Internet Explorer
File:

The error value is listed in the Additional Data section.
User Action
1. Open the file again.
This situation might be a temporary problem that corrects itself when the program runs again.
2.
If the file still cannot be accessed and
 - It is on the network,
your network administrator should verify that there is not a problem with the network and that the server can be contacted.
 - It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for
further assistance.

Additional Data
Error value: 00000000
Disk type: 0

Error: (11/08/2014 06:35:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 10.0.9200.16686, time stamp: 0x4a5bc6b7
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000096
Fault offset: 0x084a6023
Faulting process id: 0x194c
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (11/06/2014 10:41:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16686, time stamp: 0x52058cf0
Faulting module name: Flash32_14_0_0_125.ocx, version: 14.0.0.125, time stamp: 0x53862324
Exception code: 0xc0000005
Fault offset: 0x005d7ea9
Faulting process id: 0xf80
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3

Error: (11/06/2014 09:30:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16686, time stamp: 0x52058cf0
Faulting module name: atidxx32.dll, version: 8.17.10.472, time stamp: 0x50d21e29
Exception code: 0xc0000005
Fault offset: 0x0038e8eb
Faulting process id: 0x854
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3

Error: (11/06/2014 08:59:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16686, time stamp: 0x52058cf0
Faulting module name: ntdll.dll, version: 6.1.7601.18229, time stamp: 0x51fb1072
Exception code: 0xc0000374
Fault offset: 0x000ce753
Faulting process id: 0x970
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3

Error: (11/04/2014 08:32:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.16686 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 24ec

Start Time: 01cff896f1e6c7f3

Termination Time: 153

Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Report Id:

Error: (11/02/2014 08:29:46 PM) (Source: ESENT) (EventID: 428) (User: )
Description: taskhost (1736) WebCacheLocal: The database engine is rejecting update operations due to low free disk space on the log disk.

Error: (11/02/2014 08:16:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16686, time stamp: 0x52058cf0
Faulting module name: atidxx32.dll, version: 8.17.10.472, time stamp: 0x50d21e29
Exception code: 0xc0000005
Fault offset: 0x003da41a
Faulting process id: 0x5f0
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3

Error: (11/02/2014 08:08:21 PM) (Source: ESENT) (EventID: 482) (User: )
Description: taskhost (1736) WebCacheLocal: An attempt to write to the file "C:\Users\Administrator\AppData\Local\Microsoft\Windows\WebCache\V01res00002.jrs" at offset 0 (0x0000000000000000) for 393216 (0x00060000) bytes failed after taskhost0 seconds with system error 112 (0x00000070): "There is not enough space on the disk. ".  The write operation will fail with error -1808 (0xfffff8f0).  If this error persists then the file may be damaged and may need to be restored from a previous backup.

Error: (11/02/2014 08:08:17 PM) (Source: ESENT) (EventID: 482) (User: )
Description: taskhost (1736) WebCacheLocal: An attempt to write to the file "C:\Users\Administrator\AppData\Local\Microsoft\Windows\WebCache\V01res00002.jrs" at offset 0 (0x0000000000000000) for 393216 (0x00060000) bytes failed after taskhost0 seconds with system error 112 (0x00000070): "There is not enough space on the disk. ".  The write operation will fail with error -1808 (0xfffff8f0).  If this error persists then the file may be damaged and may need to be restored from a previous backup.

System errors:
=============
Error: (11/09/2014 00:24:38 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:38 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:38 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:34 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:34 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:34 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:28 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:28 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:28 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Error: (11/09/2014 00:24:28 PM) (Source: DCOM) (EventID: 10016) (User: ADRIANNZINHA)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}ADRIANNZINHAAdministratorS-1-5-21-906571277-2069127330-1933695136-500LocalHost (Using LRPC)

Microsoft Office Sessions:
=========================
Error: (11/08/2014 06:35:46 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Internet Explorer000000000

Error: (11/08/2014 06:35:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe10.0.9200.166864a5bc6b7unknown0.0.0.000000000c0000096084a6023194c01cffbac96ff373fC:\Program Files\Internet Explorer\iexplore.exeunknownf6483620-679f-11e4-b45f-d43d7eb13fce

Error: (11/06/2014 10:41:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE10.0.9200.1668652058cf0Flash32_14_0_0_125.ocx14.0.0.12553862324c0000005005d7ea9f8001cffa38f5cd45d6C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\Macromed\Flash\Flash32_14_0_0_125.ocx05503849-6630-11e4-9912-d43d7eb13fce

Error: (11/06/2014 09:30:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE10.0.9200.1668652058cf0atidxx32.dll8.17.10.47250d21e29c00000050038e8eb85401cffa32d5304cc7C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\system32\atidxx32.dll13ef6cc5-6626-11e4-854e-d43d7eb13fce

Error: (11/06/2014 08:59:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE10.0.9200.1668652058cf0ntdll.dll6.1.7601.1822951fb1072c0000374000ce75397001cffa2812c8ddfdC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\ntdll.dlla5127ed9-6621-11e4-854e-d43d7eb13fce

Error: (11/04/2014 08:32:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE10.0.9200.1668624ec01cff896f1e6c7f3153C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Error: (11/02/2014 08:29:46 PM) (Source: ESENT) (EventID: 428) (User: )
Description: taskhost1736WebCacheLocal:

Error: (11/02/2014 08:16:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IEXPLORE.EXE10.0.9200.1668652058cf0atidxx32.dll8.17.10.47250d21e29c0000005003da41a5f001cff6b8f28bb809C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\system32\atidxx32.dll06306934-62f7-11e4-b326-d43d7eb13fce

Error: (11/02/2014 08:08:21 PM) (Source: ESENT) (EventID: 482) (User: )
Description: taskhost1736WebCacheLocal: C:\Users\Administrator\AppData\Local\Microsoft\Windows\WebCache\V01res00002.jrs0 (0x0000000000000000)393216 (0x00060000)-1808 (0xfffff8f0)112 (0x00000070)There is not enough space on the disk. 0

Error: (11/02/2014 08:08:17 PM) (Source: ESENT) (EventID: 482) (User: )
Description: taskhost1736WebCacheLocal: C:\Users\Administrator\AppData\Local\Microsoft\Windows\WebCache\V01res00002.jrs0 (0x0000000000000000)393216 (0x00060000)-1808 (0xfffff8f0)112 (0x00000070)There is not enough space on the disk. 0

==================== Memory info ===========================

Processor: Intel® Core™ i5-3570K CPU @ 3.40GHz
Percentage of memory in use: 35%
Total physical RAM: 8139.38 MB
Available physical RAM: 5266.57 MB
Total Pagefile: 16276.93 MB
Available Pagefile: 12526.61 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:11.03 GB) NTFS
Drive g: (My Passport) (Fixed) (Total:1862.98 GB) (Free:984.61 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 8FE6CCFB)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 9D800294)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================

 


Edited by Adriannzinha, 09 November 2014 - 08:07 PM.


BC AdBot (Login to Remove)

 


#2 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:05 PM

Posted 10 November 2014 - 01:06 PM

Hi & :welcome: to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully: :exclame:

  • My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
  • Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
  • If I don't reply within 24 hours please PM me!
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.

Step 1
logo.png
Please download Powelikscleaner (by ESET) and save it to your Desktop.

  • Double-click the 3.png to start the tool.
  • Read the terms of the End-user license agreement and click Agree if you agree to them.
  • The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.
  • If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.
  • The tool will produce a log in the same directory the tool was run from.
  • Please copy and paste the log in your next reply.

1.png
2.png

After Reboot:

Step 2

Please uninstall some programs:

  • Windows 7w7.png: Click on the hidden2.png button, open Control Panel and click Uninstall a program.
  • Search and select the following programs one by one and click on Uninstall:

                                                              SavingsBull

  • Reboot your computer.

Step 3

Please download adwcleaner.png AdwCleaner (by Xplode) and save it to your Desktop.

  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select "Run As Administrator"
  • Click on the Scan button.
  • After the scan has finished, click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • After rebooting, a log file (that is saved in C:\AdwCleaner[S#].txt) will open automatically.
    Copy and paste the contents of that logfile in your next reply.

Step 4

frst.pngfrstscan.png

Start FRST with administator privileges.

  • Press the Scan button.
  • When finished, FRST will produce a log (FRST.txt) in the same directory the tool was run from.
    Please copy and paste the log in your next reply.

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#3 Adriannzinha

Adriannzinha
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 10 November 2014 - 07:38 PM

Hello Jürgen - thank you very much for your help. I have done as you requested and I will post the logs immediately below.

Step 1- Poweliks Cleaner Log

[2014.11.10 19:03:16.929] - Begin
[2014.11.10 19:03:16.932] -
[2014.11.10 19:03:16.932] -     ....................................
[2014.11.10 19:03:16.932] -   ..::::::::::::::::::....................
[2014.11.10 19:03:16.932] -   .::EEEEEE:::SSSSSS::..EEEEEE..TTTTTTTT..    Win32/Poweliks
[2014.11.10 19:03:16.934] -  .::EE::::EE:SS:::::::.EE....EE....TT......   Version: 1.0.0.1
[2014.11.10 19:03:16.934] -  .::EEEEEEEE::SSSSSS::.EEEEEEEE....TT......   Built: Oct 15 2014
[2014.11.10 19:03:16.937] -  .::EE:::::::::::::SS:.EE..........TT......
[2014.11.10 19:03:16.937] -   .::EEEEEE:::SSSSSS::..EEEEEE.....TT.....    Copyright © ESET, spol. s r.o.
[2014.11.10 19:03:16.937] -   ..::::::::::::::::::....................    1992-2013. All rights reserved.
[2014.11.10 19:03:16.937] -     ....................................
[2014.11.10 19:03:16.939] -
[2014.11.10 19:03:16.939] - --------------------------------------------------------------------------------
[2014.11.10 19:03:16.939] -
[2014.11.10 19:03:16.939] - INFO: OS: 6.1.7601 SP1
[2014.11.10 19:03:16.939] - INFO: Product Type: Workstation
[2014.11.10 19:03:16.939] - INFO: WoW64: True
[2014.11.10 19:03:16.939] - INFO: Machine guid: B6C70C78-601F-4E92-8C18-F78E3D883326
[2014.11.10 19:03:16.939] -
[2014.11.10 19:03:18.844] - INFO: Scanning for system infection...
[2014.11.10 19:03:18.844] - --------------------------------------------------------------------------------
[2014.11.10 19:03:18.844] -
[2014.11.10 19:03:18.844] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.10 19:03:18.844] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.10 19:03:18.847] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.10 19:03:18.847] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.10 19:03:18.847] - INFO: Processing classes...
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\.DEFAULT\SOFTWARE\Classes\CLSID\{20685999-3908-46E6-B13A-2D27649A28BA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\.DEFAULT\SOFTWARE\Classes\CLSID\{78541C17-104B-4C6B-A848-54AE7D780F49}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{79b4acff-94d2-58c5-baf6-23df99c7fcba}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.847] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.849] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]

 

(more below)


(continued)

[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.852] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.854] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.857] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE


\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{dcc9a6f3-492c-5f51-a65d-3dd92b26c165}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\.DEFAULT\SOFTWARE\Classes\CLSID\{20685999-3908-46E6-B13A-2D27649A28BA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\.DEFAULT\SOFTWARE\Classes\CLSID\{78541C17-104B-4C6B-A848-54AE7D780F49}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{20685999-3908-46E6-B13A-2D27649A28BA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{78541C17-104B-4C6B-A848-54AE7D780F49}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.10 19:03:18.859] - WARNING: Found suspicous classid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.859] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.862] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.864] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.867] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.869] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-18\SOFTWARE\Classes\CLSID\{20685999-3908-46E6-B13A-2D27649A28BA}]
[2014.11.10 19:03:18.872] - INFO: Processing clsid [\Registry\User\S-1-5-18\SOFTWARE\Classes\CLSID\{78541C17-104B-4C6B-A848-54AE7D780F49}]
[2014.11.10 19:03:18.872] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.10 19:03:18.874] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.10 19:03:18.874] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.10 19:03:18.874] - INFO: Processing invalid values in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.10 19:03:18.874] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.10 19:03:18.874] - INFO: Processing value [ServerExecutable] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.10 19:03:18.874] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.10 19:03:18.874] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.10 19:03:18.874] - INFO: Processing invalid subkeys in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.10 19:03:18.874] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]...
[2014.11.10 19:03:18.874] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.10 19:03:18.877] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.10 19:03:18.877] - INFO: Win32/Poweliks found
[2014.11.10 19:03:23.777] - INFO: process: dllhost.exe, pid 2732, parent 2440
[2014.11.10 19:03:23.777] - INFO: Terminated process pid = 2732
[2014.11.10 19:03:23.777] - INFO: process: dllhost.exe, pid 3900, parent 2732
[2014.11.10 19:03:23.777] - INFO: Terminated process pid = 3900
[2014.11.10 19:03:23.777] - INFO: process: dllhost.exe, pid 5352, parent 3900
[2014.11.10 19:03:23.777] - INFO: Terminated process pid = 5352
[2014.11.10 19:03:23.779] - INFO: process: dllhost.exe, pid 4940, parent 3900
[2014.11.10 19:03:23.779] - INFO: Terminated process pid = 4940
[2014.11.10 19:03:23.779] - INFO: process: dllhost.exe, pid 4624, parent 748
[2014.11.10 19:03:23.779] - INFO: Terminated process pid = 4624
[2014.11.10 19:03:23.779] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.10 19:03:23.779] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.10 19:03:23.779] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.10 19:03:23.779] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.10 19:03:23.779] - INFO: Processing classes...
[2014.11.10 19:03:23.779] - INFO: Processing clsid [\Registry\User\.DEFAULT\SOFTWARE\Classes\CLSID\{20685999-3908-46E6-B13A-2D27649A28BA}]
[2014.11.10 19:03:23.779] - INFO: Processing clsid [\Registry\User\.DEFAULT\SOFTWARE\Classes\CLSID\{78541C17-104B-4C6B-A848-54AE7D780F49}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{79b4acff-94d2-58c5-baf6-23df99c7fcba}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.782] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.784] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.787] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.789] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.792] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
 


[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{dcc9a6f3-492c-5f51-a65d-3dd92b26c165}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\.DEFAULT\SOFTWARE\Classes\CLSID\{20685999-3908-46E6-B13A-2D27649A28BA}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\.DEFAULT\SOFTWARE\Classes\CLSID\{78541C17-104B-4C6B-A848-54AE7D780F49}]
[2014.11.10 19:03:23.794] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{20685999-3908-46E6-B13A-2D27649A28BA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{78541C17-104B-4C6B-A848-54AE7D780F49}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.10 19:03:23.797] - INFO: Deleted classid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.797] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.799] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.802] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.804] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]



#4 Adriannzinha

Adriannzinha
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 10 November 2014 - 07:40 PM

[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-21-906571277-2069127330-1933695136-500\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-18\SOFTWARE\Classes\CLSID\{20685999-3908-46E6-B13A-2D27649A28BA}]
[2014.11.10 19:03:23.807] - INFO: Processing clsid [\Registry\User\S-1-5-18\SOFTWARE\Classes\CLSID\{78541C17-104B-4C6B-A848-54AE7D780F49}]
[2014.11.10 19:03:23.807] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.10 19:03:23.807] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.10 19:03:23.807] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.10 19:03:23.807] - INFO: Processing invalid values in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.10 19:03:23.807] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.10 19:03:23.807] - INFO: Processing value [ServerExecutable] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.10 19:03:23.807] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.10 19:03:23.807] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.10 19:03:23.807] - INFO: Processing invalid subkeys in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.10 19:03:23.807] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]...
[2014.11.10 19:03:23.807] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.10 19:03:23.807] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.10 19:03:23.807] - INFO: Cleaning status: 0
[2014.11.10 19:03:27.017] - End

******************************************************************************************

Step 2 - Delete SavingsBull

I was unable to find this application in the programs section of the Control Panel. From what I read online it appears to be a form of adware. I also performed a typical search on my computer but again, was unable to find anything called SavingsBull or Conduit or any of the obvious adware packages.

 

I did however find a suspicious text file called SavingsBullFilterService.log in my windows/system32 directory.

Do you have suggestions on this item?

*****************************************************************************************

Step 3 - ADWCleaner Log

# AdwCleaner v3.023 - Report created 01/04/2014 at 20:25:19
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Administrator - ALESSANDRA
# Running from : C:\Users\Administrator\Downloads\AdwCleaner (2).exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Windows\Installer\{6DDE8071-E4BA-461B-8A96-990DFAA0EBD1}
Folder Deleted : C:\Windows\Installer\{813BA625-B0FA-48D8-9B75-59759C88C219}

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6DDE8071-E4BA-461B-8A96-990DFAA0EBD1}
Key Deleted : [x64] HKLM\SOFTWARE\Savings Bull
Key Deleted : [x64] HKLM\SOFTWARE\SavingsBull Filter
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{813BA625-B0FA-48D8-9B75-59759C88C219}
Key Deleted : HKLM\Software\Classes\Installer\Features\1708EDD6AB4EB164A86999D0AF0ABE1D
Key Deleted : HKLM\Software\Classes\Installer\Features\526AB318AF0B8D84B9579557C9882C91
Key Deleted : HKLM\Software\Classes\Installer\Products\1708EDD6AB4EB164A86999D0AF0ABE1D
Key Deleted : HKLM\Software\Classes\Installer\Products\526AB318AF0B8D84B9579557C9882C91

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16686

*************************

AdwCleaner[R0].txt - [2960 octets] - [11/01/2014 19:33:55]
AdwCleaner[R1].txt - [976 octets] - [12/01/2014 16:27:40]
AdwCleaner[R2].txt - [1587 octets] - [27/02/2014 23:31:09]
AdwCleaner[R3].txt - [1015 octets] - [01/03/2014 00:44:43]
AdwCleaner[R4].txt - [1136 octets] - [01/03/2014 21:25:13]
AdwCleaner[R5].txt - [2075 octets] - [01/04/2014 20:24:42]
AdwCleaner[S0].txt - [2909 octets] - [11/01/2014 19:35:07]
AdwCleaner[S1].txt - [1040 octets] - [12/01/2014 16:33:52]
AdwCleaner[S2].txt - [1641 octets] - [27/02/2014 23:33:02]
AdwCleaner[S3].txt - [1076 octets] - [01/03/2014 00:45:17]
AdwCleaner[S4].txt - [1198 octets] - [01/03/2014 21:33:42]
AdwCleaner[S5].txt - [2008 octets] - [01/04/2014 20:25:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [2068 octets] ##########
# AdwCleaner v4.101 - Report created 10/11/2014 at 19:18:06
# Updated 09/11/2014 by Xplode
# Database : 2014-11-10.9 [Live]
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Administrator - ADRIANNZINHA
# Running from : C:\Users\Administrator\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Windows\Installer\{6DDE8071-E4BA-461B-8A96-990DFAA0EBD1}
Folder Deleted : C:\Windows\Installer\{813BA625-B0FA-48D8-9B75-59759C88C219}
File Deleted : C:\Users\Administrator\daemonprocess.txt

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FC378612-7BD2-4372-B495-51181A8FE00B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6DDE8071-E4BA-461B-8A96-990DFAA0EBD1}
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\1708EDD6AB4EB164A86999D0AF0ABE1D
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\526AB318AF0B8D84B9579557C9882C91
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\1708EDD6AB4EB164A86999D0AF0ABE1D
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\526AB318AF0B8D84B9579557C9882C91
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C19AC53289098045B06B0DD1D37CBAB
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\216F88E93A00F2B5494EDDCFD502D42E
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23D9E9D21B4E77E41B9F50DD22F24E20
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23EEA1F105A7F45449974D9B95E7AC89
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26982796A8AFD1246B95E00265A95BF9
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32DA746012E6D4F488AAD113D6FA4A44
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\42D92D0D75AFEF74297E03876C8D9D33
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50FFE845C555A6E4BADB7CB7A145BFEB
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B417119DEEF2AE52B41C910B4B269FA
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\715A3348920B6534690067594BB69F60
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7B7B13B037A7C2A42AC3E3EAF14D7107
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D05B2942E9CC80499F397F6114DFB35
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\82306010F2A8A02519C2D6D1A4B48415
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8591B8948E1C4A04F90505B3CDEE8555
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D841C5FEC311624CB88D49DB3884FA7
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD04033484A18CA4CAB3EE59D39D756E
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD746BF3B3B3FD8409B86604BA85982A
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF767AE36C8829547ACD71A4249A42B9
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E9A2A2663AD8ED75E83332ACA3689A31
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F355F0DB7A2E3A14B8E7A568FBA25937
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDCBFFB76F9A2B15D9A475A10FA793A6
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1708EDD6AB4EB164A86999D0AF0ABE1D
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\526AB318AF0B8D84B9579557C9882C91

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16686

*************************

AdwCleaner[R0].txt - [2960 octets] - [11/01/2014 18:33:55]
AdwCleaner[R1].txt - [976 octets] - [12/01/2014 15:27:40]
AdwCleaner[R2].txt - [1587 octets] - [27/02/2014 22:31:09]
AdwCleaner[R3].txt - [1015 octets] - [28/02/2014 23:44:43]
AdwCleaner[R4].txt - [1136 octets] - [01/03/2014 20:25:13]
AdwCleaner[R5].txt - [8415 octets] - [01/04/2014 19:24:42]
AdwCleaner[R6].txt - [6400 octets] - [10/11/2014 19:15:35]
AdwCleaner[S0].txt - [2909 octets] - [11/01/2014 18:35:07]
AdwCleaner[S1].txt - [1040 octets] - [12/01/2014 15:33:52]
AdwCleaner[S2].txt - [1641 octets] - [27/02/2014 22:33:02]
AdwCleaner[S3].txt - [1076 octets] - [28/02/2014 23:45:17]
AdwCleaner[S4].txt - [1198 octets] - [01/03/2014 20:33:42]
AdwCleaner[S5].txt - [8134 octets] - [01/04/2014 19:25:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [8194 octets] ##########



#5 Adriannzinha

Adriannzinha
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 10 November 2014 - 07:41 PM

Step 4 - FRST Log

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014
Ran by Administrator (administrator) on ADRIANNZINHA on 10-11-2014 19:21:43
Running from C:\Users\Administrator\Desktop
Loaded Profile: Administrator (Available profiles: Administrator & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6962400 2012-12-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes' Anti-Malware <====== ATTENTION
Winlogon\Notify\acillao-x32: C:\Users\Administrator\AppData\Local\acillao.dll ()
HKU\S-1-5-21-906571277-2069127330-1933695136-500\...\Run: [acillao] => rundll32 "C:\Users\Administrator\AppData\Local\acillao.dll",acillao <===== ATTENTION
HKU\S-1-5-21-906571277-2069127330-1933695136-500\...\MountPoints2: {78dd3943-f950-11e2-90b7-d43d7eb13fce} - F:\Skyrim_setup.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.economicpolicyjournal.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x10E1760AB17ECE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://elliottwave5pointzeroreboot.blogspot.com/
http://www.bleepingcomputer.com/forums/t/555406/powerlik-victim-requesting-help/
http://www.nws.noaa.gov/climate/index.php?wfo=tbw
URLSearchHook: HKCU - (No Name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No File
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {EDBD7A8E-B615-4B67-B2BD-1656CF5F74ED} URL = https://duckduckgo.com/?q={searchTerms}
SearchScopes: HKCU - {EDBD7A8E-B615-4B67-B2BD-1656CF5F74ED} URL = https://duckduckgo.com/?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://investools-events.webex.com/client/WBXclient-T28L10NSP12-16655/nbr/ieatgpc1.cab
Tcpip\Parameters: [DhcpNameServer] 65.32.5.111 65.32.5.112

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/thinkorswim -> C:\Program Files (x86)\thinkorswim\npthinkorswim.dll No File
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/tossc -> C:\Program Files (x86)\thinkorswim\nptossc.dll No File

Chrome:
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2009-07-13] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-18] ()
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.)
S3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [58664 2008-07-11] (SafeNet, Inc.)
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-10 19:21 - 2014-11-10 19:21 - 00000000 ____D () C:\Users\Administrator\Desktop\FRST-OlderVersion
2014-11-10 19:20 - 2014-11-10 19:20 - 00008366 _____ () C:\Users\Administrator\Desktop\AdwCleaner[S5].txt
2014-11-10 19:08 - 2014-11-10 19:08 - 02140160 _____ () C:\Users\Administrator\Desktop\AdwCleaner.exe
2014-11-10 19:03 - 2014-11-10 19:03 - 00801560 _____ () C:\Users\Administrator\Desktop\ESETPoweliksCleaner.exe_20141110.190316.5992.log
2014-11-10 19:02 - 2014-11-10 19:02 - 00186568 _____ (ESET) C:\Users\Administrator\Desktop\ESETPoweliksCleaner.exe
2014-11-09 13:28 - 2014-11-09 13:28 - 00023552 _____ () C:\Users\Administrator\AppData\Local\acillao.dll
2014-11-09 13:28 - 2014-11-09 13:28 - 00000000 ____D () C:\ProgramData\ZanyaBduwf
2014-11-09 13:28 - 2014-11-09 13:28 - 00000000 ____D () C:\ProgramData\NiyimTosew
2014-11-09 13:11 - 2014-11-10 19:21 - 00008988 _____ () C:\Users\Administrator\Desktop\FRST.txt
2014-11-09 13:11 - 2014-11-09 13:11 - 00026366 _____ () C:\Users\Administrator\Desktop\Addition.txt
2014-11-09 13:10 - 2014-11-10 19:21 - 02116096 _____ (Farbar) C:\Users\Administrator\Desktop\FRST64.exe
2014-11-09 13:09 - 2014-11-10 19:21 - 00000000 ____D () C:\FRST
2014-11-09 13:07 - 2014-11-09 13:09 - 02115584 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-11-09 12:24 - 2014-11-09 12:24 - 00000000 ____D () C:\Users\Administrator\Desktop\rkill
2014-11-06 21:57 - 2014-11-06 21:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Downloads\rkill.exe
2014-11-06 21:57 - 2014-11-06 21:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Desktop\rkill.exe
2014-11-06 21:56 - 2014-11-07 12:47 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-11-06 21:55 - 2014-11-06 22:59 - 00000000 ____D () C:\Users\Administrator\Desktop\mbar
2014-11-06 21:55 - 2014-11-06 21:55 - 14349744 _____ (Malwarebytes Corp.) C:\Users\Administrator\Desktop\mbar-1.07.0.1012.exe
2014-11-06 21:52 - 2014-11-06 21:52 - 00032707 _____ () C:\Users\Administrator\Desktop\Result.txt
2014-11-06 21:51 - 2014-11-06 21:51 - 00002681 _____ () C:\Users\Administrator\Desktop\FSS.txt
2014-11-06 21:50 - 2014-11-06 21:49 - 00854448 _____ () C:\Users\Administrator\Desktop\SecurityCheck.exe
2014-11-06 21:49 - 2014-11-06 21:49 - 00854448 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-11-06 21:46 - 2014-11-06 21:46 - 00000000 ____D () C:\Windows\pss
2014-11-02 12:25 - 2014-11-02 12:25 - 00002553 _____ () C:\Users\Administrator\AppData\Local\recently-used.xbel
2014-11-02 12:24 - 2014-11-02 12:24 - 00108855 _____ () C:\Users\Administrator\Desktop\water-bill.jpeg
2014-11-02 12:21 - 2014-11-02 12:21 - 00625427 _____ () C:\Users\Administrator\Desktop\water-bill.xcf
2014-10-21 20:33 - 2014-10-21 20:33 - 00172293 _____ () C:\Users\Administrator\Desktop\p7002j@gmail.com

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-10 19:20 - 2013-07-28 18:46 - 00082659 _____ () C:\Windows\setupact.log
2014-11-10 19:20 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-10 19:18 - 2014-01-11 18:10 - 00000000 ____D () C:\AdwCleaner
2014-11-10 19:18 - 2013-07-12 00:34 - 00260482 _____ () C:\Windows\PFRO.log
2014-11-10 19:18 - 2013-07-11 20:30 - 00000000 ____D () C:\Users\Administrator
2014-11-10 19:12 - 2009-07-13 23:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-10 19:12 - 2009-07-13 23:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-10 19:09 - 2009-07-14 00:13 - 00866920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-09 19:53 - 2014-10-07 20:46 - 00000000 ____D () C:\Users\Administrator\Documents\Europe-2014-trip
2014-11-09 13:34 - 2014-03-15 07:39 - 00000000 ____D () C:\Users\Administrator\Desktop\historyofrome
2014-11-09 13:28 - 2014-09-06 14:44 - 00000000 ____D () C:\Program Files (x86)\Fender
2014-11-09 12:26 - 2014-07-07 09:22 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-09 12:25 - 2014-04-01 19:26 - 00002148 _____ () C:\Users\Administrator\Desktop\Rkill.txt
2014-11-06 22:07 - 2014-07-07 09:20 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 22:04 - 2014-01-10 21:55 - 00000000 ____D () C:\Users\Administrator\AppData\Local\SWTORPerf
2014-11-06 22:04 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\IME
2014-11-02 21:53 - 2013-09-07 11:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Audacity
2014-11-02 20:37 - 2014-08-01 19:33 - 00000000 ____D () C:\Users\Administrator\Desktop\Mission_Make_Food_Lovee_Likes
2014-11-02 12:43 - 2014-08-14 15:33 - 00000000 ____D () C:\Users\Administrator\.gimp-2.8
2014-11-02 12:25 - 2014-08-14 15:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\gtk-2.0
2014-11-02 11:31 - 2013-12-29 15:16 - 00000000 ____D () C:\Users\Administrator\Documents\Finance
2014-10-25 12:52 - 2014-07-07 09:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-25 12:52 - 2014-07-07 09:20 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-25 12:52 - 2013-07-30 09:38 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-23 19:32 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-23 16:57 - 2013-07-11 20:28 - 02285128 _____ () C:\Windows\WindowsUpdate.log
2014-10-16 16:37 - 2014-08-30 12:20 - 00000000 ____D () C:\Users\Administrator\Documents\Guitar
2014-10-12 19:32 - 2013-12-19 23:22 - 00000000 ____D () C:\Users\Administrator\Documents\venice

Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\BRSVC_12532402_hlp.exe
C:\Users\Administrator\AppData\Local\Temp\BRSVC_5051047_hlp.exe
C:\Users\Administrator\AppData\Local\Temp\jna1096930038884064691.dll
C:\Users\Administrator\AppData\Local\Temp\jna8573322048017471148.dll
C:\Users\Administrator\AppData\Local\Temp\oi_{DFC97380-DBD3-419D-954A-6888B16E9E57}.exe
C:\Users\Administrator\AppData\Local\Temp\ose00001.exe
C:\Users\Administrator\AppData\Local\Temp\Quarantine.exe
C:\Users\Administrator\AppData\Local\Temp\sqlite3.dll
C:\Users\Administrator\AppData\Local\Temp\stream.exe
C:\Users\Administrator\AppData\Local\Temp\vcredist2005_x64.exe
C:\Users\Administrator\AppData\Local\Temp\vcredist2005_x86.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-11-07 13:04

==================== End Of Log ============================



#6 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:05 PM

Posted 11 November 2014 - 10:40 AM

warning.gif Malware Warning

All passwords should be changed immediately to include those used for banking, email, eBay, paypal and online forums from a CLEAN COMPUTER.

Step 1

frst.pngfrstfix.png
Please download the attached fixlist txt.gif and save it in the same directory as FRST.
  • Start FRST with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) pops up and is saved to the same location the tool was run from.
    Please copy and paste its contents in your next reply.
Attached File  fixlist.txt   1.34KB   3 downloads

After the Reboot:

Step 2

frst.pngfrstscan.png

Start FRST with administator privileges.
  • Make sure the following option is checked: addition.png
  • Press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
    Please copy and paste these logs in your next reply.

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#7 Adriannzinha

Adriannzinha
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 12 November 2014 - 08:12 PM

Your note sounds more urgent than before. Does my system appear to have a new infection or perhaps a more severe variant of this Poweliks?

 

EDITS: ALso, i changed the passwords to all my major banking/email/forum sites using a different computer.

 

Here are the logs as you requested:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-11-2014
Ran by Administrator at 2014-11-12 19:47:39 Run:1
Running from C:\Users\Administrator\Desktop\Virus-removal
Loaded Profile: Administrator (Available profiles: Administrator & Classic .NET AppPool & DefaultAppPool)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CloseProcesses:
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes' Anti-Malware <====== ATTENTION
Winlogon\Notify\acillao-x32: C:\Users\Administrator\AppData\Local\acillao.dll ()
HKU\S-1-5-21-906571277-2069127330-1933695136-500\...\Run: [acillao] => rundll32 "C:\Users\Administrator\AppData\Local\acillao.dll",acillao <===== ATTENTION
C:\Users\Administrator\AppData\Local\acillao.dll
URLSearchHook: HKCU - (No Name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No File
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/thinkorswim -> C:\Program Files (x86)\thinkorswim\npthinkorswim.dll No File
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/tossc -> C:\Program Files (x86)\thinkorswim\nptossc.dll No File
2014-11-09 13:28 - 2014-11-09 13:28 - 00000000 ____D () C:\ProgramData\ZanyaBduwf
2014-11-09 13:28 - 2014-11-09 13:28 - 00000000 ____D () C:\ProgramData\NiyimTosew
EmptyTemp:
*****************

Processes closed successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\acillao" => Key deleted successfully.
HKU\S-1-5-21-906571277-2069127330-1933695136-500\Software\Microsoft\Windows\CurrentVersion\Run\\acillao => value deleted successfully.
C:\Users\Administrator\AppData\Local\acillao.dll => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} => value deleted successfully.
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/thinkorswim -> C:\Program Files (x86)\thinkorswim\npthinkorswim.dll No File => Error: No automatic fix found for this entry.
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/tossc -> C:\Program Files (x86)\thinkorswim\nptossc.dll No File => Error: No automatic fix found for this entry.
C:\ProgramData\ZanyaBduwf => Moved successfully.
C:\ProgramData\NiyimTosew => Moved successfully.
EmptyTemp: => Removed 15.3 GB temporary data.


The system needed a reboot.

==== End of Fixlog ====

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014
Ran by Administrator (administrator) on ADRIANNZINHA on 12-11-2014 20:00:59
Running from C:\Users\Administrator\Desktop\Virus-removal
Loaded Profile: Administrator (Available profiles: Administrator & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6962400 2012-12-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKU\S-1-5-21-906571277-2069127330-1933695136-500\...\MountPoints2: {78dd3943-f950-11e2-90b7-d43d7eb13fce} - F:\Skyrim_setup.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.economicpolicyjournal.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x10E1760AB17ECE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://elliottwave5pointzeroreboot.blogspot.com/
http://www.bleepingcomputer.com/forums/t/555406/powerlik-victim-requesting-help/
http://www.nws.noaa.gov/climate/index.php?wfo=tbw
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {EDBD7A8E-B615-4B67-B2BD-1656CF5F74ED} URL = https://duckduckgo.com/?q={searchTerms}
SearchScopes: HKCU - {EDBD7A8E-B615-4B67-B2BD-1656CF5F74ED} URL = https://duckduckgo.com/?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://investools-events.webex.com/client/WBXclient-T28L10NSP12-16655/nbr/ieatgpc1.cab
Tcpip\Parameters: [DhcpNameServer] 65.32.5.111 65.32.5.112

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/thinkorswim -> C:\Program Files (x86)\thinkorswim\npthinkorswim.dll No File
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/tossc -> C:\Program Files (x86)\thinkorswim\nptossc.dll No File

Chrome:
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2009-07-13] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-18] ()
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.)
S3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [58664 2008-07-11] (SafeNet, Inc.)
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-12 19:46 - 2014-11-12 20:00 - 00000000 ____D () C:\Users\Administrator\Desktop\Virus-removal
2014-11-10 19:57 - 2014-11-10 19:57 - 00000000 ____D () C:\Users\Administrator\Documents\security-wifi
2014-11-10 19:21 - 2014-11-10 19:21 - 00000000 ____D () C:\Users\Administrator\Desktop\FRST-OlderVersion
2014-11-10 19:20 - 2014-11-10 19:20 - 00008366 _____ () C:\Users\Administrator\Desktop\AdwCleaner[S5].txt
2014-11-10 19:08 - 2014-11-10 19:08 - 02140160 _____ () C:\Users\Administrator\Desktop\AdwCleaner.exe
2014-11-10 19:03 - 2014-11-10 19:03 - 00801560 _____ () C:\Users\Administrator\Desktop\ESETPoweliksCleaner.exe_20141110.190316.5992.log
2014-11-10 19:02 - 2014-11-10 19:02 - 00186568 _____ (ESET) C:\Users\Administrator\Desktop\ESETPoweliksCleaner.exe
2014-11-09 13:11 - 2014-11-10 19:22 - 00016873 _____ () C:\Users\Administrator\Desktop\FRST.txt
2014-11-09 13:11 - 2014-11-09 13:11 - 00026366 _____ () C:\Users\Administrator\Desktop\Addition.txt
2014-11-09 13:09 - 2014-11-12 20:01 - 00000000 ____D () C:\FRST
2014-11-09 13:07 - 2014-11-09 13:09 - 02115584 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-11-09 12:24 - 2014-11-09 12:24 - 00000000 ____D () C:\Users\Administrator\Desktop\rkill
2014-11-06 21:57 - 2014-11-06 21:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Downloads\rkill.exe
2014-11-06 21:57 - 2014-11-06 21:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Desktop\rkill.exe
2014-11-06 21:56 - 2014-11-07 12:47 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-11-06 21:55 - 2014-11-06 22:59 - 00000000 ____D () C:\Users\Administrator\Desktop\mbar
2014-11-06 21:55 - 2014-11-06 21:55 - 14349744 _____ (Malwarebytes Corp.) C:\Users\Administrator\Desktop\mbar-1.07.0.1012.exe
2014-11-06 21:52 - 2014-11-06 21:52 - 00032707 _____ () C:\Users\Administrator\Desktop\Result.txt
2014-11-06 21:51 - 2014-11-06 21:51 - 00002681 _____ () C:\Users\Administrator\Desktop\FSS.txt
2014-11-06 21:50 - 2014-11-06 21:49 - 00854448 _____ () C:\Users\Administrator\Desktop\SecurityCheck.exe
2014-11-06 21:49 - 2014-11-06 21:49 - 00854448 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-11-06 21:46 - 2014-11-06 21:46 - 00000000 ____D () C:\Windows\pss
2014-11-02 12:25 - 2014-11-02 12:25 - 00002553 _____ () C:\Users\Administrator\AppData\Local\recently-used.xbel
2014-11-02 12:24 - 2014-11-02 12:24 - 00108855 _____ () C:\Users\Administrator\Desktop\water-bill.jpeg
2014-11-02 12:21 - 2014-11-02 12:21 - 00625427 _____ () C:\Users\Administrator\Desktop\water-bill.xcf
2014-10-21 20:33 - 2014-10-21 20:33 - 00172293 _____ () C:\Users\Administrator\Desktop\p7002j@gmail.com

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-12 19:57 - 2013-07-28 18:46 - 00082827 _____ () C:\Windows\setupact.log
2014-11-12 19:57 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-12 19:46 - 2009-07-14 00:13 - 00866920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-12 17:24 - 2009-07-13 23:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-12 17:24 - 2009-07-13 23:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-10 19:18 - 2014-01-11 18:10 - 00000000 ____D () C:\AdwCleaner
2014-11-10 19:18 - 2013-07-12 00:34 - 00260482 _____ () C:\Windows\PFRO.log
2014-11-10 19:18 - 2013-07-11 20:30 - 00000000 ____D () C:\Users\Administrator
2014-11-09 19:53 - 2014-10-07 20:46 - 00000000 ____D () C:\Users\Administrator\Documents\Europe-2014-trip
2014-11-09 13:34 - 2014-03-15 07:39 - 00000000 ____D () C:\Users\Administrator\Desktop\historyofrome
2014-11-09 13:28 - 2014-09-06 14:44 - 00000000 ____D () C:\Program Files (x86)\Fender
2014-11-09 12:26 - 2014-07-07 09:22 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-09 12:25 - 2014-04-01 19:26 - 00002148 _____ () C:\Users\Administrator\Desktop\Rkill.txt
2014-11-06 22:07 - 2014-07-07 09:20 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 22:04 - 2014-01-10 21:55 - 00000000 ____D () C:\Users\Administrator\AppData\Local\SWTORPerf
2014-11-06 22:04 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\IME
2014-11-02 21:53 - 2013-09-07 11:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Audacity
2014-11-02 20:37 - 2014-08-01 19:33 - 00000000 ____D () C:\Users\Administrator\Desktop\Mission_Make_Food_Lovee_Likes
2014-11-02 12:43 - 2014-08-14 15:33 - 00000000 ____D () C:\Users\Administrator\.gimp-2.8
2014-11-02 12:25 - 2014-08-14 15:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\gtk-2.0
2014-11-02 11:31 - 2013-12-29 15:16 - 00000000 ____D () C:\Users\Administrator\Documents\Finance
2014-10-25 12:52 - 2014-07-07 09:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-25 12:52 - 2014-07-07 09:20 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-25 12:52 - 2013-07-30 09:38 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-23 19:32 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-23 16:57 - 2013-07-11 20:28 - 02285128 _____ () C:\Windows\WindowsUpdate.log
2014-10-16 16:37 - 2014-08-30 12:20 - 00000000 ____D () C:\Users\Administrator\Documents\Guitar

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-07 13:04

==================== End Of Log ============================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2014
Ran by Administrator at 2014-11-12 20:01:14
Running from C:\Users\Administrator\Desktop\Virus-removal
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
Audacity 2.0.4 (HKLM-x32\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle)
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 (HKLM-x32\...\{DCDEC776-BADD-48B9-8F9A-DFF513C3D7FA}) (Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft Camera Codec Pack (HKLM\...\{A6A4A258-0A48-4F76-B8F1-61F0514594DD}) (Version: 16.4.1970.0624 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK (HKLM-x32\...\{189AEA94-DAFB-487A-8CEE-F9D3DDE0A748}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (11.1.20627.00) (HKLM-x32\...\{FA804794-2CCB-4301-954F-2C2894698876}) (Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (HKLM-x32\...\{790E9425-8570-493F-9AE7-81AFC9E46930}) (Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31125 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.50.3 - Black Tree Gaming)
Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6813 - Realtek Semiconductor Corp.)
The Elder Scrolls V Skyrim (HKLM-x32\...\{C57EEBB9-168C-4C98-8162-FD19E7F0AE77}_is1) (Version: 1.9.32.0.8 - Bethesda Softworks)
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VLC media player 2.0.8 (HKLM-x32\...\VLC media player) (Version: 2.0.8 - VideoLAN)
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

09-11-2014 18:29:54 Removed IIS 8.0 Express
09-11-2014 18:30:17 Removed Microsoft SQL Server 2012 Data-Tier App Framework
09-11-2014 18:30:37 Removed Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
09-11-2014 18:30:46 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
09-11-2014 18:31:09 Removed Microsoft Web Platform Installer 4.0
09-11-2014 18:31:48 Removed Microsoft Web Deploy 3.0
10-11-2014 00:00:08 Windows Backup

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {7CAA3525-447B-4AEC-B7FA-066C119AB3D3} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

==================== Loaded Modules (whitelisted) =============

2011-03-16 23:07 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-20 14:23 - 2010-10-20 14:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Administrator^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk => C:\Windows\pss\MagicDisc.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Administrator\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: Jing => C:\Program Files (x86)\TechSmith\Jing\Jing.exe
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: OfficeSyncProcess => "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
MSCONFIG\startupreg: SearchProtection => "C:\Users\Administrator\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

========================= Accounts: ==========================

Administrator (S-1-5-21-906571277-2069127330-1933695136-500 - Administrator - Enabled) => C:\Users\Administrator
Guest (S-1-5-21-906571277-2069127330-1933695136-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-906571277-2069127330-1933695136-1008 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Sentinel64
Description: Sentinel64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: Sentinel64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/09/2014 09:22:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 10.0.9200.16686, time stamp: 0x4a5bc6b7
Faulting module name: Flash32_14_0_0_125.ocx, version: 14.0.0.125, time stamp: 0x53862324
Exception code: 0xc0000005
Fault offset: 0x00637965
Faulting process id: 0x62d8
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (11/09/2014 08:29:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 10.0.9200.16686, time stamp: 0x4a5bc6b7
Faulting module name: MSHTML.dll, version: 10.0.9200.16686, time stamp: 0x5205a143
Exception code: 0xc00000fd
Fault offset: 0x0009d37d
Faulting process id: 0x4e48
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (11/09/2014 06:39:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 10.0.9200.16686, time stamp: 0x4a5bc6b7
Faulting module name: MSHTML.dll, version: 10.0.9200.16686, time stamp: 0x5205a143
Exception code: 0xc00000fd
Fault offset: 0x00452d7f
Faulting process id: 0x50e8
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (11/09/2014 05:42:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 10.0.9200.16686, time stamp: 0x4a5bc6b7
Faulting module name: MSHTML.dll, version: 10.0.9200.16686, time stamp: 0x5205a143
Exception code: 0xc00000fd
Fault offset: 0x00472b66
Faulting process id: 0x2720
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (11/09/2014 05:40:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: iexplore.exe, version: 10.0.9200.16686, time stamp: 0x4a5bc6b7
Faulting module name: MSHTML.dll, version: 10.0.9200.16686, time stamp: 0x5205a143
Exception code: 0xc00000fd
Fault offset: 0x00452d7f
Faulting process id: 0x5340
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (11/09/2014 02:17:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: msiexec.exe, version: 1.7.0.0, time stamp: 0x542867a1
Faulting module name: msiexec.exe, version: 1.7.0.0, time stamp: 0x542867a1
Exception code: 0xc0000005
Fault offset: 0x0000e723
Faulting process id: 0x2960
Faulting application start time: 0xmsiexec.exe0
Faulting application path: msiexec.exe1
Faulting module path: msiexec.exe2
Report Id: msiexec.exe3

Error: (11/09/2014 02:17:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: msiexec.exe, version: 1.7.0.0, time stamp: 0x542867a1
Faulting module name: msiexec.exe, version: 1.7.0.0, time stamp: 0x542867a1
Exception code: 0xc0000005
Fault offset: 0x0000e723
Faulting process id: 0x8d8
Faulting application start time: 0xmsiexec.exe0
Faulting application path: msiexec.exe1
Faulting module path: msiexec.exe2
Report Id: msiexec.exe3

Error: (11/09/2014 02:17:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: msiexec.exe, version: 0.0.0.0, time stamp: 0x544e61f4
Faulting module name: msiexec.exe, version: 0.0.0.0, time stamp: 0x544e61f4
Exception code: 0x80000004
Fault offset: 0x00002fee
Faulting process id: 0x1974
Faulting application start time: 0xmsiexec.exe0
Faulting application path: msiexec.exe1
Faulting module path: msiexec.exe2
Report Id: msiexec.exe3

Error: (11/09/2014 02:17:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: msiexec.exe, version: 0.0.0.0, time stamp: 0x544e61f4
Faulting module name: msiexec.exe, version: 0.0.0.0, time stamp: 0x544e61f4
Exception code: 0x80000004
Fault offset: 0x00002fee
Faulting process id: 0x3848
Faulting application start time: 0xmsiexec.exe0
Faulting application path: msiexec.exe1
Faulting module path: msiexec.exe2
Report Id: msiexec.exe3

Error: (11/09/2014 01:29:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: msiexec.exe, version: 1.7.0.0, time stamp: 0x542867a1
Faulting module name: msiexec.exe, version: 1.7.0.0, time stamp: 0x542867a1
Exception code: 0xc0000005
Fault offset: 0x0000e726
Faulting process id: 0x3a88
Faulting application start time: 0xmsiexec.exe0
Faulting application path: msiexec.exe1
Faulting module path: msiexec.exe2
Report Id: msiexec.exe3


System errors:
=============
Error: (11/12/2014 07:57:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Sentinel64 service failed to start due to the following error:
%%20

Error: (11/12/2014 07:48:09 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:
%%1056

Error: (11/12/2014 07:47:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (11/12/2014 07:47:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Media Player Network Sharing Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (11/12/2014 07:47:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Adobe Acrobat Update Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (11/12/2014 07:47:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The AMD External Events Utility service terminated unexpectedly.  It has done this 1 time(s).

Error: (11/12/2014 05:17:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Sentinel64 service failed to start due to the following error:
%%20

Error: (11/11/2014 07:11:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Sentinel64 service failed to start due to the following error:
%%20

Error: (11/10/2014 07:20:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Sentinel64 service failed to start due to the following error:
%%20

Error: (11/10/2014 07:18:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Sentinel64 service failed to start due to the following error:
%%20


Microsoft Office Sessions:
=========================
Error: (11/09/2014 09:22:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe10.0.9200.166864a5bc6b7Flash32_14_0_0_125.ocx14.0.0.12553862324c00000050063796562d801cffc8c9ded5d64C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\SysWOW64\Macromed\Flash\Flash32_14_0_0_125.ocx633138ba-6880-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 08:29:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe10.0.9200.166864a5bc6b7MSHTML.dll10.0.9200.166865205a143c00000fd0009d37d4e4801cffc84bebd897eC:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dllf9fd49cd-6878-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 06:39:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe10.0.9200.166864a5bc6b7MSHTML.dll10.0.9200.166865205a143c00000fd00452d7f50e801cffc76622be614C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dllb2b84a21-6869-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 05:42:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe10.0.9200.166864a5bc6b7MSHTML.dll10.0.9200.166865205a143c00000fd00472b66272001cffc6deeb49cbdC:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dll9ff7dbd3-6861-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 05:40:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe10.0.9200.166864a5bc6b7MSHTML.dll10.0.9200.166865205a143c00000fd00452d7f534001cffc6de5e8d681C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dll69652924-6861-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 02:17:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: msiexec.exe1.7.0.0542867a1msiexec.exe1.7.0.0542867a1c00000050000e723296001cffc51ce9935dcC:\Windows\Installer\{E2C4C676-8ECF-4B30-ADFC-F6DB62761E7B}\msiexec.exeC:\Windows\Installer\{E2C4C676-8ECF-4B30-ADFC-F6DB62761E7B}\msiexec.exe0c46ce47-6845-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 02:17:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: msiexec.exe1.7.0.0542867a1msiexec.exe1.7.0.0542867a1c00000050000e7238d801cffc51ce4ff792C:\Windows\Installer\{99847ECF-1D8A-46FC-93F1-8536FF12DFE3}\msiexec.exeC:\Windows\Installer\{99847ECF-1D8A-46FC-93F1-8536FF12DFE3}\msiexec.exe0bfdf1a6-6845-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 02:17:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: msiexec.exe0.0.0.0544e61f4msiexec.exe0.0.0.0544e61f48000000400002fee197401cffc51cb8b2eeaC:\Windows\Installer\{8437E549-C33C-43CB-9B02-05BD112CF5B5}\msiexec.exeC:\Windows\Installer\{8437E549-C33C-43CB-9B02-05BD112CF5B5}\msiexec.exe09fa6aee-6845-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 02:17:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: msiexec.exe0.0.0.0544e61f4msiexec.exe0.0.0.0544e61f48000000400002fee384801cffc51cc45cd9bC:\Windows\Installer\{AB0C4C7D-2314-44BD-9BDC-1016FDA2D698}\msiexec.exeC:\Windows\Installer\{AB0C4C7D-2314-44BD-9BDC-1016FDA2D698}\msiexec.exe09fa43de-6845-11e4-b1b0-d43d7eb13fce

Error: (11/09/2014 01:29:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: msiexec.exe1.7.0.0542867a1msiexec.exe1.7.0.0542867a1c00000050000e7263a8801cffc4b0d18b273C:\Windows\Installer\{659D9BC2-AC6E-417F-B937-797A48B80A92}\msiexec.exeC:\Windows\Installer\{659D9BC2-AC6E-417F-B937-797A48B80A92}\msiexec.exe4ac79eb4-683e-11e4-b1b0-d43d7eb13fce


==================== Memory info ===========================

Processor: Intel® Core™ i5-3570K CPU @ 3.40GHz
Percentage of memory in use: 28%
Total physical RAM: 8139.38 MB
Available physical RAM: 5796.99 MB
Total Pagefile: 16276.93 MB
Available Pagefile: 13646.97 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:29.76 GB) NTFS
Drive g: (My Passport) (Fixed) (Total:1862.98 GB) (Free:959.02 GB) NTFS
Drive h: () (Removable) (Total:1.89 GB) (Free:1.5 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 8FE6CCFB)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 1.9 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 9D800294)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================


Edited by Adriannzinha, 12 November 2014 - 08:46 PM.


#8 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:05 PM

Posted 13 November 2014 - 11:00 AM

Your note sounds more urgent than before. Does my system appear to have a new infection or perhaps a more severe variant of this Poweliks?


No. :)

Let's do a final check up:

Step 1


Don't remove on your own anything that Hitman Pro detects!
This scanner, as it is a really good for checking, has been known for deleting files instead of curing them, which in some cases may render the machine unbootable.
Any removals will be done manually after careful analysis of the scan results!


Please download hitmanpro_32.pngHitmanPro 32-bit / HitmanPro 64-bit by SurfRight and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
  • Right-click onhitmanpro.pngicon and select admin.PNGRun as Administrator to start the tool.
  • If the program won't run please run it while holding down the left CTRL key until it's loaded!
  • Click on the Next button (1). You must agree with the terms of EULA (2 - if asked).
  • Check the box beside "No, I only want to perform a one-time scan to check this computer" and click on the Next button. (3)
  • The program will start to scan the computer. It would only take several minutes.
  • When the scan is done click on Save Log (4) and close HitmanPro! (5)
  • Copy and paste the content of the log file in your next reply.
hitman.gif


Step 2

Please downloadesetlogo.pngOnline Scanner and save it to your Desktop.
  • Disable the realtime-protection of your antivirus and anti-malware programs because they might interfere with the scan.
  • Start installer.pngwith administartor privileges.
  • Select the option Yes, I accept the Terms of Use and click on Start.
  • Choose the following settings:
settings.png
  • Click on Start. The virus signature database will begin to download. This may take some time.
  • When completed the Online Scan will begin automatically.
    Note: This scan might take a long time! Please be patient.
  • When completed select Uninstall application on close if you so wish, but make sure you copy the logfile first!
  • Now click on Finish
  • A log filelog.pngis created at logpath.png
    Copy and paste the content of this log file in your next reply.
Note: Do not forget to re-enable your antivirus application after running the above scan!
eset.gif

lesestoff.png

Can you please tell me which problems still persist now?
How is the computer running

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#9 Adriannzinha

Adriannzinha
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 14 November 2014 - 07:01 AM

Here are the logs as you requested. I must say you were correct - these scanners found many, many items. For reference, the "G" Drive is an external drive attached to the computer we are working with. Also as far as I can see, it seems the scanners detected some malware that is listed in the quarantine by programs we have run here together such as AdwCleaner.

 

 

Hitman Pro Log:

 

HitmanPro 3.7.9.232
www.hitmanpro.com

   Computer name . . . . : ADRIANNZINHA
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : ADRIANNZINHA\Administrator
   UAC . . . . . . . . . : Disabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2014-11-13 17:17:12
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 50s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 3
   Traces  . . . . . . . : 27

   Objects scanned . . . : 2,186,348
   Files scanned . . . . : 44,395
   Remnants scanned  . . : 913,212 files / 1,228,741 keys

Malware _____________________________________________________________________

   C:\Users\Administrator\AppData\Roaming\hcbmb.dll
      Size . . . . . . . : 50,688 bytes
      Age  . . . . . . . : 202.0 days (2014-04-25 18:00:19)
      Entropy  . . . . . : 6.1
      SHA-256  . . . . . : F2080246A737D5DD361D482A696A3091A7AB0AECEB2A236BB55F3F86537B5F92
      Product  . . . . . : Internet Information Services
      Publisher  . . . . : Microsoft Corporation
      Description  . . . : IIS Admin Com API Proxy dll
      Version  . . . . . : 7.5.7600.16385
      Copyright  . . . . : © Microsoft Corporation. All rights reserved.
      LanguageID . . . . : 1033
    > Bitdefender  . . . : Trojan.Patched.IT
    > Kaspersky  . . . . : Trojan.Win32.Rozena.rpcs
      Fuzzy  . . . . . . : 100.0

   C:\Users\Administrator\AppData\Roaming\qhcdldx.dll
      Size . . . . . . . : 24,064 bytes
      Age  . . . . . . . : 202.0 days (2014-04-25 18:00:19)
      Entropy  . . . . . : 6.0
      SHA-256  . . . . . : 51B28503EDC2089CAD0C976C834692F5B1A5D08F3E080DBCE38FDEC2485AFA67
      Product  . . . . . : Microsoft® Windows® Operating System
      Publisher  . . . . : Microsoft Corporation
      Description  . . . : API Tracing Manifest Read Library
      Version  . . . . . : 6.1.7600.16385
      Copyright  . . . . : © Microsoft Corporation. All rights reserved.
      LanguageID . . . . : 1033
    > Bitdefender  . . . : Trojan.Patched.IT
    > Kaspersky  . . . . : Trojan.Win32.Rozena.rpcs
      Fuzzy  . . . . . . : 100.0

   C:\windows\installer\{0bb29521-c091-4fcf-8dfb-803dd8210b0a}\msiexec.exe
      Size . . . . . . . : 325,166 bytes
      Age  . . . . . . . : 4.2 days (2014-11-09 13:28:52)
      Entropy  . . . . . : 6.5
      SHA-256  . . . . . : 4C719ABAA314A4564B06DD4CEC01D01B6CF1089F9BA2DC409BF9C83CBA3C350D
    > Bitdefender  . . . : Trojan.GenericKDZ.26333
      Fuzzy  . . . . . . : 133.0
      References
         HKU\S-1-5-21-906571277-2069127330-1933695136-500\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\windows\installer\{0bb29521-c091-4fcf-8dfb-803dd8210b0a}\msiexec.exe
      Forensic Cluster
         -3.3s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{60F0E926-2571-4266-9273-6CED98452164}
         -3.3s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{60F0E926-2571-4266-9273-6CED98452164}
         -0.0s C:\Windows\Installer\{1AAABA17-77E3-4F1D-B11F-1F9CF62C0E57}\
         -0.0s C:\Windows\Installer\{1AAABA17-77E3-4F1D-B11F-1F9CF62C0E57}\msiexec.exe
          0.0s C:\Windows\Installer\{0BB29521-C091-4FCF-8DFB-803DD8210B0A}\
          0.0s C:\Windows\Installer\{0BB29521-C091-4FCF-8DFB-803DD8210B0A}\msiexec.exe
          0.0s C:\Windows\Installer\{E00AACB5-D016-45A7-86D8-1618ECD20006}\
          0.0s C:\Windows\Installer\{E00AACB5-D016-45A7-86D8-1618ECD20006}\msiexec.exe
          0.0s C:\Windows\Installer\{E00AACB5-D016-45A7-86D8-1618ECD20006}\msiexec.exe
          0.0s C:\Windows\Installer\{0AA57B84-1CC1-4446-80CA-95FCBF7C06DF}\
          0.0s C:\Windows\Installer\{0AA57B84-1CC1-4446-80CA-95FCBF7C06DF}\
          0.1s C:\Windows\Installer\{37B3C498-FFAB-4A59-B668-6897F2142B39}\
          0.1s C:\Windows\Installer\{37B3C498-FFAB-4A59-B668-6897F2142B39}\msiexec.exe
          0.1s C:\Windows\Installer\{37B3C498-FFAB-4A59-B668-6897F2142B39}\msiexec.exe
          0.1s C:\Windows\Installer\{A111E9DE-35C7-4394-847F-A308EE422059}\
          0.1s C:\Windows\Installer\{A111E9DE-35C7-4394-847F-A308EE422059}\msiexec.exe
          0.1s C:\Windows\Installer\{F337DD98-73E9-43B1-A675-409775600E6E}\
          0.1s C:\Windows\Installer\{F337DD98-73E9-43B1-A675-409775600E6E}\
          0.1s C:\Windows\Installer\{F337DD98-73E9-43B1-A675-409775600E6E}\msiexec.exe
          0.1s C:\Windows\Installer\{F337DD98-73E9-43B1-A675-409775600E6E}\msiexec.exe
          0.1s C:\Windows\Installer\{3EB09C17-9AD4-4C70-90B0-A8572FA7ED6E}\
          0.1s C:\Windows\Installer\{3EB09C17-9AD4-4C70-90B0-A8572FA7ED6E}\
          0.1s C:\Windows\Installer\{3EB09C17-9AD4-4C70-90B0-A8572FA7ED6E}\
          0.1s C:\Windows\Installer\{F63801F2-C06E-45AC-89F7-24AD387A9E26}\
          0.1s C:\Windows\Installer\{F63801F2-C06E-45AC-89F7-24AD387A9E26}\
          0.1s C:\Windows\Installer\{659D9BC2-AC6E-417F-B937-797A48B80A92}\
          0.1s C:\Windows\Installer\{659D9BC2-AC6E-417F-B937-797A48B80A92}\msiexec.exe
          0.2s C:\FRST\Quarantine\C\Users\Administrator\AppData\Local\acillao.dll.xBAD
          0.2s C:\FRST\Quarantine\C\Users\Administrator\AppData\Local\acillao.dll.xBAD


Suspicious files ____________________________________________________________

   C:\Users\Administrator\Desktop\FRST-OlderVersion\FRST64.exe
      Size . . . . . . . : 2,115,584 bytes
      Age  . . . . . . . : 4.2 days (2014-11-09 13:10:22)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : B5A49DD5675F9E2E6380D915FA0C5A990D6278B237663BC84774AA4AEB8AAD0F
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

   C:\Users\Administrator\Desktop\Virus-removal\FRST64.exe
      Size . . . . . . . : 2,116,096 bytes
      Age  . . . . . . . : 4.2 days (2014-11-09 13:10:22)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : 5688C72E8362E4813E3970E44D64B00A540BED1A12B7615E2EE9B3C0206D0BB2
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      References
         HKU\S-1-5-21-906571277-2069127330-1933695136-500\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Administrator\Desktop\Virus-removal\FRST64.exe

   C:\Users\Administrator\Downloads\FRST64.exe
      Size . . . . . . . : 2,115,584 bytes
      Age  . . . . . . . : 4.2 days (2014-11-09 13:07:49)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : B5A49DD5675F9E2E6380D915FA0C5A990D6278B237663BC84774AA4AEB8AAD0F
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
          0.0s C:\Users\Administrator\Downloads\FRST64.exe
          1.5s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{73810F98-71E7-4D6D-8B0A-36C1F9EA9551}


Cookies _____________________________________________________________________

   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\1BL9FQ4H.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\43JDW11L.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\8T5DQDYR.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\9VNHPEWP.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\AD6T1XGC.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\APIF7YBH.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\D89MR0SX.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\DENQYLB7.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\FWTVFZIW.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\HTW0ZBW4.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\IHI5UQFB.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\LQGR55DN.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\LQWC64XL.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\N7MGGUVZ.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\PH0ZG09J.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\PSO1OS54.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\Q20YL8XQ.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\REOPC833.txt
   C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies\YIOV917I.txt

**************************************

 

ESET log

 

C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\DaemonProcess.exe.vir    a variant of Win32/Mobogenie.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\Mobogenie.exe.vir    a variant of Win32/Mobogenie.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\MUServer.apk.vir    a variant of Android/Mobserv.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\New_UpdateMoboGenie.exe.vir    a variant of Win32/Mobogenie.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\UpdateMoboGenie.exe.vir    a variant of Win32/Mobogenie.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir    a variant of Win32/Mobogenie.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir    a variant of Win32/Mobogenie.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MUServer.apk.vir    a variant of Android/Mobserv.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir    a variant of Win32/Mobogenie.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Roaming\Search Protection\Uninstall.exe.vir    a variant of Win32/Toolbar.Widgi potentially unwanted application
C:\Documents and Settings\Administrator\AppData\Roaming\hcbmb.dll    Win32/Viknok.M trojan
C:\Documents and Settings\Administrator\AppData\Roaming\qhcdldx.dll    Win32/Viknok.M trojan
C:\Documents and Settings\Administrator\Downloads\cbsidlm-cbsi145-UltraISO_Premium-SEO-10177302.exe    a variant of Win32/CNETInstaller.B potentially unwanted application
C:\Documents and Settings\Administrator\Downloads\cbsidlm-cbsi183-Ashampoo_Burning_Studio_Free-SEO-10776287.exe    a variant of Win32/CNETInstaller.B potentially unwanted application
C:\Documents and Settings\Administrator\Downloads\WinZip175.exe    a variant of Win32/OpenInstall potentially unwanted application
C:\FRST\Quarantine\C\ProgramData\NiyimTosew\NiyimTosew.dat    a variant of Win32/Kryptik.CPWX trojan
C:\FRST\Quarantine\C\ProgramData\ZanyaBduwf\ZanyaBduwf.dat    a variant of Win32/Kryptik.CPWX trojan
C:\FRST\Quarantine\C\Users\Administrator\AppData\Local\acillao.dll.xBAD    a variant of Win32/TrojanProxy.Agent.NYP trojan
C:\temp\InstallFilter64.msi    multiple threats
C:\temp\t.msi    multiple threats
C:\Users\Administrator\AppData\Roaming\hcbmb.dll    Win32/Viknok.M trojan
C:\Users\Administrator\AppData\Roaming\qhcdldx.dll    Win32/Viknok.M trojan
C:\Users\Administrator\Downloads\cbsidlm-cbsi145-UltraISO_Premium-SEO-10177302.exe    a variant of Win32/CNETInstaller.B potentially unwanted application
C:\Users\Administrator\Downloads\cbsidlm-cbsi183-Ashampoo_Burning_Studio_Free-SEO-10776287.exe    a variant of Win32/CNETInstaller.B potentially unwanted application
C:\Users\Administrator\Downloads\WinZip175.exe    a variant of Win32/OpenInstall potentially unwanted application
C:\Windows\Installer\b8ad6.msi    multiple threats
C:\Windows\Installer\c3113.msi    multiple threats
C:\Windows\Installer\{0BB29521-C091-4FCF-8DFB-803DD8210B0A}\msiexec.exe    a variant of Win32/Injector.BPEA trojan
C:\Windows\Installer\{1AAABA17-77E3-4F1D-B11F-1F9CF62C0E57}\msiexec.exe    a variant of Win32/Injector.BPBX trojan
C:\Windows\Installer\{37B3C498-FFAB-4A59-B668-6897F2142B39}\msiexec.exe    a variant of Win32/Injector.BPBZ trojan
C:\Windows\Installer\{659D9BC2-AC6E-417F-B937-797A48B80A92}\msiexec.exe    a variant of Win32/Injector.BPBZ trojan
C:\Windows\Installer\{8437E549-C33C-43CB-9B02-05BD112CF5B5}\msiexec.exe    a variant of Win32/Injector.BPBX trojan
C:\Windows\Installer\{99847ECF-1D8A-46FC-93F1-8536FF12DFE3}\msiexec.exe    a variant of Win32/Injector.BPBZ trojan
C:\Windows\Installer\{A111E9DE-35C7-4394-847F-A308EE422059}\msiexec.exe    a variant of Win32/Injector.BPBX trojan
C:\Windows\Installer\{AB0C4C7D-2314-44BD-9BDC-1016FDA2D698}\msiexec.exe    a variant of Win32/Injector.BPBX trojan
C:\Windows\Installer\{E00AACB5-D016-45A7-86D8-1618ECD20006}\msiexec.exe    a variant of Win32/Kryptik.CQEC trojan
C:\Windows\Installer\{E2C4C676-8ECF-4B30-ADFC-F6DB62761E7B}\msiexec.exe    a variant of Win32/Injector.BPBZ trojan
C:\Windows\Installer\{F337DD98-73E9-43B1-A675-409775600E6E}\msiexec.exe    a variant of Win32/Injector.BPEA trojan
G:\ALESSANDRA\Backup Set 2013-09-14 092746\Backup Files 2013-09-14 092746\Backup files 15.zip    Win32/JoyDownloader.D potentially unwanted application
G:\ALESSANDRA\Backup Set 2013-09-14 092746\Backup Files 2013-09-14 092746\Backup files 9.zip    multiple threats
G:\ALESSANDRA\Backup Set 2013-09-14 092746\Backup Files 2013-10-13 190000\Backup files 1.zip    multiple threats
G:\ALESSANDRA\Backup Set 2013-09-14 092746\Backup Files 2013-10-20 190000\Backup files 1.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2013-09-14 092746\Backup Files 2013-10-20 190000\Backup files 8.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2014-01-05 190000\Backup Files 2014-01-05 190000\Backup files 11.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-01-05 190000\Backup Files 2014-01-05 190000\Backup files 12.zip    a variant of Win32/Toolbar.Widgi potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-01-05 190000\Backup Files 2014-01-05 190000\Backup files 26.zip    a variant of Win32/OpenInstall potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-01-05 190000\Backup Files 2014-01-05 190000\Backup files 38.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2014-01-05 190000\Backup Files 2014-01-05 190000\Backup files 6.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2014-01-05 190000\Backup Files 2014-01-12 190000\Backup files 1.zip    a variant of Win32/Mobogenie.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-01-05 190000\Backup Files 2014-01-12 190000\Backup files 4.zip    a variant of Win32/CNETInstaller.B potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-01-26 190000\Backup Files 2014-01-26 190000\Backup files 1.zip    a variant of Win32/Mobogenie.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-01-26 190000\Backup Files 2014-01-26 190000\Backup files 11.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-01-26 190000\Backup Files 2014-01-26 190000\Backup files 181.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2014-01-26 190000\Backup Files 2014-01-26 190000\Backup files 22.zip    a variant of Win32/CNETInstaller.B potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-01-26 190000\Backup Files 2014-01-26 190000\Backup files 23.zip    a variant of Win32/OpenInstall potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-02-18 010105\Backup Files 2014-02-18 010105\Backup files 1.zip    a variant of Win32/Mobogenie.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-02-18 010105\Backup Files 2014-02-18 010105\Backup files 11.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-02-18 010105\Backup Files 2014-02-18 010105\Backup files 22.zip    a variant of Win32/CNETInstaller.B potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-02-18 010105\Backup Files 2014-02-18 010105\Backup files 23.zip    a variant of Win32/OpenInstall potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-02-18 010105\Backup Files 2014-02-23 190000\Backup files 70.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2014-02-18 010105\Backup Files 2014-03-02 190000\Backup files 3.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-03-09 190000\Backup Files 2014-03-09 190000\Backup files 1.zip    a variant of Win32/Mobogenie.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-03-09 190000\Backup Files 2014-03-09 190000\Backup files 10.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-03-09 190000\Backup Files 2014-03-09 190000\Backup files 11.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-03-09 190000\Backup Files 2014-03-09 190000\Backup files 184.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2014-03-09 190000\Backup Files 2014-03-09 190000\Backup files 22.zip    a variant of Win32/CNETInstaller.B potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-03-09 190000\Backup Files 2014-03-09 190000\Backup files 23.zip    a variant of Win32/OpenInstall potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-04-06 190000\Backup Files 2014-04-06 190000\Backup files 1.zip    a variant of Win32/Mobogenie.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-04-06 190000\Backup Files 2014-04-06 190000\Backup files 10.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-04-06 190000\Backup Files 2014-04-06 190000\Backup files 11.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-04-06 190000\Backup Files 2014-04-06 190000\Backup files 184.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2014-04-06 190000\Backup Files 2014-04-06 190000\Backup files 22.zip    a variant of Win32/CNETInstaller.B potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-04-06 190000\Backup Files 2014-04-06 190000\Backup files 23.zip    a variant of Win32/OpenInstall potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-04-20 190000\Backup Files 2014-04-20 190000\Backup files 1.zip    a variant of Win32/Mobogenie.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-04-20 190000\Backup Files 2014-04-20 190000\Backup files 20.zip    a variant of Win32/CNETInstaller.B potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-04-20 190000\Backup Files 2014-04-20 190000\Backup files 22.zip    a variant of Win32/OpenInstall potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-04-20 190000\Backup Files 2014-04-20 190000\Backup files 35.zip    a variant of Win32/HiddenStart.B potentially unsafe application
G:\ALESSANDRA\Backup Set 2014-04-20 190000\Backup Files 2014-04-20 190000\Backup files 7.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-04-20 190000\Backup Files 2014-04-27 190000\Backup files 1.zip    Win32/Viknok.M trojan
G:\ALESSANDRA\Backup Set 2014-04-20 190000\Backup Files 2014-07-20 190001\Backup files 1.zip    a variant of Java/Obfus.BU trojan
G:\ALESSANDRA\Backup Set 2014-04-20 190000\Backup Files 2014-07-27 190000\Backup files 1.zip    a variant of Java/Obfus.BU trojan
G:\ALESSANDRA\Backup Set 2014-08-03 190000\Backup Files 2014-08-03 190000\Backup files 1.zip    a variant of Win32/Mobogenie.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-08-03 190000\Backup Files 2014-08-03 190000\Backup files 21.zip    a variant of Win32/CNETInstaller.B potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-08-03 190000\Backup Files 2014-08-03 190000\Backup files 22.zip    a variant of Win32/OpenInstall potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-08-03 190000\Backup Files 2014-08-03 190000\Backup files 7.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-08-03 190000\Backup Files 2014-08-17 190000\Backup files 1.zip    a variant of Win32/InstallIQ.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-11-09 190001\Backup Files 2014-11-09 190001\Backup files 1.zip    a variant of Win32/Mobogenie.A potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-11-09 190001\Backup Files 2014-11-09 190001\Backup files 22.zip    a variant of Win32/CNETInstaller.B potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-11-09 190001\Backup Files 2014-11-09 190001\Backup files 23.zip    a variant of Win32/OpenInstall potentially unwanted application
G:\ALESSANDRA\Backup Set 2014-11-09 190001\Backup Files 2014-11-09 190001\Backup files 7.zip    multiple threats
G:\ALESSANDRA\Backup Set 2014-11-09 190001\Backup Files 2014-11-09 190001\Backup files 8.zip    multiple threats
G:\Alessandra-Stuff\NES-emulator\metdeluxe.ips.exe    Win32/HackTool.Patcher.BN potentially unsafe application
G:\Alessandra-Stuff\NES-emulator\Metroid Deluxe(2).zip    Win32/HackTool.Patcher.BN potentially unsafe application
G:\Alessandra-Stuff\NES-emulator\Metroid Deluxe.zip    Win32/HackTool.Patcher.BN potentially unsafe application
G:\Alessandra-Stuff\old-computer\Downloads\ReimageRepairNU.exe    Win32/Toolbar.Babylon.T potentially unwanted application
G:\Memory Card Backup\Downloads\PDFReaderSetup.exe    a variant of Win32/InstallCore.E potentially unwanted application

 

 



#10 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:05 PM

Posted 14 November 2014 - 02:26 PM

Hi,
you should delete your backup-files after we have finished the cleanup and create new one.

Step 1

frst.pngfrstfix.png
Please download the attached fixlist txt.gif and save it in the same directory as FRST.
  • Start FRST with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) pops up and is saved to the same location the tool was run from.
    Please copy and paste its contents in your next reply.
Attached File  fixlist.txt   1.23KB   7 downloads

After the Reboot:

Step 2

frst.pngfrstscan.png

Start FRST with administator privileges.
  • Press the Scan button.
  • When finished, FRST will produce a log (FRST.txt) in the same directory the tool was run from.
    Please copy and paste the log in your next reply.
lesestoff.png

Can you please tell me which problems still persist now?
How is the computer running?

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#11 Adriannzinha

Adriannzinha
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 14 November 2014 - 06:50 PM

Hello,

 

I will definitely do as you suggest in deleting the old backup. Once you feel my system is OK then I will create a new backup.

 

So far the computer seems to be running fine. It feels better than when I first posted here about 1 week ago with the Poweliks virus and so many COM Surrogate processes running all of the time.

 

Here is the log you requested after I first ran the fixit, then rebooted, and then performed the FRST scan.

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2014
Ran by Administrator (administrator) on ADRIANNZINHA on 14-11-2014 18:43:18
Running from C:\Users\Administrator\Desktop\Virus-removal
Loaded Profile: Administrator (Available profiles: Administrator & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6962400 2012-12-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKU\S-1-5-21-906571277-2069127330-1933695136-500\...\MountPoints2: {78dd3943-f950-11e2-90b7-d43d7eb13fce} - F:\Skyrim_setup.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.economicpolicyjournal.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x10E1760AB17ECE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://elliottwave5pointzeroreboot.blogspot.com/
http://www.bleepingcomputer.com/forums/t/555406/powerlik-victim-requesting-help/
http://www.nws.noaa.gov/climate/index.php?wfo=tbw
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {EDBD7A8E-B615-4B67-B2BD-1656CF5F74ED} URL = https://duckduckgo.com/?q={searchTerms}
SearchScopes: HKCU - {EDBD7A8E-B615-4B67-B2BD-1656CF5F74ED} URL = https://duckduckgo.com/?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://investools-events.webex.com/client/WBXclient-T28L10NSP12-16655/nbr/ieatgpc1.cab
Tcpip\Parameters: [DhcpNameServer] 65.32.5.111 65.32.5.112

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/thinkorswim -> C:\Program Files (x86)\thinkorswim\npthinkorswim.dll No File
FF Plugin HKU\S-1-5-21-906571277-2069127330-1933695136-500: tdameritrade.com/tossc -> C:\Program Files (x86)\thinkorswim\nptossc.dll No File

Chrome:
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2009-07-13] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2014-11-13] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-18] ()
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.)
S3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [58664 2008-07-11] (SafeNet, Inc.)
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-13 17:21 - 2014-11-13 17:21 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-11-13 17:19 - 2014-11-13 17:19 - 02347384 _____ (ESET) C:\Users\Administrator\Desktop\esetsmartinstaller_enu.exe
2014-11-13 17:17 - 2014-11-13 17:17 - 00043664 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-11-13 17:15 - 2014-11-13 17:16 - 11222744 _____ (SurfRight B.V.) C:\Users\Administrator\Desktop\HitmanPro_x64.exe
2014-11-13 17:14 - 2014-11-13 17:17 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-11-13 17:14 - 2014-11-13 17:14 - 10284408 _____ (SurfRight B.V.) C:\Users\Administrator\Desktop\HitmanPro.exe
2014-11-12 19:46 - 2014-11-14 18:43 - 00000000 ____D () C:\Users\Administrator\Desktop\Virus-removal
2014-11-10 19:57 - 2014-11-10 19:57 - 00000000 ____D () C:\Users\Administrator\Documents\security-wifi
2014-11-10 19:21 - 2014-11-10 19:21 - 00000000 ____D () C:\Users\Administrator\Desktop\FRST-OlderVersion
2014-11-10 19:20 - 2014-11-10 19:20 - 00008366 _____ () C:\Users\Administrator\Desktop\AdwCleaner[S5].txt
2014-11-10 19:08 - 2014-11-10 19:08 - 02140160 _____ () C:\Users\Administrator\Desktop\AdwCleaner.exe
2014-11-10 19:03 - 2014-11-10 19:03 - 00801560 _____ () C:\Users\Administrator\Desktop\ESETPoweliksCleaner.exe_20141110.190316.5992.log
2014-11-10 19:02 - 2014-11-10 19:02 - 00186568 _____ (ESET) C:\Users\Administrator\Desktop\ESETPoweliksCleaner.exe
2014-11-09 13:11 - 2014-11-10 19:22 - 00016873 _____ () C:\Users\Administrator\Desktop\FRST.txt
2014-11-09 13:11 - 2014-11-09 13:11 - 00026366 _____ () C:\Users\Administrator\Desktop\Addition.txt
2014-11-09 13:09 - 2014-11-14 18:43 - 00000000 ____D () C:\FRST
2014-11-09 13:07 - 2014-11-09 13:09 - 02115584 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-11-09 12:24 - 2014-11-09 12:24 - 00000000 ____D () C:\Users\Administrator\Desktop\rkill
2014-11-06 21:57 - 2014-11-06 21:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Downloads\rkill.exe
2014-11-06 21:57 - 2014-11-06 21:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Administrator\Desktop\rkill.exe
2014-11-06 21:56 - 2014-11-07 12:47 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-11-06 21:55 - 2014-11-06 22:59 - 00000000 ____D () C:\Users\Administrator\Desktop\mbar
2014-11-06 21:55 - 2014-11-06 21:55 - 14349744 _____ (Malwarebytes Corp.) C:\Users\Administrator\Desktop\mbar-1.07.0.1012.exe
2014-11-06 21:52 - 2014-11-06 21:52 - 00032707 _____ () C:\Users\Administrator\Desktop\Result.txt
2014-11-06 21:51 - 2014-11-06 21:51 - 00002681 _____ () C:\Users\Administrator\Desktop\FSS.txt
2014-11-06 21:50 - 2014-11-06 21:49 - 00854448 _____ () C:\Users\Administrator\Desktop\SecurityCheck.exe
2014-11-06 21:49 - 2014-11-06 21:49 - 00854448 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-11-06 21:46 - 2014-11-06 21:46 - 00000000 ____D () C:\Windows\pss
2014-11-02 12:25 - 2014-11-02 12:25 - 00002553 _____ () C:\Users\Administrator\AppData\Local\recently-used.xbel
2014-11-02 12:24 - 2014-11-02 12:24 - 00108855 _____ () C:\Users\Administrator\Desktop\water-bill.jpeg
2014-11-02 12:21 - 2014-11-02 12:21 - 00625427 _____ () C:\Users\Administrator\Desktop\water-bill.xcf
2014-10-21 20:33 - 2014-10-21 20:33 - 00172293 _____ () C:\Users\Administrator\Desktop\p7002j@gmail.com

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-14 18:42 - 2013-07-28 18:46 - 00083051 _____ () C:\Windows\setupact.log
2014-11-14 18:42 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-14 18:41 - 2014-02-26 07:19 - 00000000 ____D () C:\temp
2014-11-14 18:40 - 2009-07-14 00:13 - 00866920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-14 17:29 - 2009-07-13 23:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-14 17:29 - 2009-07-13 23:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-14 05:29 - 2013-07-11 20:28 - 02286415 _____ () C:\Windows\WindowsUpdate.log
2014-11-10 19:18 - 2014-01-11 18:10 - 00000000 ____D () C:\AdwCleaner
2014-11-10 19:18 - 2013-07-12 00:34 - 00260482 _____ () C:\Windows\PFRO.log
2014-11-10 19:18 - 2013-07-11 20:30 - 00000000 ____D () C:\Users\Administrator
2014-11-09 19:53 - 2014-10-07 20:46 - 00000000 ____D () C:\Users\Administrator\Documents\Europe-2014-trip
2014-11-09 13:34 - 2014-03-15 07:39 - 00000000 ____D () C:\Users\Administrator\Desktop\historyofrome
2014-11-09 13:28 - 2014-09-06 14:44 - 00000000 ____D () C:\Program Files (x86)\Fender
2014-11-09 12:26 - 2014-07-07 09:22 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-09 12:25 - 2014-04-01 19:26 - 00002148 _____ () C:\Users\Administrator\Desktop\Rkill.txt
2014-11-06 22:07 - 2014-07-07 09:20 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 22:04 - 2014-01-10 21:55 - 00000000 ____D () C:\Users\Administrator\AppData\Local\SWTORPerf
2014-11-06 22:04 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\IME
2014-11-02 21:53 - 2013-09-07 11:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Audacity
2014-11-02 12:43 - 2014-08-14 15:33 - 00000000 ____D () C:\Users\Administrator\.gimp-2.8
2014-11-02 12:25 - 2014-08-14 15:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\gtk-2.0
2014-11-02 11:31 - 2013-12-29 15:16 - 00000000 ____D () C:\Users\Administrator\Documents\Finance
2014-10-25 12:52 - 2014-07-07 09:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-25 12:52 - 2014-07-07 09:20 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-25 12:52 - 2013-07-30 09:38 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-23 19:32 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-16 16:37 - 2014-08-30 12:20 - 00000000 ____D () C:\Users\Administrator\Documents\Guitar

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-07 13:04

==================== End Of Log ============================



#12 Adriannzinha

Adriannzinha
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 14 November 2014 - 11:00 PM

Hopefully I'm not posting too much while awaiting your feedback and observations.

In using the computer more I notice 2 things in particular:

It seems slow specifically while on YouTube. It appears to hesitate or freeze momentarily. Now I realize many things could cause this which are nor related to malware, such as plugins, flash, etc

The other thing which is quite obvious is how closely advertisements seem to track the sites I visit. For example, if I browse a site such as Amazon to look for a motherboard or processor chip, then when I visit other websites, I see many ads showing the same products I was seeing at Amazon. These are not popup ads but regular in page advertisements.

Probably this is normal with advertiser's today and tracking cookies but I thought to mention it in case you believed it was due to malware.

#13 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:05 PM

Posted 15 November 2014 - 11:05 AM

Hi,

what about the Fixlog.txt? :)


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#14 Adriannzinha

Adriannzinha
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:05 PM

Posted 15 November 2014 - 03:48 PM

My apologies for not including that file. I have pasted it below for your reference.

 

Regarding the performance of the system: I am observing occasional instances where things freeze for a few seconds. I am not sure if this is anything to do with malware or if the system even still has malware.

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-11-2014
Ran by Administrator at 2014-11-15 15:44:46 Run:3
Running from C:\Users\Administrator\Desktop\Virus-removal
Loaded Profile: Administrator (Available profiles: Administrator & Classic .NET AppPool & DefaultAppPool)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CloseProcesses:
C:\temp\InstallFilter64.msi
C:\temp\t.msi  
C:\Users\Administrator\AppData\Roaming\hcbmb.dll   
C:\Users\Administrator\AppData\Roaming\qhcdldx.dll  
C:\Users\Administrator\Downloads\cbsidlm-cbsi145-UltraISO_Premium-SEO-10177302.exe    
C:\Users\Administrator\Downloads\cbsidlm-cbsi183-Ashampoo_Burning_Studio_Free-SEO-10776287.exe    
C:\Users\Administrator\Downloads\WinZip175.exe  
C:\Windows\Installer\b8ad6.msi  
C:\Windows\Installer\c3113.msi
C:\Windows\Installer\{0BB29521-C091-4FCF-8DFB-803DD8210B0A}
C:\Windows\Installer\{1AAABA17-77E3-4F1D-B11F-1F9CF62C0E57}
C:\Windows\Installer\{37B3C498-FFAB-4A59-B668-6897F2142B39}
C:\Windows\Installer\{659D9BC2-AC6E-417F-B937-797A48B80A92}
C:\Windows\Installer\{8437E549-C33C-43CB-9B02-05BD112CF5B5}
C:\Windows\Installer\{99847ECF-1D8A-46FC-93F1-8536FF12DFE3}
C:\Windows\Installer\{A111E9DE-35C7-4394-847F-A308EE422059}
C:\Windows\Installer\{AB0C4C7D-2314-44BD-9BDC-1016FDA2D698}
C:\Windows\Installer\{E00AACB5-D016-45A7-86D8-1618ECD20006}
C:\Windows\Installer\{E2C4C676-8ECF-4B30-ADFC-F6DB62761E7B}
C:\Windows\Installer\{F337DD98-73E9-43B1-A675-409775600E6E}
C:\Users\Administrator\AppData\Local\temp\*.exe
C:\Users\Administrator\AppData\Local\temp\*.dll
EmptyTemp:
*****************

Processes closed successfully.
"C:\temp\InstallFilter64.msi" => File/Directory not found.
"C:\temp\t.msi" => File/Directory not found.
"C:\Users\Administrator\AppData\Roaming\hcbmb.dll" => File/Directory not found.
"C:\Users\Administrator\AppData\Roaming\qhcdldx.dll" => File/Directory not found.
"C:\Users\Administrator\Downloads\cbsidlm-cbsi145-UltraISO_Premium-SEO-10177302.exe" => File/Directory not found.
"C:\Users\Administrator\Downloads\cbsidlm-cbsi183-Ashampoo_Burning_Studio_Free-SEO-10776287.exe" => File/Directory not found.
"C:\Users\Administrator\Downloads\WinZip175.exe" => File/Directory not found.
"C:\Windows\Installer\b8ad6.msi" => File/Directory not found.
"C:\Windows\Installer\c3113.msi" => File/Directory not found.
"C:\Windows\Installer\{0BB29521-C091-4FCF-8DFB-803DD8210B0A}" => File/Directory not found.
"C:\Windows\Installer\{1AAABA17-77E3-4F1D-B11F-1F9CF62C0E57}" => File/Directory not found.
"C:\Windows\Installer\{37B3C498-FFAB-4A59-B668-6897F2142B39}" => File/Directory not found.
"C:\Windows\Installer\{659D9BC2-AC6E-417F-B937-797A48B80A92}" => File/Directory not found.
"C:\Windows\Installer\{8437E549-C33C-43CB-9B02-05BD112CF5B5}" => File/Directory not found.
"C:\Windows\Installer\{99847ECF-1D8A-46FC-93F1-8536FF12DFE3}" => File/Directory not found.
"C:\Windows\Installer\{A111E9DE-35C7-4394-847F-A308EE422059}" => File/Directory not found.
"C:\Windows\Installer\{AB0C4C7D-2314-44BD-9BDC-1016FDA2D698}" => File/Directory not found.
"C:\Windows\Installer\{E00AACB5-D016-45A7-86D8-1618ECD20006}" => File/Directory not found.
"C:\Windows\Installer\{E2C4C676-8ECF-4B30-ADFC-F6DB62761E7B}" => File/Directory not found.
"C:\Windows\Installer\{F337DD98-73E9-43B1-A675-409775600E6E}" => File/Directory not found.
"C:\Users\Administrator\AppData\Local\temp\*.exe" => File/Directory not found.
"C:\Users\Administrator\AppData\Local\temp\*.dll" => File/Directory not found.
EmptyTemp: => Removed 147.2 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====



#15 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:05 PM

Posted 15 November 2014 - 04:14 PM

The log is looking good.
 
That's it! abklatsch.gif
Your logs look clean to me at the moment. :thumbup2:
We're gonna clean up everything now, close security holes on your computer and in the end I'll provide you with a list of security tips so you hopefully will not need our help anymore in the future.


My help is free for everybody.
If you want to support me fighting against malware or buy me a beer for the assistance you received, then you can consider a donation: btn_donate_SM.gif
Thank you!


Clean Upcleanupm.PNG

Now we remove all the tools we used (including their logs and quarantine folders), restore your settings and delete old and infected system restorepoints:

  • You can uninstall programs that you had to install (e.g. MBAM or ESET Onlinescanner) in the control panel if you so wish.
  • Download delfix.pngDelFix (by Xplode) and save it to your Desktop.
    • Close all running programs and start delfix.exe.
    • Make sure that all available options are checked.
    • Click on Run
    • DelFix should remove all our tools and delete itself afterwards. I don't need the log file.
  • If there is still something left you can delete it manually.

Closing security holes

Many infections happen via drive-by downloads that run unnoticed in the background while the user visits an infected website. To achieve this malware exploits security holes in installed software (e.g. browser or its plugins). Older versions of such software often have lots of known exploitable holes. Therefore it's very important to always keep your software up-to-date.
The following software is outdated. Make sure you remove all old versions and install the current one instead if you need the program:


Adobe Flash Player 11 Plugin
Adobe Flash Player 14 ActiveX
Java 7 Update 25 (64-bit)
Java 7 Update 25
Internet Explorer Version 10


Download IE11

Tips

I recommend to read and follow the "16 simple and easy ways to keep your computer safe and secure on the Internet" (Link) by Lawrence Abrams
 
 
warning.gif No Resident Protection Warning

Always have one (and no more than one!) AntiVirus program, as the resident protection is absolutely a must-have on any Windows!
Nowadays we have plenty of free AV programs. This choice is up to you.
 
Here are some of the Anti-Virus programmes I recommend. 

Each paid-for Anti-Virus comes with a free trial if you wish to try the software before purchasing. For a paid solution, my choice of Anti-Virus is ESET NOD32, and for a free solution, my choice of Anti-Virus is avast!. However, please be aware that there is no universal solution that works for everyone, and there is no single best anti-virus.
 
 


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users