Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan.Poweliks has infected my computer. Please help!


  • This topic is locked This topic is locked
88 replies to this topic

#1 Calimero72

Calimero72

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 10 November 2014 - 10:37 AM

**I've now managed to post the log files below.**

Hi. I'm completely frustrated by this virus, but I read that this site is a great place to go for help. Thank you all in advance.
 
I've been following your Preparation Guide, but I'm unable to complete Step 6. My computer will not allow me to download the DDS tool. I keep getting the following message: "Your current security settings do not allow this file to be downloaded."
 
I'm not very technical when it comes to computers. What do I do so I can download this tool? Thank you.

Edited by Calimero72, 10 November 2014 - 11:56 PM.


BC AdBot (Login to Remove)

 


m

#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,214 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:13 AM

Posted 10 November 2014 - 12:12 PM

Are you using Win 8.1 then it will not run.

If you cannot get DDS to work, please try this instead.

Please download RSIT by random/random from the link provided for your operating system and save it to your desktop.This tool needs to run while the computer is connected to the Internet. If you get a warning from your firewall or other security programs regarding RSIT attempting to contact the Internet, please allow the connection.
  • Close all applications and windows so that you have nothing open and are at your Desktop.
  • Double-click on RSIT.exe to start the program.
    Vista/Windows 7 users right-click and select Run As Administrator.
  • Read the disclaimer and click Continue.
  • When the scan is complete, a text file named log.txt will automatically open in Notepad.
  • Another text file named info.txt will open minimized.
  • Save the log files to your desktop and copy/paste the contents of log.txt by highlighting everything and pressing Ctrl+C.
  • After highlighting, right-click, choose Copy and then paste the contents into a new topic in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here.
  • Copies of both log files are automatically saved in the C:\RSIT folder which the tool creates during the scan.

Edited by boopme, 10 November 2014 - 12:14 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Calimero72

Calimero72
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 10 November 2014 - 01:51 PM

I tried the download you posted (the 32-bit version), and I'm still getting the same message as before: "Your current security settings do not allow this file to be downloaded." How can I change the settings? Should I change them? Is there another way I can download RSIT (or DDS)? Thanks.

 

I should add that I'm not using Win 8.1. I have Windows Vista.


Edited by Calimero72, 10 November 2014 - 03:06 PM.


#4 Calimero72

Calimero72
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 10 November 2014 - 10:03 PM

Here's the type of trouble I've been experiencing. Thank you again for your help.

 

I have been getting multiple pop-ups from Malwarebytes Anti-Malware that tell me it has successfully blocked access to potentially malicious sites; I keep seeing many of the same site numbers over and over again. I've also gotten messages stating that Internet Explorer has stopped working correctly and will notifiy me when a solution is available. I've gotten several messages stating the following: "There is a problem with Adobe Acrobat/Reader. Please exit Adobe Acrobat/Reader and try again." Norton tells me that it's blocking Trojan.Poweliks. I often get high memory usage warnings. These are some of the issues I'm experiencing (in addition to the fact that my computer no longer allows me to download files).

 

Since my computer no longer allows me to download files, I used my laptop to download DSS and burned it to a DVD, which I then ran on my infected computer (the desktop). Following is the text log (I hope). I have also attached the Attach.txt file. Please let me know what additional information you need.

 

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16584
Run by Owner at 21:40:45 on 2014-11-10
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.2942.1479 [GMT -5:00]
.
AV: Norton AntiVirus *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton AntiVirus *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Microsoft\BingBar\SeaPort.EXE
C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
C:\Program Files\Google\Update\1.3.25.5\GoogleCrashHandler.exe
C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe
C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\NAV.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe
C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
C:\Users\Owner\AppData\Roaming\VERIZON\UA_ar\UA.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe
C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\NAV.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\dllhost.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\dllhost.exe
C:\Windows\system32\dllhst3g.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\WSCStub.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uSearch Bar = hxxp://isearch.whitesmoke.com/?q={searchTerms}&babsrc=home&s=web&as=0&isid=9858
uSearch Page = hxxp://isearch.whitesmoke.com/?q={searchTerms}&babsrc=home&s=web&as=0&isid=9858
uDefault_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=1&o=vp32&d=1208&m=et1161-07
mStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=1&o=vp32&d=1208&m=et1161-07
mDefault_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=1&o=vp32&d=1208&m=et1161-07
uSearchAssistant = hxxp://isearch.whitesmoke.com/?q={searchTerms}&babsrc=home&s=web&as=0&isid=9858
BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>
BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\program files\norton antivirus\engine\21.6.0.32\ips\ipsbho.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Norton Identity Protection: {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - c:\program files\norton identity safe\engine\2014.7.8.23\coieplg.dll
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -
TB: <No Name>: {ae07101b-46d4-4a98-af68-0333ea26e113} - LocalServer32 - <no file>
TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: Norton Identity Safe Toolbar: {A13C2648-91D4-4bf3-BC6D-0079707C4389} - c:\program files\norton identity safe\engine\2014.7.8.23\coieplg.dll
uRun: [Sidebar] "c:\program files\windows sidebar\Sidebar.exe" /autorun
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messenger\YahooMessenger.exe" -quiet
uRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil32_15_0_0_167_ActiveX.exe -update activex
mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [P2Go_Menu] "c:\program files\cyberlink\power2go\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\power2go" updatewithcreateonce "software\cyberlink\power2go\6.0"
mRun: [USB2Check] RUNDLL32.EXE "c:\windows\system32\PCLECoInst.dll",CheckUSBController
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [Skytel] Skytel.exe
mRun: [eRecoveryService] <no file>
StartupFolder: c:\users\owner\appdata\roaming\micros~1\windows\startm~1\programs\startup\verizo~1.lnk - c:\users\owner\appdata\roaming\verizon\ua_ar\UA.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\netgea~1.lnk - c:\program files\netgear\wna1100\WNA1100.exe
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - hxxp://fb.familylink.com/we_are_related/stream/core/lib/AurigmaImageUploader/ImageUploader5.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{41D90122-CF4B-41CC-B04F-FF34BB6FB5B4} : DHCPNameServer = 192.168.1.1
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL
LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg
.
============= SERVICES / DRIVERS ===============
.
R0 SCMNdisP;General NDIS Protocol Driver;c:\windows\system32\drivers\SCMNdisP.sys [2011-4-26 21728]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nav\1506000.020\symds.sys [2014-9-24 367704]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nav\1506000.020\symefa.sys [2014-9-24 936152]
R1 BHDrvx86;BHDrvx86;c:\program files\norton antivirus\nortondata\21.2.0.38\definitions\bashdefs\20141107.001\BHDrvx86.sys [2014-11-10 1138392]
R1 ccSet_NAV;NAV Settings Manager;c:\windows\system32\drivers\nav\1506000.020\ccsetx86.sys [2014-9-24 127064]
R1 ccSet_NST;Norton Identity Safe Settings Manager;c:\windows\system32\drivers\nst\7de07080.017\ccsetx86.sys [2014-9-23 127064]
R1 IDSVix86;IDSVix86;c:\program files\norton antivirus\nortondata\21.2.0.38\definitions\ipsdefs\20141107.001\IDSvix86.sys [2014-11-7 476888]
R1 jswpslwf;JumpStart Wireless Filter Driver;c:\windows\system32\drivers\jswpslwf.sys [2011-4-26 20384]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nav\1506000.020\ironx86.sys [2014-9-24 209624]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\system32\drivers\nav\1506000.020\symtdiv.sys [2014-9-24 384728]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-11 116608]
R2 BBUpdate;BBUpdate;c:\program files\microsoft\bingbar\SeaPort.EXE [2011-10-13 249648]
R2 ETService;Empowering Technology Service;c:\program files\emachines\emachines recovery management\service\ETService.exe [2008-12-22 24576]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-1-18 654408]
R2 NAV;Norton AntiVirus;c:\program files\norton antivirus\engine\21.6.0.32\nav.exe [2014-9-24 262968]
R2 NCO;Norton Identity Safe;c:\program files\norton identity safe\engine\2014.7.8.23\nst.exe [2014-9-23 130104]
R2 WSWNA1100;WSWNA1100;c:\program files\netgear\wna1100\WifiSvc.exe [2011-4-26 268768]
R3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\drivers\athur.sys [2011-4-26 1389056]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2014-9-9 111408]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-1-18 22344]
S2 BBSvc;Bing Bar Update Service;c:\program files\microsoft\bingbar\BBSvc.EXE [2011-10-21 196176]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\drivers\ssudbus.sys [2014-2-27 83864]
S3 DNIMp50;DNIMp50 NDIS Protocol Driver;c:\windows\system32\drivers\DNIMP50.sys [2009-3-14 21504]
S3 DNISp50;DNISp50 NDIS Protocol Driver;c:\windows\system32\drivers\DNISP50.sys [2009-3-14 20480]
S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2010-3-27 54632]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]
S3 jswpsapi;JumpStart Wi-Fi Protected Setup;c:\program files\netgear\wna1100\jswpsapi.exe [2011-4-26 960992]
S3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\drivers\ssudmdm.sys [2014-2-27 181912]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-9-11 770168]
.
=============== Created Last 30 ================
.
2014-11-10 22:11:45 1176168 ----atw- c:\windows\system32\00007311.tmp
2014-11-10 22:11:41 1176168 ----atw- c:\windows\system32\00016619.tmp
2014-11-10 22:11:40 1176168 ----atw- c:\windows\system32\00013997.tmp
2014-11-10 22:11:24 40034920 ----atw- c:\windows\system32\00001660.tmp
2014-11-10 22:11:19 40034920 ----atw- c:\windows\system32\00023156.tmp
2014-11-10 22:10:26 40034920 ----atw- c:\windows\system32\00030749.tmp
2014-11-10 13:50:02 0 ----atw- c:\windows\system32\okwv!$la.tmp
2014-11-09 22:26:57 1180264 ----atw- c:\windows\system32\00029442.tmp
2014-11-09 22:25:09 40034920 ----atw- c:\windows\system32\00020294.tmp
2014-11-09 22:25:09 40034920 ----atw- c:\windows\system32\00005447.tmp
2014-11-09 20:27:34 40034920 ----atw- c:\windows\system32\00025055.tmp
2014-11-09 20:27:29 40034920 ----atw- c:\windows\system32\00021959.tmp
2014-11-09 20:26:22 40034920 ----atw- c:\windows\system32\00022425.tmp
2014-11-09 14:59:04 40034920 ----atw- c:\windows\system32\00019895.tmp
2014-11-09 14:59:00 40034920 ----atw- c:\windows\system32\00019718.tmp
2014-11-09 14:58:47 40034920 ----atw- c:\windows\system32\00006686.tmp
2014-11-09 14:58:39 40034920 ----atw- c:\windows\system32\00000220.tmp
2014-11-09 01:48:31 40034920 ----atw- c:\windows\system32\00028347.tmp
2014-11-09 01:48:25 40034920 ----atw- c:\windows\system32\00002801.tmp
2014-11-08 22:51:53 40034920 ----atw- c:\windows\system32\00007257.tmp
2014-11-08 22:49:58 40034920 ----atw- c:\windows\system32\00026500.tmp
2014-11-08 22:49:03 1180264 ----atw- c:\windows\system32\00019213.tmp
2014-11-08 22:49:03 1180264 ----atw- c:\windows\system32\00001854.tmp
2014-11-08 22:49:03 1180264 ----atw- c:\windows\system32\00001433.tmp
2014-11-08 22:49:02 1180264 ----atw- c:\windows\system32\00021585.tmp
2014-11-08 22:49:01 1180264 ----atw- c:\windows\system32\00006110.tmp
2014-11-08 22:49:01 1180264 ----atw- c:\windows\system32\00002783.tmp
2014-11-08 22:44:59 40034920 ----atw- c:\windows\system32\00005506.tmp
2014-11-07 20:28:29 40034920 ----atw- c:\windows\system32\00024132.tmp
2014-11-07 20:28:23 40034920 ----atw- c:\windows\system32\00008174.tmp
2014-11-07 20:26:35 40034920 ----atw- c:\windows\system32\00028466.tmp
2014-11-07 20:25:58 40034920 ----atw- c:\windows\system32\00024696.tmp
2014-11-07 13:18:56 40034920 ----atw- c:\windows\system32\00010371.tmp
2014-11-07 13:18:50 40034920 ----atw- c:\windows\system32\00026136.tmp
2014-10-16 12:01:24 81560 ----a-w- c:\windows\system32\mscories.dll
2014-10-16 12:01:24 156824 ----a-w- c:\windows\system32\mscorier.dll
2014-10-16 12:01:24 1131664 ----a-w- c:\windows\system32\dfshim.dll
2014-10-16 11:57:29 2054656 ----a-w- c:\windows\system32\win32k.sys
2014-10-16 11:49:04 143360 ----a-w- c:\windows\system32\drivers\fastfat.sys
2014-10-16 11:43:40 66560 ----a-w- c:\windows\system32\packager.dll
.
==================== Find3M  ====================
.
2014-11-09 22:52:53 1180264 ----atw- c:\windows\system32\00029228.tmp
2014-11-09 22:26:57 1180264 ----atw- c:\windows\system32\00028391.tmp
2014-11-08 22:52:33 1180264 ----atw- c:\windows\system32\00021876.tmp
2014-11-08 22:50:32 1180264 ----atw- c:\windows\system32\00018716.tmp
2014-11-08 22:48:59 1180264 ----atw- c:\windows\system32\00024478.tmp
2014-09-23 19:54:09 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-09-23 19:54:09 701104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-09-19 22:44:32 1810432 ----a-w- c:\windows\system32\jscript9.dll
2014-09-19 22:38:15 1129472 ----a-w- c:\windows\system32\wininet.dll
2014-09-19 22:37:34 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2014-09-19 22:36:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2014-09-19 22:35:46 421376 ----a-w- c:\windows\system32\vbscript.dll
2014-09-19 22:34:25 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2014-09-19 22:34:22 11776 ----a-w- c:\windows\system32\mshta.exe
2014-09-09 06:24:46 2048 ----a-w- c:\windows\system32\tzres.dll
2014-08-26 02:20:22 664792 ----a-w- c:\windows\system32\drivers\nav\1506000.020\srtsp.sys
2014-08-26 02:20:22 32984 ----a-w- c:\windows\system32\drivers\nav\1506000.020\srtspx.sys
2014-08-23 01:03:46 297984 ----a-w- c:\windows\system32\gdi32.dll
.
============= FINISH: 21:42:08.01 ===============
 

Attached Files



#5 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:13 PM

Posted 11 November 2014 - 12:21 PM

Hi & :welcome: to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully: :exclame:
  • My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
  • Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
  • If I don't reply within 24 hours please PM me!
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
Step 1

ie11.pngRe-enable downloads in Internet Explorer


Press thew7.png + R on your keyboard at the same time. Type inetcpl.cpl and click OK.
 
Click the Security tab and then on reset.PNG


Step 2
logo.png
Please download Powelikscleaner (by ESET) and save it to your Desktop.
  • Double-click the 3.png to start the tool.
  • Read the terms of the End-user license agreement and click Agree if you agree to them.
  • The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.
  • If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.
  • The tool will produce a log in the same directory the tool was run from.
  • Please copy and paste the log in your next reply.
1.png
2.png

Step 3

Please run a FRST scan. This will help us diagnose your problem.

frst.pngfrstscan.png
Please download Farbar Recovery Scan Tool and save it to your Desktop.
(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)
  • Start FRST with administator privileges.
  • Make sure the option Addition.txt is checked and press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
  • Please copy and paste these logs in your next reply.

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#6 Calimero72

Calimero72
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 11 November 2014 - 03:18 PM

Is this the correct log from the Powelikscleaner? Starting the FRST scan now.

 

 

[2014.11.11 15:02:58.614] - Begin
[2014.11.11 15:02:58.614] -
[2014.11.11 15:02:58.614] -     ....................................
[2014.11.11 15:02:58.614] -   ..::::::::::::::::::....................
[2014.11.11 15:02:58.614] -   .::EEEEEE:::SSSSSS::..EEEEEE..TTTTTTTT..    Win32/Poweliks
[2014.11.11 15:02:58.630] -  .::EE::::EE:SS:::::::.EE....EE....TT......   Version: 1.0.0.1
[2014.11.11 15:02:58.630] -  .::EEEEEEEE::SSSSSS::.EEEEEEEE....TT......   Built: Oct 15 2014
[2014.11.11 15:02:58.630] -  .::EE:::::::::::::SS:.EE..........TT......
[2014.11.11 15:02:58.630] -   .::EEEEEE:::SSSSSS::..EEEEEE.....TT.....    Copyright © ESET, spol. s r.o.
[2014.11.11 15:02:58.630] -   ..::::::::::::::::::....................    1992-2013. All rights reserved.
[2014.11.11 15:02:58.630] -     ....................................
[2014.11.11 15:02:58.630] -
[2014.11.11 15:02:58.630] - --------------------------------------------------------------------------------
[2014.11.11 15:02:58.630] -
[2014.11.11 15:02:58.630] - INFO: OS: 6.0.6002 SP2
[2014.11.11 15:02:58.630] - INFO: Product Type: Workstation
[2014.11.11 15:02:58.630] - INFO: WoW64: False
[2014.11.11 15:02:58.630] - INFO: Machine guid: B4CAE01E-73A8-4B84-BA76-31EF7AE70AFB
[2014.11.11 15:02:58.630] -
[2014.11.11 15:03:14.183] - INFO: Scanning for system infection...
[2014.11.11 15:03:14.183] - --------------------------------------------------------------------------------
[2014.11.11 15:03:14.183] -
[2014.11.11 15:03:14.183] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.11 15:03:14.183] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.11 15:03:14.183] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.11 15:03:14.198] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.11 15:03:14.198] - INFO: Processing classes...
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{3A6EE5C3-7A28-452B-832D-08FE74C7EEAD}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{4A26DF46-A5AF-4D46-A60D-14AD89E57A63}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{515C93ED-88BD-4CCB-AE7F-9F2A1E9695A3}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.11 15:03:14.214] - WARNING: Found suspicous classid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.214] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{3A6EE5C3-7A28-452B-832D-08FE74C7EEAD}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{4A26DF46-A5AF-4D46-A60D-14AD89E57A63}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{515C93ED-88BD-4CCB-AE7F-9F2A1E9695A3}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.11 15:03:14.245] - WARNING: Found suspicous classid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
 


[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}]
[2014.11.11 15:03:14.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.11 15:03:14.276] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.11 15:03:14.276] - INFO: Processing value [] = [C:\Windows\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:14.276] - INFO: Processing value [] = [C:\Windows\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:14.276] - INFO: Processing invalid values in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.11 15:03:14.276] - INFO: Processing value [] = [C:\Windows\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:14.276] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:14.276] - INFO: Processing value [] = [C:\Windows\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:14.276] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:14.276] - INFO: Processing invalid subkeys in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.11 15:03:14.276] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]...
[2014.11.11 15:03:14.292] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.11 15:03:14.292] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.11 15:03:14.292] - INFO: Win32/Poweliks found
[2014.11.11 15:03:28.441] - INFO: process: dllhost.exe, pid 3260, parent 2964
[2014.11.11 15:03:28.441] - INFO: Terminated process pid = 3260
[2014.11.11 15:03:28.441] - INFO: process: dllhost.exe, pid 4272, parent 940
[2014.11.11 15:03:28.441] - INFO: process: dllhost.exe, pid 6308, parent 3260
[2014.11.11 15:03:28.441] - INFO: Terminated process pid = 6308
[2014.11.11 15:03:28.441] - INFO: process: dllhost.exe, pid 15320, parent 6308
[2014.11.11 15:03:28.441] - INFO: Terminated process pid = 15320
[2014.11.11 15:03:28.441] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.11 15:03:28.441] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.11 15:03:28.441] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.11 15:03:28.441] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.11 15:03:28.441] - INFO: Processing classes...
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}]
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}]
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}]
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{3A6EE5C3-7A28-452B-832D-08FE74C7EEAD}]
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{4A26DF46-A5AF-4D46-A60D-14AD89E57A63}]
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{515C93ED-88BD-4CCB-AE7F-9F2A1E9695A3}]
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
[2014.11.11 15:03:28.441] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.11 15:03:28.457] - INFO: Deleted classid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{3A6EE5C3-7A28-452B-832D-08FE74C7EEAD}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{4A26DF46-A5AF-4D46-A60D-14AD89E57A63}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{515C93ED-88BD-4CCB-AE7F-9F2A1E9695A3}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}]
[2014.11.11 15:03:28.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-2727267033-796428107-372778226-1000\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.11 15:03:28.550] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.11 15:03:28.550] - INFO: Processing value [] = [C:\Windows\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:28.550] - INFO: Processing value [] = [C:\Windows\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:28.550] - INFO: Processing invalid values in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.11 15:03:28.566] - INFO: Processing value [] = [C:\Windows\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:28.566] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:28.566] - INFO: Processing value [] = [C:\Windows\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:28.566] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.11 15:03:28.566] - INFO: Processing invalid subkeys in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.11 15:03:28.566] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]...
[2014.11.11 15:03:28.566] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.11 15:03:28.566] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.11 15:03:28.566] - INFO: Cleaning status: 0
[2014.11.11 15:03:39.876] - End

 



#7 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:13 PM

Posted 11 November 2014 - 03:22 PM

:thumbup2:

 

Please go ahead with step 3...


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#8 Calimero72

Calimero72
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 11 November 2014 - 03:26 PM

I'm having trouble downloading the FRST scan. I get this message from Norton: FRST[1].exe is not safe and has been removed.



#9 Calimero72

Calimero72
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 11 November 2014 - 03:40 PM

I don't know if I've downloaded FRST now or what, but when I click on an FRST icon on my desktop, I get this message: C:\Users\Owner\Desktop\FRST.exe is not a valid WIN32 application

 

Before I get that message, there's one that says "The publisher could not be verified. Are you sure you want to run this software?" When I click "run," I get the message above.


Edited by Calimero72, 11 November 2014 - 03:43 PM.


#10 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:13 PM

Posted 11 November 2014 - 03:44 PM

Please disable Norton temporarily and download FRST again.


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#11 Calimero72

Calimero72
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 11 November 2014 - 03:55 PM

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-11-2014
Ran by Owner (administrator) on OWNER-PC on 11-11-2014 15:50:51
Running from C:\Users\Owner\Desktop
Loaded Profile: Owner (Available profiles: Owner)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.25.5\GoogleCrashHandler.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
() C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(LeapFrog Enterprises, Inc.) C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
() C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
(SAMSUNG Electornics Co., Ltd.) C:\Users\Owner\AppData\Roaming\VERIZON\UA_ar\UA.exe
(LeapFrog Enterprises, Inc.) C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe
(Symantec Corporation) C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\nav.exe
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\nst.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
() C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
(Yahoo! Inc.) C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\nst.exe
(Symantec Corporation) C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\nav.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Yahoo! Inc.) C:\Program Files\Yahoo!\Messenger\Ymsgr_tray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_15_0_0_167_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6183456 2008-07-23] (Realtek Semiconductor)
HKLM\...\Run: [P2Go_Menu] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)
HKLM\...\Run: [USB2Check] => RUNDLL32.EXE "C:\Windows\system32\PCLECoInst.dll",CheckUSBController
HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2008-07-23] (Realtek Semiconductor Corp.)
HKLM\...\Run: [eRecoveryService] => [X]
HKLM\...\Run: [jswtrayutil] => "C:\Program Files\NETGEAR\WNA1100\jswtrayutil.exe"
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM\...\Run: [Malwarebytes' Anti-Malware] => C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [462408 2012-04-04] (Malwarebytes Corporation)
HKLM\...\Run: [Monitor] => C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe [298616 2013-04-01] (LeapFrog Enterprises, Inc.)
Winlogon\Notify\!SASWinLogon: C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-2727267033-796428107-372778226-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-20] (Microsoft Corporation)
HKU\S-1-5-21-2727267033-796428107-372778226-1000\...\Run: [Messenger (Yahoo!)] => C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.)
HKU\S-1-5-21-2727267033-796428107-372778226-1000\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\S-1-5-21-2727267033-796428107-372778226-1000\...\MountPoints2: {a748aed0-bf14-11e3-9d55-00219748ad93} - I:\VZW_Software_upgrade_assistant.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA1100 Smart Wizard.lnk
ShortcutTarget: NETGEAR WNA1100 Smart Wizard.lnk -> C:\Program Files\NETGEAR\WNA1100\WNA1100.exe ()
Startup: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verizon Wireless Software Utility Application for Android – Samsung.lnk
ShortcutTarget: Verizon Wireless Software Utility Application for Android – Samsung.lnk -> C:\Users\Owner\AppData\Roaming\VERIZON\UA_ar\UA.exe (SAMSUNG Electornics Co., Ltd.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: Internet Explorer proxy is enabled.
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=1&o=vp32&d=1208&m=et1161-07
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.whitesmoke.com/?q={searchTerms}&babsrc=home&s=web&as=0&isid=9858
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://isearch.whitesmoke.com/?q={searchTerms}&babsrc=home&s=web&as=0&isid=9858
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=1&o=vp32&d=1208&m=et1161-07
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=1&o=vp32&d=1208&m=et1161-07
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://isearch.whitesmoke.com/?q={searchTerms}&babsrc=home&s=web&as=0&isid=9858
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://isearch.whitesmoke.com/?q={searchTerms}&babsrc=home&s=web&as=0&isid=9858
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://isearch.whitesmoke.com/?q={searchTerms}&babsrc=home&s=web&as=0&isid=9858
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
BHO: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
BHO: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Norton Identity Protection -> {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} -> C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll (Symantec Corporation)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
Toolbar: HKLM - Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll (Symantec Corporation)
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} http://fb.familylink.com/we_are_related/stream/core/lib/AurigmaImageUploader/ImageUploader5.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [113024 2011-07-18] (SuperAdBlocker.com)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ax2flo9e.default
FF DefaultSearchEngine: WhiteSmoke Smartbar Search
FF SelectedSearchEngine: WhiteSmoke Smartbar Search
FF Homepage: hxxp://isearch.whitesmoke.com/?isid=9858
FF Keyword.URL: hxxp://isearch.whitesmoke.com/?babsrc=home&s=web&as=0&isid=9858&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.4 -> C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ax2flo9e.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ax2flo9e.default\searchplugins\WhiteSmoke Smartbar Search.xml
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ax2flo9e.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2014-04-28]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-14]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2010-02-21]
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_21.2.0.38\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_21.2.0.38\IPSFF [2014-03-31]
FF HKLM\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.0.43\coFFPlgn
FF Extension: Norton Identity Safe Toolbar - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.0.43\coFFPlgn [2014-11-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome:
=======
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Owner\AppData\Local\Google\Chrome\Application\16.0.912.75\pdf.dll No File
CHR Plugin: (Google Gears 0.5.33.0) - C:\Users\Owner\AppData\Local\Google\Chrome\Application\16.0.912.75\gears.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Owner\AppData\Local\Google\Chrome\Application\16.0.912.75\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.230.5) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java™ Platform SE 6 U23) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\Owner\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM\...\Chrome\Extension: [amfclgbdpgndipgoegfpkkgobahigbcl] - C:\Users\Owner\AppData\Local\Linkury/Application\1Extension.crx []
CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\Exts\Chrome.crx [2014-09-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [116608 2011-08-11] (SUPERAntiSpyware.com) [File not signed]
R2 ETService; C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe [24576 2008-06-11] () [File not signed]
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-03-25] (Hewlett-Packard Co.) [File not signed]
S3 jswpsapi; C:\Program Files\NETGEAR\WNA1100\jswpsapi.exe [960992 2010-03-22] (Atheros Communications, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [654408 2012-04-04] (Malwarebytes Corporation)
R2 NAV; C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\NAV.exe [262968 2014-09-21] (Symantec Corporation)
R2 NCO; C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\NST.exe [130104 2014-09-20] (Symantec Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
R2 WSWNA1100; C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe [268768 2010-03-22] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athur; C:\Windows\System32\DRIVERS\athur.sys [1389056 2010-03-09] (Atheros Communications, Inc.)
R1 BHDrvx86; C:\Program Files\Norton AntiVirus\NortonData\21.2.0.38\Definitions\BASHDefs\20141107.001\BHDrvx86.sys [1138392 2014-10-03] (Symantec Corporation)
R1 ccSet_NAV; C:\Windows\system32\drivers\NAV\1506000.020\ccSetx86.sys [127064 2014-02-24] (Symantec Corporation)
R1 ccSet_NST; C:\Windows\system32\drivers\NST\7DE07080.017\ccSetx86.sys [127064 2013-09-27] (Symantec Corporation)
R3 DCamUSBEMPIA; C:\Windows\System32\DRIVERS\emDevice.sys [100957 2005-12-21] (eMPIA Technology, Inc.)
S3 DNIMp50; C:\Windows\System32\Drivers\DNIMp50.sys [21504 2006-11-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 DNISp50; C:\Windows\System32\Drivers\DNISp50.sys [20480 2006-11-16] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [378672 2014-10-21] (Symantec Corporation)
R3 emAudio; C:\Windows\System32\drivers\emAudio.sys [22528 2006-12-12] (Pinnacle Systems GmbH)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [111408 2014-09-09] (Symantec Corporation)
R3 FiltUSBEMPIA; C:\Windows\System32\DRIVERS\emFilter.sys [5245 2005-12-21] (eMPIA Technology, Inc.)
R1 IDSVix86; C:\Program Files\Norton AntiVirus\NortonData\21.2.0.38\Definitions\IPSDefs\20141108.001\IDSvix86.sys [476888 2014-08-29] (Symantec Corporation)
R3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22344 2012-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files\Norton AntiVirus\NortonData\21.2.0.38\Definitions\VirusDefs\20141110.032\NAVENG.SYS [95704 2014-11-09] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton AntiVirus\NortonData\21.2.0.38\Definitions\VirusDefs\20141110.032\NAVEX15.SYS [1636696 2014-11-09] (Symantec Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 ScanUSBEMPIA; C:\Windows\System32\DRIVERS\emScan.sys [4493 2005-12-21] (eMPIA Technology, Inc.)
R0 SCMNdisP; C:\Windows\System32\DRIVERS\scmndisp.sys [21728 2007-01-19] (Windows ® Codename Longhorn DDK provider)
R3 SRTSP; C:\Windows\System32\Drivers\NAV\1506000.020\SRTSP.SYS [664792 2014-08-25] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NAV\1506000.020\SRTSPX.SYS [32984 2014-08-25] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NAV\1506000.020\SYMDS.SYS [367704 2013-10-30] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NAV\1506000.020\SYMEFA.SYS [936152 2014-03-03] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2014-03-31] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NAV\1506000.020\Ironx86.SYS [209624 2014-08-06] (Symantec Corporation)
R1 SYMTDIv; C:\Windows\System32\Drivers\NAV\1506000.020\SYMTDIV.SYS [384728 2014-02-17] (Symantec Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 RimUsb; System32\Drivers\RimUsb.sys [X]
S3 SYMDNS; \SystemRoot\System32\Drivers\NAV\1002000.007\SYMDNS.SYS [X]
S3 SYMFW; \SystemRoot\System32\Drivers\NAV\1008000.029\SYMFW.SYS [X]
S3 SYMNDISV; \SystemRoot\System32\Drivers\NAV\1008000.029\SYMNDISV.SYS [X]
S3 SYMREDRV; \SystemRoot\System32\Drivers\NAV\1002000.007\SYMREDRV.SYS [X]
S3 WPN111; system32\DRIVERS\WPN111v.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-11 15:50 - 2014-11-11 15:51 - 00023509 _____ () C:\Users\Owner\Desktop\FRST.txt
2014-11-11 15:50 - 2014-11-11 15:50 - 00000000 ____D () C:\FRST
2014-11-11 15:49 - 2014-11-11 15:49 - 01107968 _____ (Farbar) C:\Users\Owner\Desktop\FRST.exe
2014-11-11 15:36 - 2014-11-11 15:36 - 00000000 _____ () C:\Users\Owner\Downloads\FRST (1).exe.5nsqt1k.partial
2014-11-11 15:25 - 2014-11-11 15:29 - 00000000 _____ () C:\Users\Owner\Desktop\FRST.exe.jgpfk0r.partial
2014-11-11 15:24 - 2014-11-11 15:24 - 00000000 _____ () C:\Users\Owner\Desktop\FRST.exe.pr4ab5y.partial
2014-11-11 15:23 - 2014-11-11 15:24 - 00000602 _____ () C:\Users\Owner\Desktop\FRST (1) - Shortcut.lnk
2014-11-11 15:18 - 2014-11-11 15:18 - 00000000 _____ () C:\Users\Owner\Downloads\FRST.exe.pr4ab5y.partial
2014-11-11 15:02 - 2014-11-11 15:02 - 00000597 _____ () C:\Users\Owner\Desktop\ESETPoweliksCleaner - Shortcut.lnk
2014-11-11 15:01 - 2014-11-11 15:01 - 00186568 _____ (ESET) C:\Users\Owner\Downloads\ESETPoweliksCleaner.exe
2014-11-11 14:08 - 2014-11-11 14:08 - 40034920 ____T () C:\Windows\system32\00032439.tmp
2014-11-11 14:07 - 2014-11-11 14:07 - 40034920 ____T () C:\Windows\system32\asbastha.tmp
2014-11-11 14:07 - 2014-11-11 14:07 - 40034920 ____T () C:\Windows\system32\00030106.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 40034920 ____T () C:\Windows\system32\00011256.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 40034920 ____T () C:\Windows\system32\00003467.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00032651.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00032601.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00032470.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00032387.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00032005.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00031616.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00030579.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00029978.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00028699.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00028340.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00028230.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00026810.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00026596.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00025586.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00025551.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00024984.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00024738.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00024542.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00024444.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00024221.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00023324.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00023291.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00021725.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00019686.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00019269.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00018992.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00016616.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00016562.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00015767.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00015764.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00015758.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00015577.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00014969.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00014815.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00014249.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00013452.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00012567.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00011658.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00010093.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00009062.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00009013.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00008874.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00008193.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00008082.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00008054.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00006611.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00006284.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00004576.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00004108.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00002047.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00000642.tmp
2014-11-11 13:43 - 2014-11-11 13:43 - 01180264 ____T () C:\Windows\system32\00000060.tmp
2014-11-11 13:42 - 2014-11-11 13:42 - 40034920 ____T () C:\Windows\system32\00015093.tmp
2014-11-11 12:48 - 2014-11-04 14:30 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-10 21:43 - 2014-11-10 21:45 - 00017173 _____ () C:\Users\Owner\Desktop\dds.txt
2014-11-10 21:43 - 2014-11-10 21:45 - 00008153 _____ () C:\Users\Owner\Desktop\attach.txt
2014-11-10 21:25 - 2014-11-10 21:25 - 40034920 ____T () C:\Windows\system32\00021368.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 40034920 ____T () C:\Windows\system32\00008603.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 40034920 ____T () C:\Windows\system32\00004672.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00032126.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00029984.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00029914.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00029878.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00026313.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00025563.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00024777.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00024378.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00023419.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00023149.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00022991.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00022444.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00020859.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00020787.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00020412.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00018965.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00018555.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00018535.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00016205.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00015509.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00014650.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00014420.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00012110.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00007144.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00005987.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00005552.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00004982.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00004114.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00002846.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00002271.tmp
2014-11-10 21:25 - 2014-11-10 21:25 - 01176168 ____T () C:\Windows\system32\00000722.tmp
2014-11-10 17:11 - 2014-11-10 17:11 - 40034920 ____T () C:\Windows\system32\00023156.tmp
2014-11-10 17:11 - 2014-11-10 17:11 - 40034920 ____T () C:\Windows\system32\00001660.tmp
2014-11-10 17:11 - 2014-11-10 17:11 - 01176168 ____T () C:\Windows\system32\00016619.tmp
2014-11-10 17:11 - 2014-11-10 17:11 - 01176168 ____T () C:\Windows\system32\00013997.tmp
2014-11-10 17:11 - 2014-11-10 17:11 - 01176168 ____T () C:\Windows\system32\00007311.tmp
2014-11-10 17:10 - 2014-11-10 17:11 - 40034920 ____T () C:\Windows\system32\00030749.tmp
2014-11-10 08:50 - 2014-11-10 08:50 - 00000000 ____T () C:\Windows\system32\okwv!$la.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 40034920 ____T () C:\Windows\system32\00022388.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 40034920 ____T () C:\Windows\system32\00021886.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 40034920 ____T () C:\Windows\system32\00005918.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00031401.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00029228.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00028479.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00027863.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00027263.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00027107.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00026474.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00022841.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00022639.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00021641.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00018259.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00018095.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00016235.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00015372.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00015249.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00014633.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00014011.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00013836.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00013539.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00012262.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00008905.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00008240.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00007872.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00007652.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00006666.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00005125.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00003414.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00002674.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00002245.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00000462.tmp
2014-11-09 17:52 - 2014-11-09 17:52 - 01180264 ____T () C:\Windows\system32\00000298.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 40034920 ____T () C:\Windows\system32\00030864.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 40034920 ____T () C:\Windows\system32\00029624.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 40034920 ____T () C:\Windows\system32\00021726.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 40034920 ____T () C:\Windows\system32\00014771.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00032757.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00032662.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00031766.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00031322.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00031268.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00031182.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00031101.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00030333.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00029531.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00029442.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00029084.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00028805.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00028788.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00028714.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00028703.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00028391.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00028253.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00027804.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00027644.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00027529.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00027446.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00026357.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00026308.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00026299.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00025667.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00025547.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00024884.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00024636.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00024393.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00024370.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00024261.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00024255.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00024084.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00023811.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00023805.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00023763.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00023559.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00022648.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00022641.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00022252.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00022190.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00021990.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00021848.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00020089.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00020037.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00019954.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00019912.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00019853.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00019629.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00019427.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00019264.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00018756.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00018035.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00017684.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00017673.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00017035.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00016944.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00015938.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00015890.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00015350.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00015141.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00015006.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00014162.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00013931.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00013867.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00013796.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00013446.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00013397.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00012859.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00012623.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00012494.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00012316.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00011840.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00011538.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00011446.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00009975.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00009894.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00009741.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00009148.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00009040.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00008942.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00008723.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00007783.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00007711.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00007672.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00007376.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00007137.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00007066.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00006868.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00006729.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00006699.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00005430.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00005349.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00005329.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00005164.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00004966.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00004811.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00004691.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00004664.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00003775.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00003668.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00003548.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00003528.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00003133.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00003035.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00001869.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00001842.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00001484.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00001138.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00000882.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00000778.tmp
2014-11-09 17:26 - 2014-11-09 17:26 - 01180264 ____T () C:\Windows\system32\00000284.tmp
2014-11-09 17:25 - 2014-11-09 17:25 - 40034920 ____T () C:\Windows\system32\00020294.tmp
2014-11-09 17:25 - 2014-11-09 17:25 - 40034920 ____T () C:\Windows\system32\00005447.tmp
2014-11-09 15:27 - 2014-11-09 15:27 - 40034920 ____T () C:\Windows\system32\00025055.tmp
2014-11-09 15:27 - 2014-11-09 15:27 - 40034920 ____T () C:\Windows\system32\00021959.tmp
2014-11-09 15:26 - 2014-11-09 15:27 - 40034920 ____T () C:\Windows\system32\00022425.tmp
2014-11-09 09:59 - 2014-11-09 09:59 - 40034920 ____T () C:\Windows\system32\00019895.tmp
2014-11-09 09:59 - 2014-11-09 09:59 - 40034920 ____T () C:\Windows\system32\00019718.tmp
2014-11-09 09:58 - 2014-11-09 09:58 - 40034920 ____T () C:\Windows\system32\00006686.tmp
2014-11-09 09:58 - 2014-11-09 09:58 - 40034920 ____T () C:\Windows\system32\00000220.tmp
2014-11-08 20:48 - 2014-11-08 20:48 - 40034920 ____T () C:\Windows\system32\00028347.tmp
2014-11-08 20:48 - 2014-11-08 20:48 - 40034920 ____T () C:\Windows\system32\00002801.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 40034920 ____T () C:\Windows\system32\00025596.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 40034920 ____T () C:\Windows\system32\00006727.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00032137.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00031207.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00030091.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00029761.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00029540.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00029259.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00028188.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00027807.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00027323.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00026965.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00026749.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00022867.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00021876.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00021659.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00020873.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00020683.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00018413.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00017813.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00017772.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00016283.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00015507.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00015133.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00014526.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00013300.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00012687.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00011844.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00011528.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00010359.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00009870.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00009650.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00009438.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00008685.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00008643.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00008038.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00006513.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00006183.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00006180.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00005737.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00004191.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00003996.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00003959.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00003509.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00003422.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00000442.tmp
2014-11-08 17:52 - 2014-11-08 17:52 - 01180264 ____T () C:\Windows\system32\00000009.tmp
2014-11-08 17:51 - 2014-11-08 17:51 - 40034920 ____T () C:\Windows\system32\00007257.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 40034920 ____T () C:\Windows\system32\00019169.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 40034920 ____T () C:\Windows\system32\00015724.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00032391.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00029358.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00028145.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00026962.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00024464.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00023281.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00018716.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00017421.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00016827.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00014604.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00012382.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00011942.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00011478.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00009961.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00005705.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00005436.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00004827.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00003902.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00002995.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00000491.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00000292.tmp
2014-11-08 17:50 - 2014-11-08 17:50 - 01180264 ____T () C:\Windows\system32\00000153.tmp
2014-11-08 17:49 - 2014-11-08 17:49 - 40034920 ____T () C:\Windows\system32\00026500.tmp
2014-11-08 17:49 - 2014-11-08 17:49 - 01180264 ____T () C:\Windows\system32\00021585.tmp
2014-11-08 17:49 - 2014-11-08 17:49 - 01180264 ____T () C:\Windows\system32\00019213.tmp
2014-11-08 17:49 - 2014-11-08 17:49 - 01180264 ____T () C:\Windows\system32\00006110.tmp
2014-11-08 17:49 - 2014-11-08 17:49 - 01180264 ____T () C:\Windows\system32\00002783.tmp
2014-11-08 17:49 - 2014-11-08 17:49 - 01180264 ____T () C:\Windows\system32\00001854.tmp
2014-11-08 17:49 - 2014-11-08 17:49 - 01180264 ____T () C:\Windows\system32\00001433.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 40034920 ____T () C:\Windows\system32\00007290.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 40034920 ____T () C:\Windows\system32\00004269.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00031011.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00030996.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00030584.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00030454.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00029694.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00029686.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00026515.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00026472.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00024963.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00024478.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00024142.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00023282.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00020815.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00020308.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00020064.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00018422.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00018272.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00014995.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00014316.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00014307.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00013779.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00010353.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00010153.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00009279.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00008591.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00008282.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00007958.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00007008.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00005680.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00005668.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00002918.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00002043.tmp
2014-11-08 17:48 - 2014-11-08 17:48 - 01180264 ____T () C:\Windows\system32\00001561.tmp
2014-11-08 17:44 - 2014-11-08 17:45 - 40034920 ____T () C:\Windows\system32\00005506.tmp
2014-11-07 15:28 - 2014-11-07 15:28 - 40034920 ____T () C:\Windows\system32\00024132.tmp
2014-11-07 15:28 - 2014-11-07 15:28 - 40034920 ____T () C:\Windows\system32\00008174.tmp
2014-11-07 15:26 - 2014-11-07 15:26 - 40034920 ____T () C:\Windows\system32\00028466.tmp
2014-11-07 15:25 - 2014-11-07 15:26 - 40034920 ____T () C:\Windows\system32\00024696.tmp
2014-11-07 08:18 - 2014-11-07 08:18 - 40034920 ____T () C:\Windows\system32\00026136.tmp
2014-11-07 08:18 - 2014-11-07 08:18 - 40034920 ____T () C:\Windows\system32\00010371.tmp
2014-11-06 21:33 - 2014-11-06 21:33 - 00000098 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2014-10-16 07:01 - 2014-06-15 17:18 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 07:01 - 2014-06-13 13:22 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 07:01 - 2014-06-13 13:22 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 06:57 - 2014-09-27 18:29 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 06:49 - 2014-09-04 18:27 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2014-10-16 06:43 - 2014-09-16 11:56 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 07:47 - 2014-09-19 17:53 - 12364288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 07:47 - 2014-09-19 17:44 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 07:47 - 2014-09-19 17:41 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 07:47 - 2014-09-19 17:39 - 01138688 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 07:47 - 2014-09-19 17:38 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 07:47 - 2014-09-19 17:37 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 07:47 - 2014-09-19 17:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-10-15 07:47 - 2014-09-19 17:36 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 07:47 - 2014-09-19 17:36 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 07:47 - 2014-09-19 17:35 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 07:47 - 2014-09-19 17:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-10-15 07:47 - 2014-09-19 17:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 07:47 - 2014-09-19 17:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 07:47 - 2014-09-19 17:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-10-15 07:47 - 2014-09-19 17:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 07:47 - 2014-09-19 17:34 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 07:47 - 2014-09-19 17:34 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 07:47 - 2014-09-19 17:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 07:47 - 2014-09-19 17:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-10-15 07:47 - 2014-09-19 17:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-10-15 07:47 - 2014-09-19 17:33 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-11 15:27 - 2013-09-27 22:33 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-11 15:14 - 2008-12-22 22:14 - 01343516 _____ () C:\Windows\WindowsUpdate.log
2014-11-11 15:14 - 2006-11-02 05:33 - 00759582 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-11 15:07 - 2008-12-22 22:21 - 00000000 _____ () C:\Windows\system32\LogConfigTemp.xml
2014-11-11 15:06 - 2013-09-27 22:33 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-11 15:06 - 2010-03-27 16:08 - 00052735 _____ () C:\ProgramData\nvModes.dat
2014-11-11 15:06 - 2010-03-27 16:08 - 00052735 _____ () C:\ProgramData\nvModes.001
2014-11-11 15:06 - 2008-01-20 21:47 - 00269760 _____ () C:\Windows\PFRO.log
2014-11-11 15:06 - 2006-11-02 08:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-11 15:06 - 2006-11-02 07:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-11 15:06 - 2006-11-02 07:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-11 15:04 - 2006-11-02 08:01 - 00032552 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-11 14:54 - 2012-09-21 12:17 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-10 21:07 - 2010-11-24 23:22 - 00000000 ____D () C:\Users\Owner\AppData\Local\CrashDumps
2014-11-10 10:07 - 2009-09-07 23:23 - 00006626 _____ () C:\Users\Owner\AppData\Roaming\wklnhst.dat
2014-11-10 10:06 - 2011-12-26 22:11 - 00000000 ____D () C:\Users\Owner\Documents\Dana
2014-11-06 21:27 - 2012-01-18 14:15 - 00001356 _____ () C:\Users\Owner\AppData\Local\d3d9caps.dat
2014-11-06 12:30 - 2009-02-15 09:29 - 00019225 _____ () C:\Windows\setupact.log
2014-11-06 12:27 - 2014-02-27 14:49 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\VERIZON
2014-11-02 17:01 - 2009-02-14 20:20 - 00002587 _____ () C:\Users\Owner\Desktop\Microsoft Office Word 2007.lnk
2014-11-01 10:54 - 2009-11-08 15:02 - 00000000 ____D () C:\Users\Owner\Desktop\CC
2014-10-25 08:26 - 2012-01-18 17:33 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-10-16 10:21 - 2006-11-02 06:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-16 07:21 - 2006-11-02 07:47 - 00380920 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-16 07:01 - 2008-10-29 21:40 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-16 06:56 - 2013-07-18 06:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-16 06:49 - 2006-11-02 05:24 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

Some content of TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\AskSLib.dll
C:\Users\Owner\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Owner\AppData\Local\Temp\GUR3908.exe
C:\Users\Owner\AppData\Local\Temp\GUR3A1B.exe
C:\Users\Owner\AppData\Local\Temp\GUR4438.exe
C:\Users\Owner\AppData\Local\Temp\GUR7BBE.exe
C:\Users\Owner\AppData\Local\Temp\InstallFlashPlayer.exe
C:\Users\Owner\AppData\Local\Temp\jre-6u17-windows-i586-iftw-rv.exe
C:\Users\Owner\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe
C:\Users\Owner\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Users\Owner\AppData\Local\Temp\_is2A79.exe
C:\Users\Owner\AppData\Local\Temp\_isCFAD.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-11-11 15:16

==================== End Of Log ============================


Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-11-2014
Ran by Owner at 2014-11-11 15:52:12
Running from C:\Users\Owner\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton AntiVirus (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton AntiVirus (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader 8.2.0 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A82000000003}) (Version: 8.2.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.6.636 - Adobe Systems, Inc.)
Agere Systems PCI-SV92PP Soft Modem (HKLM\...\Agere Systems Soft Modem) (Version:  - Agere Systems)
Apple Application Support (HKLM\...\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}) (Version: 2.1.7 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
BigFix (HKLM\...\{34FF0741-EC67-4C05-AC2A-6D257123DF2E}) (Version: 2.2.0.04 - BigFix)
Bing Bar (HKLM\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BufferChm (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Cards_Calendar_OrderGift_DoMorePlugout (Version: 2.03.0000 - Hewlett-Packard) Hidden
Citrix Presentation Server Client (HKLM\...\{2624B680-02BC-4CBC-839C-DA20DF6EF6EC}) (Version: 10.200.2650 - Citrix Systems, Inc.)
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (Version: 110.0.180.000 - Hewlett-Packard) Hidden
CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
CyberLink LabelPrint (HKLM\...\{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.0.3111 - CyberLink Corp.)
CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.2115 - CyberLink Corp.)
Destination Component (Version: 110.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 110.0.180.000 - Hewlett-Packard) Hidden
DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Digital Media Reader (HKLM\...\InstallShield_{BE2CC4A5-2128-4EA2-941D-14F7A6A1AB61}) (Version: 2.01.03.01 - AlcorMicro)
Digital Media Reader (Version: 2.01.03.01 - AlcorMicro) Hidden
DJ_AIO_03_F4200_ProductContext (Version: 110.0.206.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software (Version: 110.0.206.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (Version: 110.0.206.000 - Hewlett-Packard) Hidden
eMachines Recovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 3.1.3003 - Acer Incorporated)
eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
F4200 (Version: 110.0.206.000 - Hewlett-Packard) Hidden
F4200_Help (Version: 110.0.206.000 - Hewlett-Packard) Hidden
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden
GPBaseService (Version: 110.0.180.000 - Hewlett-Packard) Hidden
GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 11.0 (HKLM\...\HPExtendedCapabilities) (Version: 11.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 11.0 Rel .3 (HKLM\...\{C3B6AEB1-390C-4792-8677-CD87F8B2C959}) (Version: 11.0 - HP)
HP Imaging Device Functions 11.0 (HKLM\...\HP Imaging Device Functions) (Version: 11.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing (HKLM\...\HP Smart Web Printing) (Version: 4.0 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.002 - Hewlett-Packard)
HPPhotoSmartDiscLabelContent1 (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Java™ 6 Update 23 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216011FF}) (Version: 6.0.230 - Sun Microsystems, Inc.)
Java™ 6 Update 5 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160050}) (Version: 1.6.0.50 - Sun Microsystems, Inc.)
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
LeapFrog Connect (HKLM\...\UPCShell) (Version: 4.2.14.16426 - LeapFrog)
LeapFrog Connect (Version: 4.2.14.16426 - LeapFrog) Hidden
LeapFrog My Pals Plugin (Version: 4.2.9.15649 - LeapFrog) Hidden
LSI PCI-SV92PP Soft Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.98 - LSI Corporation)
Malwarebytes Anti-Malware version 1.61.0.1400 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.61.0.1400 - Malwarebytes Corporation)
MarketResearch (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Automated Troubleshooting Services Shim (HKLM\...\{c9920352-04e6-469d-bab8-e2b9c7c75415}.sdb) (Version:  - )
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.4 (HKLM\...\{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}) (Version: 2.0.3008.0 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{67E03279-F703-408F-B4BF-46B5FC8D70CD}) (Version: 9.7.0621 - Microsoft Corporation)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSVCSetup (Version: 1.00.0000 - HP) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NETGEAR WNA1100 wireless USB 2.0 adapter (HKLM\...\{A2AE9709-283B-4B48-AA34-729C070A62FB}) (Version: 1.0.0.133 - NETGEAR)
Norton AntiVirus (HKLM\...\NAV) (Version: 21.6.0.32 - Symantec Corporation)
Norton Identity Safe (HKLM\...\NST) (Version: 2014.7.8.23 - Symantec Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Pinnacle Instant DVD Recorder (HKLM\...\{C1212AE3-DBB9-4365-8473-F8ABC7B06BBB}) (Version: 2.5.0.090 - Pinnacle Systems)
Pinnacle Studio 12 (HKLM\...\{D041EB9E-890A-4098-8F94-51DA194AC72A}) (Version: 12.0.1.6173 - Pinnacle Systems)
Pinnacle Video Driver (HKLM\...\{5EB90C06-964F-4195-B83E-BD7E55C88415}) (Version: 12.00.0017 - Pinnacle Systems)
PSSWCORE (Version: 2.03.0000 - Hewlett-Packard) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime (HKLM\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5643 - Realtek Semiconductor Corp.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.999 - SAMSUNG Electronics Co., Ltd.)
Scan (Version: 11.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 11.0 - HP)
SmartWebPrinting (Version: 110.0.182.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (Version: 110.0.180.000 - Hewlett-Packard) Hidden
SUABnR (HKLM\...\InstallShield_{2485354C-6B65-4978-BB91-CCE61442377B}) (Version: 1.1.0.13103_1 - Samsung Electronics Co., Ltd.)
SUABnR (Version: 1.1.0.13103_1 - Samsung Electronics Co., Ltd.) Hidden
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.0.1142 - SUPERAntiSpyware.com)
SureThing Express Labeler (HKLM\...\stax-Pinnacle_is1) (Version:  - MicroVision Development, Inc.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (Version: 110.0.180.000 - Hewlett-Packard) Hidden
TrayApp (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Use the entry named LeapFrog Connect to uninstall (LeapFrog My Pals Plugin) (HKLM\...\MyPalsPlugin) (Version:  - LeapFrog)
Verizon Wireless Software Upgrade Assistant - Samsung(ar) (HKLM\...\{A3070098-A41D-42D9-B6D3-2EF15285E719}) (Version: 2.14.0605 - Samsung Electronics Co., Ltd.)
Verizon Wireless Software Utility Application for Android - Samsung (HKLM\...\{69258FD1-F4EE-475A-83D1-BF68C8029592}) (Version: 2.14.0402 - Samsung Electronics Co., Ltd.)
VideoToolkit01 (Version: 110.0.171.000 - Hewlett-Packard) Hidden
WebReg (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net  (09/10/2009 02.03.05.012) (HKLM\...\8F14F2ECEDE68D26EA515B48DC25B39103C4FE8D) (Version: 09/10/2009 02.03.05.012 - Leapfrog)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (HKLM\...\{10A44844-4465-456E-8C97-80BDD4F68845}) (Version: 6.500.3146.0 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Yahoo! Messenger (HKLM\...\Yahoo! Messenger) (Version:  - Yahoo! Inc.)
Yahoo! Software Update (HKLM\...\Yahoo! Software Update) (Version:  - )
Yahoo! Toolbar (HKLM\...\Yahoo! Companion) (Version:  - Yahoo! Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2727267033-796428107-372778226-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.21.57\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2727267033-796428107-372778226-1000_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.21.69\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2727267033-796428107-372778226-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.2.183.39\goopdate.dll No File
CustomCLSID: HKU\S-1-5-21-2727267033-796428107-372778226-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Owner\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-2727267033-796428107-372778226-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.21.65\psuser.dll No File

==================== Restore Points  =========================

25-09-2014 11:57:30 Windows Update
16-10-2014 11:43:04 Windows Update
18-10-2014 01:01:11 Scheduled Checkpoint
22-10-2014 12:03:58 Scheduled Checkpoint
24-10-2014 12:10:34 Scheduled Checkpoint
07-11-2014 02:25:02 Installed Photobucket Backup
09-11-2014 02:48:57 Removed Photobucket Backup
09-11-2014 03:03:25 Removed Photobucket Backup
11-11-2014 17:47:16 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 05:23 - 2006-09-18 16:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05FFF2A8-E579-4C71-9C12-3BFE83DDEA54} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {0AFC4485-1471-4884-87AB-C226531EBF7F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-23] (Adobe Systems Incorporated)
Task: {30415B86-F876-45AE-B25C-4D7B7B14B42B} - System32\Tasks\Norton AntiVirus\Norton Error Analyzer => C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {40C1A313-0965-46ED-9089-6BE9281365CC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-27] (Google Inc.)
Task: {59E39D60-7B3A-4789-B2AF-1CDBA6F0F83F} - System32\Tasks\Norton AntiVirus\Norton Error Processor => C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {621A717F-CFEC-4967-B06D-B9AC33832024} - \3707944888 No Task File <==== ATTENTION
Task: {745D73B5-3B89-494C-8C16-BF1DF9742A50} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-27] (Google Inc.)
Task: {7C19F4ED-8C2E-4F32-91BA-C4E7985F24D8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {90B15F30-69C3-4FB6-97A3-4410567ECE6B} - System32\Tasks\winupd => C:\Users\Owner\AppData\Local\Temp:winupd.exe
Task: {9EF88257-C154-4F14-82F8-01FEF2DE7D9B} - System32\Tasks\chrome => Chrome.exe
Task: {B45FB18A-27CF-4F5C-95CC-66D68A501B69} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files\Norton Identity Safe\Engine\2014.7.8.23\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {C7545FC9-B99C-4A2D-88F9-3ECD7AFCA69C} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton AntiVirus\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2008-12-22 22:21 - 2008-06-11 14:18 - 00024576 _____ () C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
2008-12-22 22:21 - 2008-12-22 22:21 - 00032768 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.Controller\3.0.3009.0__14bcaafdb44b5951\Framework.Model.Controller.dll
2008-12-22 22:21 - 2008-12-22 22:21 - 00009216 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.3009.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll
2008-12-22 22:21 - 2008-12-22 22:21 - 00061440 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3009.0__3036420f80dd6947\Framework.Library.dll
2008-12-22 22:21 - 2008-12-22 22:21 - 00015360 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Host\3.0.3009.0__672b450de5a7e94a\Framework.Host.dll
2008-12-22 22:21 - 2008-12-22 22:21 - 00006144 _____ () C:\Windows\assembly\GAC_MSIL\Framework.PluginInterface\3.0.3009.0__9ecdf03bb2054f94\Framework.PluginInterface.dll
2008-12-22 22:21 - 2008-12-22 22:21 - 00036864 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3009.0__4df5dcab8860d239\Framework.Utility.dll
2011-04-26 23:40 - 2010-06-14 13:56 - 04573664 _____ () C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
2011-04-26 23:40 - 2009-08-28 15:50 - 00282624 _____ () C:\Program Files\NETGEAR\WNA1100\WifiSvcLib.dll
2011-04-26 23:40 - 2010-03-22 19:07 - 00268768 _____ () C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
2011-04-26 23:40 - 2010-03-10 13:50 - 00360448 _____ () C:\Program Files\NETGEAR\WNA1100\WifiLib.dll
2012-09-21 12:16 - 2012-05-25 03:25 - 00921600 _____ () C:\Program Files\Yahoo!\Messenger\yui.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BigFix.lnk => C:\Windows\pss\BigFix.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Owner^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk => C:\Windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: BlackBerryAutoUpdate => C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
MSCONFIG\startupreg: chrome => \\?\globalroot\Device\HarddiskVolume2\Users\Owner\AppData\Local\Temp\chrome.exe
MSCONFIG\startupreg: eRecoveryService =>
MSCONFIG\startupreg: Monitor => "C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe"
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-2727267033-796428107-372778226-500 - Administrator - Disabled)
Guest (S-1-5-21-2727267033-796428107-372778226-501 - Limited - Disabled)
Owner (S-1-5-21-2727267033-796428107-372778226-1000 - Administrator - Enabled) => C:\Users\Owner

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (11/11/2014 03:07:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/11/2014 03:06:50 PM) (Source: WinDefendRtp) (EventID: 3003) (User: )
Description: %Owner-PC27 Real-Time Protection checkpoint has encountered an error and failed to start.

 User: Owner-PC\Owner

 Checkpoint ID: 27

 Error Code: 0x80070005

 Error description: Access is denied.

Error: (11/11/2014 00:41:52 PM) (Source: WinDefendRtp) (EventID: 3003) (User: )
Description: %Owner-PC27 Real-Time Protection checkpoint has encountered an error and failed to start.

 User: Owner-PC\Owner

 Checkpoint ID: 27

 Error Code: 0x80070005

 Error description: Access is denied.

Error: (11/11/2014 00:36:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/11/2014 00:35:15 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Dependent Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/11/2014 00:35:14 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Dependent Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/11/2014 00:35:14 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Dependent Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/11/2014 00:35:14 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Dependent Assembly msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/10/2014 09:06:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application iexplore.exe, version 9.0.8112.16584, time stamp 0x4549b14d, faulting module AcroPDF.dll, version 8.2.0.81, time stamp 0x4b2b56b9, exception code 0xc0000005, fault offset 0x00013d36,
process id 0x3b60, application start time 0xiexplore.exe0.

Error: (11/10/2014 05:33:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:
=============
Error: (11/11/2014 03:08:45 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: i8042prt

Error: (11/11/2014 03:08:45 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service

Error: (11/11/2014 03:07:17 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {0228576F-6E6C-4E1A-B175-0E46A316AFE2}

Error: (11/11/2014 03:04:26 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: NVIDIA Display Driver Service32

Error: (11/11/2014 00:36:59 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: i8042prt

Error: (11/11/2014 00:36:58 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service

Error: (11/11/2014 00:36:53 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (11/11/2014 00:35:26 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {0228576F-6E6C-4E1A-B175-0E46A316AFE2}

Error: (11/10/2014 05:34:31 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: i8042prt

Error: (11/10/2014 05:34:31 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: HP CUE DeviceDiscovery Service

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-11-11 15:51:19.075
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:51:18.310
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:51:17.515
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:51:16.719
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:51:02.913
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton AntiVirus\NortonData\21.2.0.38\Definitions\BASHDefs\20141107.001\BHDrvx86.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:51:02.133
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton AntiVirus\NortonData\21.2.0.38\Definitions\BASHDefs\20141107.001\BHDrvx86.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:51:01.353
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton AntiVirus\NortonData\21.2.0.38\Definitions\BASHDefs\20141107.001\BHDrvx86.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:51:00.542
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton AntiVirus\NortonData\21.2.0.38\Definitions\BASHDefs\20141107.001\BHDrvx86.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:16:29.468
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-11 15:16:28.532
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: AMD Athlon™ Dual Core Processor 4050e
Percentage of memory in use: 50%
Total physical RAM: 2941.76 MB
Available physical RAM: 1441.88 MB
Total Pagefile: 6091.96 MB
Available Pagefile: 4477.93 MB
Total Virtual: 2047.88 MB
Available Virtual: 1891.55 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:288.09 GB) (Free:55.86 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: 5C4455CC)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=288.1 GB) - (Type=07 NTFS)

==================== End Of Log ============================



#12 Calimero72

Calimero72
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 11 November 2014 - 03:57 PM

I have turned Norton back on. Is that okay?



#13 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:13 PM

Posted 11 November 2014 - 03:59 PM

Hi,

warning.gif Malware Warning

All passwords should be changed immediately to include those used for banking, email, eBay, paypal and online forums from a CLEAN COMPUTER.

Step 1

Please download combofix.pngCombofix (by sUBs) and save it to your Desktop.

  • Disable the realtime-protection of your antivirus and anti-malware programs because they might interfere with the scan.
  • Start Combofix.exe and follow its instructions.
  • Do not use the computer while the scan is running. This may cause the program to stall.
  • When finished, a log file will be displayed (that can also be found at C:\Combofix.txt).
    Please copy and paste the contents of this file into your next post.

Note: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." after the scan, just restart the computer.
(You can find more detailed instructions in this guide on using Combofix.)


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#14 Calimero72

Calimero72
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Local time:10:13 AM

Posted 11 November 2014 - 04:09 PM

I'm running Combofix but just got a message stating that antispyware: Norton AntiVirus is active. I disabled Norton Antivirus Auto-Protect before I started the scan. What do I do?

#15 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:05:13 PM

Posted 11 November 2014 - 04:12 PM

Let the scan run...


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users