Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

COM Surrogate Combofix log HELP!!


  • This topic is locked This topic is locked
7 replies to this topic

#1 youngw

youngw

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:44 AM

Posted 10 November 2014 - 08:42 PM

I have numerous instances of browsers running and com surrogate flashes in and out of task manager.

Here is my combofix log.

Can anyone review and help.

Thanks

 

 

Attached Files



BC AdBot (Login to Remove)

 


m

#2 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:04:44 PM

Posted 11 November 2014 - 12:31 PM

Hi & :welcome: to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully: :exclame:
  • My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
  • Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
  • If I don't reply within 24 hours please PM me!
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
Step 1
logo.png
Please download Powelikscleaner (by ESET) and save it to your Desktop.
  • Double-click the 3.png to start the tool.
  • Read the terms of the End-user license agreement and click Agree if you agree to them.
  • The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.
  • If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.
  • The tool will produce a log in the same directory the tool was run from.
  • Please copy and paste the log in your next reply.
1.png
2.png

Step 2

Please run a FRST scan. This will help us diagnose your problem.

frst.pngfrstscan.png
Please download Farbar Recovery Scan Tool and save it to your Desktop.
(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)
  • Start FRST with administator privileges.
  • Make sure the option Addition.txt is checked and press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
  • Please copy and paste these logs in your next reply.
Step 3

frst.pngfrstsearch.png
  • Start FRST with Administrator privileges.
  • Write the following text into the Search textbox:
wuauclt.exe
  • Click on the Search Files button.
  • When finished, a log file (Search.txt) pops up and is saved to the same location the tool was run from.
  • Please copy and paste its contents in your next reply.

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#3 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:04:44 PM

Posted 14 November 2014 - 01:57 PM

Hi,

3 Day Inactivity

This is the third day since my last post. Are you still there?

If you need more time, just let me know.

If you do not post within 48 hours, this thread will be closed due to inactivity.
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#4 youngw

youngw
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:44 AM

Posted 15 November 2014 - 12:15 PM

Thank You

Sorry for the delay

Here are the logs:

[2014.11.15 11:33:36.553] - Begin
[2014.11.15 11:33:36.553] - 
[2014.11.15 11:33:36.553] -     ....................................
[2014.11.15 11:33:36.553] -   ..::::::::::::::::::....................
[2014.11.15 11:33:36.553] -   .::EEEEEE:::SSSSSS::..EEEEEE..TTTTTTTT..    Win32/Poweliks
[2014.11.15 11:33:36.553] -  .::EE::::EE:SS:::::::.EE....EE....TT......   Version: 1.0.0.1
[2014.11.15 11:33:36.553] -  .::EEEEEEEE::SSSSSS::.EEEEEEEE....TT......   Built: Oct 15 2014
[2014.11.15 11:33:36.568] -  .::EE:::::::::::::SS:.EE..........TT......
[2014.11.15 11:33:36.568] -   .::EEEEEE:::SSSSSS::..EEEEEE.....TT.....    Copyright © ESET, spol. s r.o.
[2014.11.15 11:33:36.568] -   ..::::::::::::::::::....................    1992-2013. All rights reserved.
[2014.11.15 11:33:36.568] -     ....................................
[2014.11.15 11:33:36.568] - 
[2014.11.15 11:33:36.568] - --------------------------------------------------------------------------------
[2014.11.15 11:33:36.568] - 
[2014.11.15 11:33:36.568] - INFO: OS: 6.1.7601 SP1
[2014.11.15 11:33:36.568] - INFO: Product Type: Workstation
[2014.11.15 11:33:36.568] - INFO: WoW64: True
[2014.11.15 11:33:36.568] - INFO: Machine guid: D28D6E86-C683-4278-8B2F-27FEA40D4ACC 
[2014.11.15 11:33:36.568] - 
[2014.11.15 11:33:38.409] - INFO: Scanning for system infection...
[2014.11.15 11:33:38.409] - --------------------------------------------------------------------------------
[2014.11.15 11:33:38.409] - 
[2014.11.15 11:33:38.409] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.15 11:33:38.409] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.15 11:33:38.409] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.15 11:33:38.409] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.15 11:33:38.409] - INFO: Processing classes...
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{08FB66B9-2D2D-4B35-A747-D5D9E9F472E2}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{0F9285DF-3511-4FE6-A587-CD8F61A121CA}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{1BFB1268-6353-495A-AB78-97BF7CAB4D59}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{220DFF67-87CE-4D26-8020-27E0B554A880}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{3063357E-821C-4A7D-B49A-F61EA772BF9B}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{53B5243F-8302-4DAD-BE8F-1D0665E8225E}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{699A646B-C61E-4C36-A253-620E4EBD294C}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{71FDCAEA-B6F2-4B6C-A18C-6C85F0E4662F}]
[2014.11.15 11:33:38.409] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{7E024D23-24D9-425B-B2E3-1BF397408365}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{8AC7E588-710D-47B7-A568-1E1FE30B29CC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{A1436E43-F58F-4D3B-B908-B6DA44563B00}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{A480C024-04D0-4F28-8CF0-ADACE2BD839C}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{B41AD4BE-25BA-4A51-A0BB-FC1584E316F1}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{C9E37353-EC76-4A58-B575-BBA8B4BD06D1}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.425] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.440] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.456] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBB}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBC}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{CD221623-4F9A-4FA5-A9EE-A77EC8F0E7BD}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{FD10EA6A-0D14-4AA2-A376-0C8D51CA8779}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{0F9285DF-3511-4FE6-A587-CD8F61A121CA}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{699A646B-C61E-4C36-A253-620E4EBD294C}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{71FDCAEA-B6F2-4B6C-A18C-6C85F0E4662F}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{7E024D23-24D9-425B-B2E3-1BF397408365}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{C9E37353-EC76-4A58-B575-BBA8B4BD06D1}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}]
[2014.11.15 11:33:38.471] - INFO: Processing clsid [\Registry\User\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}]
[2014.11.15 11:33:38.471] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.15 11:33:38.471] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.15 11:33:38.471] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.15 11:33:38.471] - INFO: Processing invalid values in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.15 11:33:38.471] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.15 11:33:38.471] - INFO: Processing value [ServerExecutable] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.15 11:33:38.471] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.15 11:33:38.471] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.15 11:33:38.471] - INFO: Processing invalid subkeys in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.15 11:33:38.471] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]...
[2014.11.15 11:33:38.471] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.15 11:33:38.471] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.15 11:33:38.471] - INFO: Win32/Poweliks not found
[2014.11.15 11:33:50.998] - End

FRST Log:

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2014
Ran by Will (administrator) on WILL-PC on 15-11-2014 11:49:11
Running from C:\Users\Will\Desktop
Loaded Profile: Will (Available profiles: Will)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Windows\System32\FXSSVC.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8610\Bin\ScanToPCActivationApp.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8610\Bin\HPNetworkCommunicatorCom.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2014-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2014-09-04] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\...\Run: [HP Officejet Pro 8610 (NET)] => C:\Program Files\HP\HP Officejet Pro 8610\Bin\ScanToPCActivationApp.exe [3485728 2013-09-11] (Hewlett-Packard Co.)
HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\...\Run: [Google Update] => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-06] (Google Inc.)
HKU\S-1-5-18\...\Policies\system: [WallpaperStyle] 2
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
BootExecute: autocheck autochk * sdnclean64.exe
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?ocid=U218DHP&pc=U218
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1me10IE11ENUS/WOL_WCP
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {35E9167E-0CF1-4A68-ABF3-7AE495F91469} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
SearchScopes: HKLM-x32 - DefaultScope {541D32AE-450B-4C2F-8F90-20681661974C} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {35E9167E-0CF1-4A68-ABF3-7AE495F91469} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
SearchScopes: HKCU - {35E9167E-0CF1-4A68-ABF3-7AE495F91469} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-2891818144-2896585444-3318740003-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Handler-x32: http - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 
FireFox:
========
FF ProfilePath: C:\Users\Will\AppData\Roaming\Mozilla\Firefox\Profiles\aknmkq4f.default
FF DefaultSearchUrl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&CUI=UN17218954048988253&UM=2&SearchSource=3&q={searchTerms}
FF Homepage: google.com
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&SearchSource=2&CUI=UN17218954048988253&UM=2&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8064.0206 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2891818144-2896585444-3318740003-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2891818144-2896585444-3318740003-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Will\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Will\AppData\Roaming\Mozilla\Firefox\Profiles\aknmkq4f.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2009-08-21]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-10-30]
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://google.com/"
CHR Profile: C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-22]
CHR Extension: (Google Wallet) - C:\Users\Will\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-23]
CHR HKLM-x32\...\Chrome\Extension: [acaoakiamfeidcmgooclgeleejkbaecf] - C:\Program Files (x86)\WinToFlash Suggestor\WinToFlashSuggestor.crx []
CHR HKLM-x32\...\Chrome\Extension: [cbjibcbpmbcabnfnohhgjjmkgkimajko] - C:\Users\Will\AppData\Local\CRE\cbjibcbpmbcabnfnohhgjjmkgkimajko.crx [2013-10-17]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation)
R2 AMD External Events Utility; C:\Windows\SysWOW64\atiesrxx.exe [0 2013-11-02] () [File not signed]
S3 EFS; C:\Windows\SysWOW64\lsass.exe [0 2013-11-02] () [File not signed]
R2 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [File not signed]
R2 HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [121344 2010-03-24] (Hewlett-Packard) [File not signed]
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [174592 2012-12-04] (HP) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R3 KeyIso; C:\Windows\SysWOW64\lsass.exe [0 2013-11-02] () [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed]
S3 Netlogon; C:\Windows\SysWOW64\lsass.exe [0 2013-11-02] () [File not signed]
S3 ProtectedStorage; C:\Windows\SysWOW64\lsass.exe [0 2013-11-02] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] ()
R2 SamSs; C:\Windows\SysWOW64\lsass.exe [0 2013-11-02] () [File not signed]
R2 Spooler; C:\Windows\SysWOW64\spoolsv.exe [0 2013-11-02] () [File not signed]
S2 sppsvc; C:\Windows\SysWOW64\sppsvc.exe [0 2013-11-03] () [File not signed]
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe [240128 2009-07-21] (IDT, Inc.)
S3 VaultSvc; C:\Windows\SysWOW64\lsass.exe [0 2013-11-02] () [File not signed]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-01] (HTC, Corporation) [File not signed]
S3 motandroidusb; C:\Windows\System32\Drivers\motoandroid.sys [31744 2009-07-10] (Motorola) [File not signed]
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [50688 2010-04-19] (Apple, Inc.) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 SWVNIC; system32\DRIVERS\swvnic.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-11-15 11:49 - 2014-11-15 11:50 - 00015876 _____ () C:\Users\Will\Desktop\FRST.txt
2014-11-15 11:48 - 2014-11-15 11:49 - 00000000 ____D () C:\FRST
2014-11-15 11:33 - 2014-11-15 11:33 - 00290100 _____ () C:\Users\Will\Desktop\ESETPoweliksCleaner.exe_20141115.113336.3152.log
2014-11-15 11:32 - 2014-11-15 11:32 - 00002969 _____ () C:\Users\Will\Desktop\test.txt
2014-11-15 11:31 - 2014-11-15 11:31 - 02116608 _____ (Farbar) C:\Users\Will\Desktop\FRST64.exe
2014-11-15 11:25 - 2014-11-15 11:25 - 00186568 _____ (ESET) C:\Users\Will\Desktop\ESETPoweliksCleaner.exe
2014-11-15 07:46 - 2014-11-15 08:24 - 00000000 ____D () C:\Users\Will\Desktop\Total Backup
2014-11-15 06:45 - 2014-11-15 06:45 - 00000000 ____D () C:\Users\Will\AppData\Roaming\EncryptStick
2014-11-12 22:07 - 2014-11-12 22:07 - 02515293 _____ () C:\Users\Will\Downloads\leads_6880.xls
2014-11-12 20:16 - 2014-11-12 20:16 - 00000000 __SHD () C:\Users\Will\AppData\Local\EmieBrowserModeList
2014-11-12 08:25 - 2014-11-07 14:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 08:25 - 2014-11-07 14:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 08:25 - 2014-11-05 23:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 08:25 - 2014-11-05 23:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 08:25 - 2014-11-05 22:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 08:25 - 2014-11-05 22:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 08:25 - 2014-11-05 22:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 08:25 - 2014-11-05 22:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 08:25 - 2014-11-05 22:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 08:25 - 2014-11-05 22:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 08:25 - 2014-11-05 22:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 08:25 - 2014-11-05 22:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 08:25 - 2014-11-05 22:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 08:25 - 2014-11-05 22:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 08:25 - 2014-11-05 22:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 08:25 - 2014-11-05 22:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 08:25 - 2014-11-05 22:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 08:25 - 2014-11-05 22:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 08:25 - 2014-11-05 22:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 08:25 - 2014-11-05 22:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 08:25 - 2014-11-05 22:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 08:25 - 2014-11-05 22:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 08:25 - 2014-11-05 22:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 08:25 - 2014-11-05 22:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 08:25 - 2014-11-05 22:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 08:25 - 2014-11-05 22:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 08:25 - 2014-11-05 22:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 08:25 - 2014-11-05 22:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 08:25 - 2014-11-05 21:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 08:25 - 2014-11-05 21:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 08:25 - 2014-11-05 21:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 08:25 - 2014-11-05 21:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 08:25 - 2014-11-05 21:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 08:25 - 2014-11-05 21:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 08:25 - 2014-11-05 21:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 08:25 - 2014-11-05 21:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 08:25 - 2014-11-05 21:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 08:25 - 2014-11-05 21:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 08:25 - 2014-11-05 21:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 08:25 - 2014-11-05 21:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 08:25 - 2014-11-05 21:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 08:25 - 2014-11-05 21:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 08:25 - 2014-11-05 21:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 08:25 - 2014-11-05 21:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 08:25 - 2014-11-05 21:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 08:25 - 2014-11-05 21:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 08:25 - 2014-11-05 21:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 08:25 - 2014-11-05 20:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 08:25 - 2014-11-05 20:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 08:25 - 2014-11-05 20:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 08:25 - 2014-11-05 20:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 08:25 - 2014-11-05 12:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 08:25 - 2014-11-05 12:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 08:25 - 2014-11-05 12:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 08:25 - 2014-10-13 21:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 08:25 - 2014-10-13 21:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 08:25 - 2014-10-13 21:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 08:25 - 2014-10-13 21:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 08:25 - 2014-10-13 21:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 08:25 - 2014-10-13 20:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 08:25 - 2014-10-13 20:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 08:25 - 2014-10-13 20:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 08:25 - 2014-10-13 20:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 08:24 - 2014-11-05 23:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 08:24 - 2014-11-05 22:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 08:24 - 2014-11-05 22:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 08:24 - 2014-11-05 22:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 08:24 - 2014-11-05 21:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 08:23 - 2014-10-02 21:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 08:23 - 2014-10-02 21:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 08:23 - 2014-10-02 21:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 08:23 - 2014-10-02 21:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 08:23 - 2014-10-02 21:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 08:23 - 2014-10-02 20:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 08:23 - 2014-10-02 20:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 08:23 - 2014-10-02 20:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 08:23 - 2014-09-19 04:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-12 08:23 - 2014-09-19 04:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 08:23 - 2014-09-19 04:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 08:23 - 2014-09-19 04:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 08:23 - 2014-09-19 04:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 08:23 - 2014-09-19 04:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 08:23 - 2014-09-19 04:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 08:23 - 2014-09-19 04:23 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-12 08:23 - 2014-09-19 04:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 08:23 - 2014-09-19 04:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 08:23 - 2014-09-19 04:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 08:23 - 2014-09-19 04:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 08:23 - 2014-09-19 04:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 08:23 - 2014-09-19 04:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 08:23 - 2014-08-21 01:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 08:23 - 2014-08-21 01:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 08:23 - 2014-08-21 01:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 08:23 - 2014-08-21 01:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 08:23 - 2014-08-11 21:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 08:22 - 2014-10-24 20:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 08:22 - 2014-10-24 20:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 08:22 - 2014-10-17 21:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 08:22 - 2014-10-17 20:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 08:22 - 2014-10-13 21:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 08:22 - 2014-10-13 20:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 08:22 - 2014-10-09 19:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 08:22 - 2014-08-11 20:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-10 21:34 - 2014-11-15 11:48 - 00004772 _____ () C:\Windows\setupact.log
2014-11-10 21:34 - 2014-11-10 21:34 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-10 20:51 - 2014-11-10 20:51 - 00856724 _____ () C:\Users\Will\Downloads\ZOTAC WinUSB Maker v1.1.zip
2014-11-10 20:12 - 2014-11-10 20:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-10 07:55 - 2014-11-10 07:55 - 00017920 _____ () C:\Users\Will\Desktop\360 Realty.xls
2014-11-07 15:33 - 2014-11-07 15:34 - 105058767 _____ () C:\Users\Will\Downloads\Audio_Realtek_6.0.1.6215_W7x64_A.zip
2014-11-07 15:17 - 2014-11-07 15:18 - 63158642 _____ () C:\Users\Will\Downloads\VGA_Intel_8.15.10.2219_W7x64_A.zip
2014-11-07 15:06 - 2014-11-07 15:07 - 123541937 _____ () C:\Users\Will\Downloads\Lan_Intel_11.8.74.0_W7x64_A.zip
2014-10-31 17:06 - 2014-10-31 17:06 - 00016969 _____ () C:\ComboFix.txt
2014-10-31 15:58 - 2014-10-31 15:58 - 00000085 _____ () C:\Windows\wininit.ini
2014-10-31 09:23 - 2014-10-31 09:23 - 00000168 _____ () C:\Users\Will\Downloads\ATT00001.htm
2014-10-31 07:22 - 2014-10-31 07:22 - 00346982 _____ () C:\Users\Will\Downloads\requesteddocumentsfor45continentalplace.zip
2014-10-30 14:56 - 2014-10-30 15:06 - 00002465 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk
2014-10-30 14:56 - 2014-10-30 15:06 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk
2014-10-30 14:56 - 2014-10-30 15:06 - 00002026 _____ () C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
2014-10-30 14:56 - 2014-10-30 15:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2
2014-10-29 08:50 - 2011-06-26 01:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-10-29 08:50 - 2010-11-07 12:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-10-29 08:50 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-10-29 08:50 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-10-29 08:50 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-10-29 08:50 - 2000-08-30 19:00 - 00098816 _____ () C:\Windows\sed.exe
2014-10-29 08:50 - 2000-08-30 19:00 - 00080412 _____ () C:\Windows\grep.exe
2014-10-29 08:50 - 2000-08-30 19:00 - 00068096 _____ () C:\Windows\zip.exe
2014-10-29 08:49 - 2014-10-31 17:06 - 00000000 ____D () C:\Qoobox
2014-10-29 08:48 - 2014-10-31 17:03 - 00000000 ____D () C:\Windows\erdnt
2014-10-21 13:16 - 2014-10-21 13:16 - 00064994 _____ () C:\Users\Will\Documents\Document2.tif
2014-10-20 10:39 - 2014-10-20 10:39 - 00002064 _____ () C:\Users\Will\Downloads\realestate.RDP
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-11-15 11:42 - 2009-07-13 23:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-15 11:42 - 2009-07-13 23:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-15 11:39 - 2009-07-14 00:13 - 00796870 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-15 11:38 - 2010-02-16 13:47 - 01368765 _____ () C:\Windows\WindowsUpdate.log
2014-11-15 11:35 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-15 11:34 - 2014-04-10 07:10 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000UA.job
2014-11-15 11:24 - 2012-10-10 12:26 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-15 10:24 - 2014-07-01 06:39 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForWill
2014-11-15 10:24 - 2014-07-01 06:39 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForWill.job
2014-11-15 10:02 - 2014-04-15 06:15 - 00000000 ____D () C:\Users\Will\Desktop\Workout
2014-11-15 08:00 - 2014-03-30 05:58 - 00000000 ____D () C:\Users\Will\Desktop\Wills Stuff
2014-11-15 07:58 - 2014-06-04 10:15 - 00000000 ____D () C:\Users\Will\Desktop\Nicole Clients
2014-11-15 06:33 - 2014-04-10 07:10 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000Core.job
2014-11-15 06:28 - 2014-04-10 07:10 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000UA
2014-11-15 06:28 - 2014-04-10 07:10 - 00003476 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000Core
2014-11-15 06:26 - 2014-08-25 18:21 - 02056751 _____ () C:\Users\Will\Downloads\BrowserHistorySpy.zip
2014-11-12 11:12 - 2009-07-13 23:45 - 00378176 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 11:10 - 2014-05-07 18:13 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 08:01 - 2012-10-10 12:26 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-12 08:01 - 2012-10-10 12:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-12 08:01 - 2012-10-10 12:26 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-11 07:47 - 2012-05-06 19:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-10 16:23 - 2010-05-14 21:53 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-11-01 07:03 - 2010-08-24 23:45 - 00000000 ____D () C:\Program Files (x86)\Motorola
2014-10-31 17:06 - 2010-02-23 10:34 - 00000000 ____D () C:\Users\Will\AppData\Local\Apps\2.0
2014-10-31 17:03 - 2009-07-13 21:34 - 00000215 _____ () C:\Windows\system.ini
2014-10-31 15:59 - 2014-01-23 08:29 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-10-31 15:58 - 2014-01-23 08:29 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-31 06:55 - 2011-06-10 13:33 - 00098392 _____ () C:\Users\Will\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-30 14:53 - 2009-08-21 09:42 - 00000000 ____D () C:\ProgramData\Adobe
2014-10-30 07:51 - 2014-06-29 08:01 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-10-29 09:03 - 2010-02-16 14:21 - 00000000 ____D () C:\Users\Will
2014-10-28 05:34 - 2010-02-16 14:38 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-27 09:13 - 2012-04-27 13:32 - 07268352 ___SH () C:\Users\Will\Desktop\Thumbs.db
 
Files to move or delete:
====================
C:\Users\Will\BootSect.exe
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-09-16 04:46
 
==================== End Of Log ============================

Addition Log:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2014
Ran by Will at 2014-11-15 11:51:27
Running from C:\Users\Will\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.12 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Connect Add-in (HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\...\Adobe Connect Add-in) (Version:  - )
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
AMD USB Filter Driver (HKLM-x32\...\{5271C0D4-24E4-4C3D-A782-C012033FD3CF}) (Version: 1.0.10.84 - Advanced Micro Devices, Inc.)
ATI Catalyst Install Manager (HKLM\...\{6C47240C-016E-03B5-D13E-AECAED09F2E3}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
BitTorrent (HKLM-x32\...\BitTorrent) (Version: 7.0.0 - BitTorrent Inc.)
Brother MFL-Pro Suite (HKLM-x32\...\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 1.00 - Brother Industries, Ltd.)
ccc-core-static (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3101 - CyberLink Corp.)
DdcvWeb (x32 Version: 6.8.2300 - <no manufacturer>) Hidden
Galaxy Nexus ToolKit (HKLM-x32\...\GalaxyNexusToolKit70) (Version: 7.0.0.0 - skipsoft)
Google Chrome (HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
HP DVD Play 3.7 (HKLM-x32\...\{45D707E9-F3C4-11D9-A373-0050BAE317E1}) (Version: 3.7.0.6623 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.0.71 - WildTangent)
HP LaserJet Pro MFP M127-M128 (HKLM-x32\...\{3b050369-8d19-413d-9dec-84ff278472eb}) (Version: 8.0.13192.945 - Hewlett-Packard)
HP Officejet 6700 Basic Device Software (HKLM\...\{A1CFA587-90D4-4DE6-B200-68CC0F92252F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 6700 Help (HKLM-x32\...\{E1AE0CB7-1333-4728-8520-CB3F88A252B4}) (Version: 140.0.2.2 - Hewlett Packard)
HP Officejet 6700 Product Improvement Study (HKLM\...\{988D55BB-08DE-43C9-8D16-3751361E2A79}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet Pro 8610 Basic Device Software (HKLM\...\{3082CB96-66E8-456D-8326-118A4F5DC0C6}) (Version: 32.0.90.45518 - Hewlett-Packard Co.)
HP Quick Launch Buttons (HKLM-x32\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.3.1 - Hewlett-Packard)
HP Setup (HKLM-x32\...\{F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}) (Version: 1.2.3220.3079 - Hewlett-Packard)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Support Assistant (HKLM-x32\...\{B60DCA15-56A3-4D2D-8747-22CF7D7B588B}) (Version: 4.4.6.3 - Hewlett-Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP User Guides 0148 (HKLM-x32\...\{9D3318E1-5A9F-4A95-A7A1-7E045403AE34}) (Version: 1.01.0005 - Hewlett-Packard)
HP Wireless Assistant (HKLM-x32\...\{54CC7901-804D-4155-B353-21F0CC9112AB}) (Version: 3.50.9.1 - Hewlett-Packard)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
hpbDSService (x32 Version: 002.002.07399 - Hewlett-Packard) Hidden
hpbM128DSService (x32 Version: 001.001.08254 - Hewlett-Packard) Hidden
HPDXP (x32 Version: 3.0.26.40 - HP) Hidden
HPLJDXPHelper (x32 Version: 060.048.005 - HP) Hidden
HPLJProMFPM127M128 (HKLM-x32\...\{B5409C23-DE0C-4B48-8C8A-50AE38694955}) (Version: 1.00.0000 - Hewlett-Packard)
HPLJUTCore (x32 Version: 008.000.0001 - HP) Hidden
HPLJUTM127_128 (x32 Version: 008.000.0001 - HP) Hidden
hppLaserJetService (x32 Version: 009.033.00905 - Hewlett-Packard) Hidden
hppM125LaserJetService (x32 Version: 001.032.00682 - Hewlett-Packard) Hidden
hpStatusAlerts (x32 Version: 080.040.00171 - Hewlett Packard) Hidden
hpStatusAlertsM127-M128 (x32 Version: 080.046.00111 - Hewlett-Packard) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
iTunes (HKLM\...\{53529DAD-F7C9-476E-87CC-1547C4E3E821}) (Version: 9.2.0.61 - Apple Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
JavaFX 2.0.3 (HKLM-x32\...\{1111706F-666A-4037-7777-203328764D10}) (Version: 2.0.3 - Oracle Corporation)
Junk Mail filter update (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe)
LJDXPHelperUI (x32 Version: 060.048.005 - HP) Hidden
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.1.94 - LSI Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Live Search Toolbar (HKLM-x32\...\{DF802C05-4660-418c-970C-B988ADB1D316}) (Version: 3.0.560.0 - Microsoft Live Search Toolbar)
Microsoft Office Home and Student 60 day trial (HKLM\...\OfficeTrial) (Version:  - )
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Web Publishing Wizard 1.52 (HKLM-x32\...\WebPost) (Version:  - )
Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
mkv2vob (HKLM-x32\...\{21AE04E8-EBF6-40DB-9AA9-B7A80C5D057D}) (Version: 2.4.9 - 3r1c)
Motorola Mobile Drivers Installation 4.7.1 (HKLM\...\{82ED9FB2-55AF-4A61-A6F3-506CEE112779}) (Version: 4.7.1 - Motorola Inc.)
Mozilla Firefox 33.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 en-US)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
National Mortgage Lending CompuCram (HKLM-x32\...\National Mortgage Lending CompuCram) (Version:  - )
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3101 - CyberLink Corp.)
Power2Go (x32 Version: 6.0.3101 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3101 - CyberLink Corp.)
PowerDirector (x32 Version: 7.0.3101 - CyberLink Corp.) Hidden
PowerRecover (x32 Version: 5.5.1923 - CyberLink Corp.) Hidden
PrintKey2000 (HKLM-x32\...\PrintKey2000) (Version:  - )
PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.50.1 - PS3 Media Server)
QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
QuickTime (HKLM-x32\...\{E7004147-2CCA-431C-AA05-2AB166B9785D}) (Version: 7.68.75.0 - Apple Inc.)
Realtek 8136 8168 8169 Ethernet Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0007 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30094 - Realtek Semiconductor Corp.)
REDX Lead Manager (HKLM-x32\...\{9067A29B-7FF1-4713-B653-6C86F371EF8E}) (Version: 6.1.71 - Real Estate Data X-Change)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.4.12 - Synaptics Incorporated)
TradeStation Futures (HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\...\b690125abf2c5f23) (Version: 2.0.13.15 - TradeStation)
VLC media player 2.0.0 (HKLM-x32\...\VLC media player) (Version: 2.0.0 - VideoLAN)
WBFS Manager 3.0 (HKLM-x32\...\WBFS Manager 3.0) (Version: 3.0 - AlexDP)
Windows Essentials Media Codec Pack 2.3d (HKLM-x32\...\Windows Essentials Media Codec Pack) (Version: 2.3d - Media Codec)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8064.0206 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}) (Version: 14.0.8064.206 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
Yahoo! Detect (HKLM-x32\...\YTdetect) (Version:  - )
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-2891818144-2896585444-3318740003-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Will\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2891818144-2896585444-3318740003-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Will\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2891818144-2896585444-3318740003-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Will\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
 
==================== Restore Points  =========================
 
07-10-2014 22:02:20 Removed RingCentral Softphone.
07-10-2014 22:35:35 Windows Update
14-10-2014 13:17:32 Windows Update
15-10-2014 15:07:48 Windows Update
19-10-2014 12:48:32 Windows Update
24-10-2014 11:04:14 Windows Update
28-10-2014 16:31:14 Windows Update
30-10-2014 19:43:17 Removed Adobe Acrobat X Pro - English, Français, Deutsch.
30-10-2014 19:52:19 Installed Adobe Acrobat X Pro - English, Français, Deutsch.
04-11-2014 12:05:24 Windows Update
07-11-2014 12:47:36 Windows Update
11-11-2014 11:38:40 Windows Update
12-11-2014 14:35:56 Windows Update
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 21:34 - 2014-10-30 14:50 - 00000542 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 adobe.activate.com
 
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {02903E24-8461-4475-A955-F2AAD238690F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000UA => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-06] (Google Inc.)
Task: {03BCA738-89F3-4623-A1F4-DB92ECB5869D} - System32\Tasks\HPCeeScheduleForWill => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07] (Hewlett-Packard)
Task: {1375FF21-4DA4-424B-9526-567C87E5A2FC} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-03-24] (Hewlett-Packard)
Task: {13D24CD6-E418-41EC-9915-AFE90A770A74} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000Core => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-06] (Google Inc.)
Task: {262DC630-3736-4CA0-B537-4126247BCFF0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-10-21] (Microsoft)
Task: {50B2AE59-672D-4FE9-A997-C2B8C8EF6F6D} - System32\Tasks\HPCustParticipation HP Officejet 6700 => C:\Program Files\HP\HP Officejet 6700\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {90F74584-7DD6-4969-A1C1-F65B84AB6E46} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-03-24] (Hewlett-Packard)
Task: {A9FDAB84-B68C-4843-B907-30A2A5221420} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2013-01-28] (Hewlett Packard)
Task: {C9E4DF9F-C3B8-47A3-B6DC-BB969C6049D4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Ghost Resign Task => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\HPResignFileLoader.exe [2014-10-21] (Microsoft)
Task: {D6974F38-1FB0-4E09-8978-E3598DE623F4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {E8501F4C-9146-435A-A3A8-25B0BCDF19C4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000Core.job => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000UA.job => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForWill.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
 
==================== Loaded Modules (whitelisted) =============
 
2009-08-21 10:00 - 2009-01-21 13:47 - 00247152 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2010-02-16 15:34 - 2005-04-22 16:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll
2010-02-28 08:59 - 2006-12-11 05:14 - 00043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\atashost => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
 
========================= Accounts: ==========================
 
Administrator (S-1-5-21-2891818144-2896585444-3318740003-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2891818144-2896585444-3318740003-1004 - Limited - Enabled)
Guest (S-1-5-21-2891818144-2896585444-3318740003-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2891818144-2896585444-3318740003-1002 - Limited - Enabled)
Will (S-1-5-21-2891818144-2896585444-3318740003-1000 - Administrator - Enabled) => C:\Users\Will
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: The index cannot be initialized.
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: The application cannot be initialized.
 
Context: Windows Application
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: The gatherer object cannot be initialized.
 
Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.
 
Context: Windows Application, SystemIndex Catalog
 
 
Details:
Element not found.  (HRESULT : 0x80070490) (0x80070490)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: The plug-in in <Search.JetPropStore> cannot be initialized.
 
Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: The Windows Search Service cannot load the property store information.
 
Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index database is corrupt.  (HRESULT : 0xc0041800) (0xc0041800)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: The search service has detected corrupted data files in the index {id=4700}. The service will attempt to automatically correct this problem by rebuilding the index.
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: The Windows Search Service cannot open the Jet property store.
 
 
Details:
0x%08x (0xc0041800 - The content index database is corrupt.  (HRESULT : 0xc0041800))
 
Error: (11/10/2014 09:34:55 PM) (Source: ESENT) (EventID: 455) (User: )
Description: Windows (3064) Windows: Error -1811 occurred while opening logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS000EB.log.
 
 
System errors:
=============
Error: (11/15/2014 11:15:07 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:06:53 AM on ‎11/‎15/‎2014 was unexpected.
 
Error: (11/15/2014 10:09:35 AM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
 
Error: (11/15/2014 10:09:34 AM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
 
Error: (11/14/2014 06:36:22 AM) (Source: NetBT) (EventID: 4319) (User: )
Description: A duplicate name has been detected on the TCP network.  The IP address of
the computer that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
 
Error: (11/14/2014 06:36:22 AM) (Source: NetBT) (EventID: 4319) (User: )
Description: A duplicate name has been detected on the TCP network.  The IP address of
the computer that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
 
Error: (11/14/2014 06:36:22 AM) (Source: NetBT) (EventID: 4319) (User: )
Description: A duplicate name has been detected on the TCP network.  The IP address of
the computer that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
 
Error: (11/14/2014 06:36:22 AM) (Source: NetBT) (EventID: 4319) (User: )
Description: A duplicate name has been detected on the TCP network.  The IP address of
the computer that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
 
Error: (11/13/2014 09:01:51 AM) (Source: NetBT) (EventID: 4321) (User: )
Description: The name "WORKGROUP      :1d" could not be registered on the interface with IP address 192.168.1.12.
The computer with the IP address 192.168.1.4 did not allow the name to be claimed by
this computer.
 
Error: (11/13/2014 09:01:44 AM) (Source: bowser) (EventID: 8003) (User: )
Description: The master browser has received a server announcement from the computer GLENNON-PC
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{480D2196-A806-4668-9A33-3D7FA061A4EC}.
The master browser is stopping or an election is being forced.
 
Error: (11/11/2014 00:32:45 PM) (Source: DCOM) (EventID: 10016) (User: Will-PC)
Description: machine-defaultLocalActivation{000C101C-0000-0000-C000-000000000046}{000C101C-0000-0000-C000-000000000046}Will-PCWillS-1-5-21-2891818144-2896585444-3318740003-1000LocalHost (Using LRPC)
 
 
Microsoft Office Sessions:
=========================
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Context: Windows Application
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Context: Windows Application, SystemIndex Catalog
 
 
Details:
Element not found.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index database is corrupt.  (HRESULT : 0xc0041800) (0xc0041800)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
4700
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: 
Details:
0x%08x (0xc0041800 - The content index database is corrupt.  (HRESULT : 0xc0041800))
 
Error: (11/10/2014 09:34:55 PM) (Source: ESENT) (EventID: 455) (User: )
Description: Windows3064Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS000EB.log-1811
 
 
CodeIntegrity Errors:
===================================
  Date: 2014-10-29 10:03:24.048
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-10-29 10:03:23.892
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
==================== Memory info =========================== 
 
Processor: AMD Sempron™ M100
Percentage of memory in use: 34%
Total physical RAM: 2812.2 MB
Available physical RAM: 1834.14 MB
Total Pagefile: 5622.58 MB
Available Pagefile: 4534.36 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:219.48 GB) (Free:71.34 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:13.11 GB) (Free:2.15 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 068F0963)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=219.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
 
==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2014
Ran by Will at 2014-11-15 11:51:27
Running from C:\Users\Will\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.12 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Connect Add-in (HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\...\Adobe Connect Add-in) (Version:  - )
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
AMD USB Filter Driver (HKLM-x32\...\{5271C0D4-24E4-4C3D-A782-C012033FD3CF}) (Version: 1.0.10.84 - Advanced Micro Devices, Inc.)
ATI Catalyst Install Manager (HKLM\...\{6C47240C-016E-03B5-D13E-AECAED09F2E3}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
BitTorrent (HKLM-x32\...\BitTorrent) (Version: 7.0.0 - BitTorrent Inc.)
Brother MFL-Pro Suite (HKLM-x32\...\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 1.00 - Brother Industries, Ltd.)
ccc-core-static (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3101 - CyberLink Corp.)
DdcvWeb (x32 Version: 6.8.2300 - <no manufacturer>) Hidden
Galaxy Nexus ToolKit (HKLM-x32\...\GalaxyNexusToolKit70) (Version: 7.0.0.0 - skipsoft)
Google Chrome (HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
HP DVD Play 3.7 (HKLM-x32\...\{45D707E9-F3C4-11D9-A373-0050BAE317E1}) (Version: 3.7.0.6623 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.0.71 - WildTangent)
HP LaserJet Pro MFP M127-M128 (HKLM-x32\...\{3b050369-8d19-413d-9dec-84ff278472eb}) (Version: 8.0.13192.945 - Hewlett-Packard)
HP Officejet 6700 Basic Device Software (HKLM\...\{A1CFA587-90D4-4DE6-B200-68CC0F92252F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 6700 Help (HKLM-x32\...\{E1AE0CB7-1333-4728-8520-CB3F88A252B4}) (Version: 140.0.2.2 - Hewlett Packard)
HP Officejet 6700 Product Improvement Study (HKLM\...\{988D55BB-08DE-43C9-8D16-3751361E2A79}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet Pro 8610 Basic Device Software (HKLM\...\{3082CB96-66E8-456D-8326-118A4F5DC0C6}) (Version: 32.0.90.45518 - Hewlett-Packard Co.)
HP Quick Launch Buttons (HKLM-x32\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.3.1 - Hewlett-Packard)
HP Setup (HKLM-x32\...\{F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}) (Version: 1.2.3220.3079 - Hewlett-Packard)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Support Assistant (HKLM-x32\...\{B60DCA15-56A3-4D2D-8747-22CF7D7B588B}) (Version: 4.4.6.3 - Hewlett-Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP User Guides 0148 (HKLM-x32\...\{9D3318E1-5A9F-4A95-A7A1-7E045403AE34}) (Version: 1.01.0005 - Hewlett-Packard)
HP Wireless Assistant (HKLM-x32\...\{54CC7901-804D-4155-B353-21F0CC9112AB}) (Version: 3.50.9.1 - Hewlett-Packard)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
hpbDSService (x32 Version: 002.002.07399 - Hewlett-Packard) Hidden
hpbM128DSService (x32 Version: 001.001.08254 - Hewlett-Packard) Hidden
HPDXP (x32 Version: 3.0.26.40 - HP) Hidden
HPLJDXPHelper (x32 Version: 060.048.005 - HP) Hidden
HPLJProMFPM127M128 (HKLM-x32\...\{B5409C23-DE0C-4B48-8C8A-50AE38694955}) (Version: 1.00.0000 - Hewlett-Packard)
HPLJUTCore (x32 Version: 008.000.0001 - HP) Hidden
HPLJUTM127_128 (x32 Version: 008.000.0001 - HP) Hidden
hppLaserJetService (x32 Version: 009.033.00905 - Hewlett-Packard) Hidden
hppM125LaserJetService (x32 Version: 001.032.00682 - Hewlett-Packard) Hidden
hpStatusAlerts (x32 Version: 080.040.00171 - Hewlett Packard) Hidden
hpStatusAlertsM127-M128 (x32 Version: 080.046.00111 - Hewlett-Packard) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
iTunes (HKLM\...\{53529DAD-F7C9-476E-87CC-1547C4E3E821}) (Version: 9.2.0.61 - Apple Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
JavaFX 2.0.3 (HKLM-x32\...\{1111706F-666A-4037-7777-203328764D10}) (Version: 2.0.3 - Oracle Corporation)
Junk Mail filter update (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe)
LJDXPHelperUI (x32 Version: 060.048.005 - HP) Hidden
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.1.94 - LSI Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Live Search Toolbar (HKLM-x32\...\{DF802C05-4660-418c-970C-B988ADB1D316}) (Version: 3.0.560.0 - Microsoft Live Search Toolbar)
Microsoft Office Home and Student 60 day trial (HKLM\...\OfficeTrial) (Version:  - )
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Web Publishing Wizard 1.52 (HKLM-x32\...\WebPost) (Version:  - )
Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
mkv2vob (HKLM-x32\...\{21AE04E8-EBF6-40DB-9AA9-B7A80C5D057D}) (Version: 2.4.9 - 3r1c)
Motorola Mobile Drivers Installation 4.7.1 (HKLM\...\{82ED9FB2-55AF-4A61-A6F3-506CEE112779}) (Version: 4.7.1 - Motorola Inc.)
Mozilla Firefox 33.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 en-US)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
National Mortgage Lending CompuCram (HKLM-x32\...\National Mortgage Lending CompuCram) (Version:  - )
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3101 - CyberLink Corp.)
Power2Go (x32 Version: 6.0.3101 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3101 - CyberLink Corp.)
PowerDirector (x32 Version: 7.0.3101 - CyberLink Corp.) Hidden
PowerRecover (x32 Version: 5.5.1923 - CyberLink Corp.) Hidden
PrintKey2000 (HKLM-x32\...\PrintKey2000) (Version:  - )
PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.50.1 - PS3 Media Server)
QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
QuickTime (HKLM-x32\...\{E7004147-2CCA-431C-AA05-2AB166B9785D}) (Version: 7.68.75.0 - Apple Inc.)
Realtek 8136 8168 8169 Ethernet Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0007 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30094 - Realtek Semiconductor Corp.)
REDX Lead Manager (HKLM-x32\...\{9067A29B-7FF1-4713-B653-6C86F371EF8E}) (Version: 6.1.71 - Real Estate Data X-Change)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.4.12 - Synaptics Incorporated)
TradeStation Futures (HKU\S-1-5-21-2891818144-2896585444-3318740003-1000\...\b690125abf2c5f23) (Version: 2.0.13.15 - TradeStation)
VLC media player 2.0.0 (HKLM-x32\...\VLC media player) (Version: 2.0.0 - VideoLAN)
WBFS Manager 3.0 (HKLM-x32\...\WBFS Manager 3.0) (Version: 3.0 - AlexDP)
Windows Essentials Media Codec Pack 2.3d (HKLM-x32\...\Windows Essentials Media Codec Pack) (Version: 2.3d - Media Codec)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8064.0206 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}) (Version: 14.0.8064.206 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
Yahoo! Detect (HKLM-x32\...\YTdetect) (Version:  - )
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-2891818144-2896585444-3318740003-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Will\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2891818144-2896585444-3318740003-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Will\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2891818144-2896585444-3318740003-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Will\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
 
==================== Restore Points  =========================
 
07-10-2014 22:02:20 Removed RingCentral Softphone.
07-10-2014 22:35:35 Windows Update
14-10-2014 13:17:32 Windows Update
15-10-2014 15:07:48 Windows Update
19-10-2014 12:48:32 Windows Update
24-10-2014 11:04:14 Windows Update
28-10-2014 16:31:14 Windows Update
30-10-2014 19:43:17 Removed Adobe Acrobat X Pro - English, Français, Deutsch.
30-10-2014 19:52:19 Installed Adobe Acrobat X Pro - English, Français, Deutsch.
04-11-2014 12:05:24 Windows Update
07-11-2014 12:47:36 Windows Update
11-11-2014 11:38:40 Windows Update
12-11-2014 14:35:56 Windows Update
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 21:34 - 2014-10-30 14:50 - 00000542 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 adobe.activate.com
 
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {02903E24-8461-4475-A955-F2AAD238690F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000UA => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-06] (Google Inc.)
Task: {03BCA738-89F3-4623-A1F4-DB92ECB5869D} - System32\Tasks\HPCeeScheduleForWill => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07] (Hewlett-Packard)
Task: {1375FF21-4DA4-424B-9526-567C87E5A2FC} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-03-24] (Hewlett-Packard)
Task: {13D24CD6-E418-41EC-9915-AFE90A770A74} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000Core => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe [2012-08-06] (Google Inc.)
Task: {262DC630-3736-4CA0-B537-4126247BCFF0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-10-21] (Microsoft)
Task: {50B2AE59-672D-4FE9-A997-C2B8C8EF6F6D} - System32\Tasks\HPCustParticipation HP Officejet 6700 => C:\Program Files\HP\HP Officejet 6700\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {90F74584-7DD6-4969-A1C1-F65B84AB6E46} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2010-03-24] (Hewlett-Packard)
Task: {A9FDAB84-B68C-4843-B907-30A2A5221420} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2013-01-28] (Hewlett Packard)
Task: {C9E4DF9F-C3B8-47A3-B6DC-BB969C6049D4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Ghost Resign Task => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\HPResignFileLoader.exe [2014-10-21] (Microsoft)
Task: {D6974F38-1FB0-4E09-8978-E3598DE623F4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {E8501F4C-9146-435A-A3A8-25B0BCDF19C4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000Core.job => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2891818144-2896585444-3318740003-1000UA.job => C:\Users\Will\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForWill.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
 
==================== Loaded Modules (whitelisted) =============
 
2009-08-21 10:00 - 2009-01-21 13:47 - 00247152 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2010-02-16 15:34 - 2005-04-22 16:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll
2010-02-28 08:59 - 2006-12-11 05:14 - 00043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\atashost => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
 
========================= Accounts: ==========================
 
Administrator (S-1-5-21-2891818144-2896585444-3318740003-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2891818144-2896585444-3318740003-1004 - Limited - Enabled)
Guest (S-1-5-21-2891818144-2896585444-3318740003-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2891818144-2896585444-3318740003-1002 - Limited - Enabled)
Will (S-1-5-21-2891818144-2896585444-3318740003-1000 - Administrator - Enabled) => C:\Users\Will
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: The index cannot be initialized.
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: The application cannot be initialized.
 
Context: Windows Application
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: The gatherer object cannot be initialized.
 
Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.
 
Context: Windows Application, SystemIndex Catalog
 
 
Details:
Element not found.  (HRESULT : 0x80070490) (0x80070490)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: The plug-in in <Search.JetPropStore> cannot be initialized.
 
Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: The Windows Search Service cannot load the property store information.
 
Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index database is corrupt.  (HRESULT : 0xc0041800) (0xc0041800)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: The search service has detected corrupted data files in the index {id=4700}. The service will attempt to automatically correct this problem by rebuilding the index.
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: The Windows Search Service cannot open the Jet property store.
 
 
Details:
0x%08x (0xc0041800 - The content index database is corrupt.  (HRESULT : 0xc0041800))
 
Error: (11/10/2014 09:34:55 PM) (Source: ESENT) (EventID: 455) (User: )
Description: Windows (3064) Windows: Error -1811 occurred while opening logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS000EB.log.
 
 
System errors:
=============
Error: (11/15/2014 11:15:07 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:06:53 AM on ‎11/‎15/‎2014 was unexpected.
 
Error: (11/15/2014 10:09:35 AM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
 
Error: (11/15/2014 10:09:34 AM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR2.
 
Error: (11/14/2014 06:36:22 AM) (Source: NetBT) (EventID: 4319) (User: )
Description: A duplicate name has been detected on the TCP network.  The IP address of
the computer that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
 
Error: (11/14/2014 06:36:22 AM) (Source: NetBT) (EventID: 4319) (User: )
Description: A duplicate name has been detected on the TCP network.  The IP address of
the computer that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
 
Error: (11/14/2014 06:36:22 AM) (Source: NetBT) (EventID: 4319) (User: )
Description: A duplicate name has been detected on the TCP network.  The IP address of
the computer that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
 
Error: (11/14/2014 06:36:22 AM) (Source: NetBT) (EventID: 4319) (User: )
Description: A duplicate name has been detected on the TCP network.  The IP address of
the computer that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
 
Error: (11/13/2014 09:01:51 AM) (Source: NetBT) (EventID: 4321) (User: )
Description: The name "WORKGROUP      :1d" could not be registered on the interface with IP address 192.168.1.12.
The computer with the IP address 192.168.1.4 did not allow the name to be claimed by
this computer.
 
Error: (11/13/2014 09:01:44 AM) (Source: bowser) (EventID: 8003) (User: )
Description: The master browser has received a server announcement from the computer GLENNON-PC
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{480D2196-A806-4668-9A33-3D7FA061A4EC}.
The master browser is stopping or an election is being forced.
 
Error: (11/11/2014 00:32:45 PM) (Source: DCOM) (EventID: 10016) (User: Will-PC)
Description: machine-defaultLocalActivation{000C101C-0000-0000-C000-000000000046}{000C101C-0000-0000-C000-000000000046}Will-PCWillS-1-5-21-2891818144-2896585444-3318740003-1000LocalHost (Using LRPC)
 
 
Microsoft Office Sessions:
=========================
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Context: Windows Application
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
 
Error: (11/10/2014 09:34:57 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Context: Windows Application, SystemIndex Catalog
 
 
Details:
Element not found.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Context: Windows Application, SystemIndex Catalog
 
 
Details:
The content index database is corrupt.  (HRESULT : 0xc0041800) (0xc0041800)
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
4700
 
Error: (11/10/2014 09:34:55 PM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: 
Details:
0x%08x (0xc0041800 - The content index database is corrupt.  (HRESULT : 0xc0041800))
 
Error: (11/10/2014 09:34:55 PM) (Source: ESENT) (EventID: 455) (User: )
Description: Windows3064Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS000EB.log-1811
 
 
CodeIntegrity Errors:
===================================
  Date: 2014-10-29 10:03:24.048
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2014-10-29 10:03:23.892
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
==================== Memory info =========================== 
 
Processor: AMD Sempron™ M100
Percentage of memory in use: 34%
Total physical RAM: 2812.2 MB
Available physical RAM: 1834.14 MB
Total Pagefile: 5622.58 MB
Available Pagefile: 4534.36 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:219.48 GB) (Free:71.34 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:13.11 GB) (Free:2.15 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 068F0963)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=219.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
 
==================== End Of Log ============================


#5 youngw

youngw
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:09:44 AM

Posted 15 November 2014 - 12:16 PM

Search Log:

 

Farbar Recovery Scan Tool (x64) Version: 14-11-2014
Ran by Will at 2014-11-15 11:56:02
Running from C:\Users\Will\Desktop
Boot Mode: Normal
 
================== Search Files: "wuauclt.exe" =============
 
C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7600.320_none_d5f64d30518fd000\wuauclt.exe
[2014-08-03 05:04][2014-05-14 11:23] 0058336 ____A (Microsoft Corporation) EAD9E413A6CEB9FD8E2AD9DC0716C061 [File is signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7600.256_none_d5f513f25190f276\wuauclt.exe
[2012-06-25 10:49][2012-06-02 17:19] 0057880 ____A (Microsoft Corporation) C1C03EA437EDDA8A7D4D8786E5AE6751 [File is signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.5.7601.17514_none_1f3413afc64d10c5\wuauclt.exe
[2013-05-20 11:56][2010-11-20 08:25] 0051200 ____A (Microsoft Corporation) 7FBFAA84FE176D9AE932ABC585AB68D5 [File is signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.3.7600.16385_none_8ca5655e8bc7dae9\wuauclt.exe
[2009-07-13 19:34][2009-07-13 20:39] 0051200 ____A (Microsoft Corporation) 0C12A2B863FEA45598134E3B6E379F88 [File is signed]
 
C:\Windows\SysWOW64\wuauclt.exe
[2013-11-02 18:49][2013-11-02 18:49] 0000000 ____A () 
 
C:\Windows\System32\wuauclt.exe
[2014-08-03 05:04][2014-05-14 11:23] 0058336 ____A (Microsoft Corporation) EAD9E413A6CEB9FD8E2AD9DC0716C061 [File is signed]
 
C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.5.7601.17514_none_1f3413afc64d10c5\wuauclt.exe
[2011-07-11 09:12][2010-11-20 08:25] 0051200 ____A (Microsoft Corporation) 7FBFAA84FE176D9AE932ABC585AB68D5 [File is signed]
 
C:\Windows\erdnt\cache64\wuauclt.exe
[2014-10-29 09:26][2014-05-14 11:23] 0058336 ____A (Microsoft Corporation) EAD9E413A6CEB9FD8E2AD9DC0716C061 [File is signed]
 
====== End Of Search ======


#6 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:04:44 PM

Posted 15 November 2014 - 12:41 PM

Hi,

warning.gif Malware Warning

All passwords should be changed immediately to include those used for banking, email, eBay, paypal and online forums from a CLEAN COMPUTER.

warning.gif No Resident Protection Warning

Always have one (and no more than one!) AntiVirus program, as the resident protection is absolutely a must-have on any Windows!
Nowadays we have plenty of free AV programs. This choice is up to you, but if I may recommend something, below you'll find two of my favorite ones:This is crucial for you, as I saw there's none AntiVirus program on your machine.

Please install one (and just one!) of the listed above or any other you'd like to have. It should be done before we will proceed any further.

 
warning.gif P2P Warning

Going over your logs I noticed that you have BitTorrent installed.
  • Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs.
  • They are a security risk which can make your computer susceptible to a wide variety of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites.
  • Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users.
  • The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications.
It is pretty much certain that if you continue to use P2P programs, you will get infected again.
I would recommend that you uninstall BitTorrent, however that choice is up to you. If you choose to remove these programs, you can do so via  hidden2.png > Control Panel > Add/Remove Programs.

If you wish to keep it, please do not use it until your computer is cleaned.

Step 1

Please download and install mbam.pngMalwarebytes Anti-Malware
  • Please open Malwarebytes Anti-Malware.
  • Please update the database by clicking on the "Update Now" button.
  • Following the update and click "Settings" [1] and go to "Detection and Protection" [2]
  • Make sure "Scan for Rootkits" is checked.
  • Click on Dashboard [3], then click on Scan Now [4] to start the scan.
    :exclame: If Malware or Potentially Unwanted Programs [PUPs] are found, you will receive a prompt so that you can decide what you want to do. I suggest "Quarantine All" [5]. Then click the button: Apply Actions. [6]
  • A window with an option to view the detailed log will appear.
    mbamlog.png
  • Click on "View detailed log".
  • After viewing the results, please click on the "Copy to Clipboard" button and then OK.
  • Return to our forum. Paste your log into your next reply.
mbameng.gif

Step 2

frst.pngfrstscan.png

Start FRST with administator privileges.
  • Make sure the following option is checked: addition.png
  • Press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
    Please copy and paste these logs in your next reply.

Edited by deeprybka, 15 November 2014 - 12:42 PM.

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#7 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:04:44 PM

Posted 18 November 2014 - 10:19 AM

Hi,

3 Day Inactivity

This is the third day since my last post. Are you still there?

If you need more time, just let me know.

If you do not post within 48 hours, this thread will be closed due to inactivity.
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#8 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:04:44 PM

Posted 20 November 2014 - 01:13 PM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users