Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

COM Surrogate issue? How do I fix this?


  • This topic is locked This topic is locked
12 replies to this topic

#1 idescrete

idescrete

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:56 PM

Posted 23 November 2014 - 01:18 AM

Hi everyone I'm freaking out right now because there's a program called COM surrogate taking a lot of cpu along with many random programs as well. Can anyone help me out ? 



BC AdBot (Login to Remove)

 


#2 idescrete

idescrete
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:56 PM

Posted 23 November 2014 - 01:52 AM

I'm sorry if I didn't format this correctly I'm not exactly "tech-savvy". I would really appreciate any help that anyone could give me though. Windows Defender is telling me that it is trying to block malware. 


Edited by idescrete, 23 November 2014 - 01:53 AM.


#3 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:08:56 AM

Posted 23 November 2014 - 03:00 AM

Hi & :welcome: to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully: :exclame:
  • My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
  • Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
  • If I don't reply within 24 hours please PM me!
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
Step 1
logo.png
Please download Powelikscleaner (by ESET) and save it to your Desktop.
  • Double-click the 3.png to start the tool.
  • Read the terms of the End-user license agreement and click Agree if you agree to them.
  • The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.
  • If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.
  • The tool will produce a log in the same directory the tool was run from.
  • Please copy and paste the log in your next reply.
1.png
2.png

Step 2

Please run a FRST scan. This will help us diagnose your problem.

frst.pngfrstscan.png
Please download Farbar Recovery Scan Tool and save it to your Desktop.
(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)
  • Start FRST with administator privileges.
  • Make sure the option Addition.txt is checked and press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
  • Please copy and paste these logs in your next reply.
Step 3

Please download 51a612a8b27e2-Zoek.pngZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
  • Right-click on 51a612a8b27e2-Zoek.png icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
    process;
    services-list;
    systemspecs;
    startupall;
    filesrcm;
    
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#4 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:08:56 AM

Posted 23 November 2014 - 03:00 AM

Hi & :welcome: to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully: :exclame:
  • My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
  • Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
  • If I don't reply within 24 hours please PM me!
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
Step 1
logo.png
Please download Powelikscleaner (by ESET) and save it to your Desktop.
  • Double-click the 3.png to start the tool.
  • Read the terms of the End-user license agreement and click Agree if you agree to them.
  • The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.
  • If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.
  • The tool will produce a log in the same directory the tool was run from.
  • Please copy and paste the log in your next reply.
1.png
2.png

Step 2

Please run a FRST scan. This will help us diagnose your problem.

frst.pngfrstscan.png
Please download Farbar Recovery Scan Tool and save it to your Desktop.
(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)
  • Start FRST with administator privileges.
  • Make sure the option Addition.txt is checked and press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
  • Please copy and paste these logs in your next reply.
Step 3

Please download 51a612a8b27e2-Zoek.pngZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
  • Right-click on 51a612a8b27e2-Zoek.png icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
    process;
    services-list;
    systemspecs;
    startupall;
    filesrcm;
    
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#5 idescrete

idescrete
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:56 PM

Posted 23 November 2014 - 03:17 AM

[2014.11.23 00:15:54.572] - Begin
[2014.11.23 00:15:54.572] - 
[2014.11.23 00:15:54.572] -     ....................................
[2014.11.23 00:15:54.573] -   ..::::::::::::::::::....................
[2014.11.23 00:15:54.574] -   .::EEEEEE:::SSSSSS::..EEEEEE..TTTTTTTT..    Win32/Poweliks
[2014.11.23 00:15:54.576] -  .::EE::::EE:SS:::::::.EE....EE....TT......   Version: 1.0.0.1
[2014.11.23 00:15:54.577] -  .::EEEEEEEE::SSSSSS::.EEEEEEEE....TT......   Built: Oct 15 2014
[2014.11.23 00:15:54.577] -  .::EE:::::::::::::SS:.EE..........TT......
[2014.11.23 00:15:54.578] -   .::EEEEEE:::SSSSSS::..EEEEEE.....TT.....    Copyright © ESET, spol. s r.o.
[2014.11.23 00:15:54.579] -   ..::::::::::::::::::....................    1992-2013. All rights reserved.
[2014.11.23 00:15:54.579] -     ....................................
[2014.11.23 00:15:54.579] - 
[2014.11.23 00:15:54.579] - --------------------------------------------------------------------------------
[2014.11.23 00:15:54.579] - 
[2014.11.23 00:15:54.580] - INFO: OS: 6.2.9200 SP0
[2014.11.23 00:15:54.580] - INFO: Product Type: Workstation
[2014.11.23 00:15:54.581] - INFO: WoW64: True
[2014.11.23 00:15:54.581] - INFO: Machine guid: 9ECD8330-ED88-4969-A909-75BC67DFAA2A 
[2014.11.23 00:15:54.581] - 
[2014.11.23 00:15:54.583] - INFO: Scanning for system infection...
[2014.11.23 00:15:54.583] - --------------------------------------------------------------------------------
[2014.11.23 00:15:54.583] - 
[2014.11.23 00:15:54.583] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.23 00:15:54.584] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.11.23 00:15:54.584] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.23 00:15:54.584] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.11.23 00:15:54.584] - INFO: Processing classes...
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.586] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.587] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.588] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.589] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.590] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.591] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.592] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.593] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.594] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.595] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.596] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0072-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0072-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0072-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0073-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0073-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0073-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0074-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0074-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0074-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0075-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0075-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0075-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.597] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.598] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.599] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.600] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.601] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.602] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.603] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.604] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.605] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0082-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0082-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0082-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0083-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0083-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0083-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0084-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0084-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0084-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0085-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0085-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0085-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.606] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.607] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.608] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.609] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.610] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.611] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.612] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0068-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0068-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0068-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0069-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0069-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0069-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0070-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0070-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0070-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0071-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0071-ABCDEFFEDCBB}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0071-ABCDEFFEDCBC}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
[2014.11.23 00:15:54.613] - INFO: Processing clsid [\Registry\User\S-1-5-21-3195950817-2305904056-3742619546-1001\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.11.23 00:15:54.614] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.23 00:15:54.614] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.23 00:15:54.614] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.23 00:15:54.614] - INFO: Processing invalid values in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.23 00:15:54.614] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.23 00:15:54.614] - INFO: Processing value [ServerExecutable] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.11.23 00:15:54.614] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.23 00:15:54.614] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.11.23 00:15:54.614] - INFO: Processing invalid subkeys in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.11.23 00:15:54.614] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]...
[2014.11.23 00:15:54.614] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.23 00:15:54.614] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.11.23 00:15:54.614] - INFO: Win32/Poweliks not found


#6 idescrete

idescrete
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:56 PM

Posted 23 November 2014 - 03:21 AM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-11-2014 01
Ran by Jonathan (administrator) on RACHELLE on 23-11-2014 00:19:56
Running from C:\Users\Jonathan\Desktop
Loaded Profile: Jonathan (Available profiles: Jonathan)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Jonathan\Desktop\FRST64 (1).exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [] => [X]
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [914648 2014-03-05] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830104 2014-01-14] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3245896 2014-03-25] (ELAN Microelectronics Corp.)
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [179288 2014-01-04] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-10-08] (TOSHIBA Corporation)
HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296008 2013-10-21] (TOSHIBA Corporation)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-02-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\Run: [Pokki] => "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\Run: [Spotify Web Helper] => C:\Users\Jonathan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-06] (Spotify Ltd)
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22066272 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\RunOnce: [Application Restart #1] => C:\Users\Jonathan\AppData\Local\Pokki\Engine\HostAppService.exe [7689032 2014-08-29] (Pokki)
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\MountPoints2: {8890eea5-3317-11e4-8263-303a64408854} - "E:\TLBootstrap_WPP.exe" 
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://toshiba13.msn.com/?pc=TNJB
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com/?pc=TNJB
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://mystart.toshiba.com
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://mystart.toshiba.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com/?pc=TNJB
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://mystart.toshiba.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://toshiba13.msn.com/?pc=TNJB
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://mystart.toshiba.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com/?pc=TNJB
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://mystart.toshiba.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://toshiba13.msn.com/?pc=TNJB
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://mystart.toshiba.com
SearchScopes: HKLM -> DefaultScope {E8E070A8-8AD4-4347-99E9-9873CA358A66} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
SearchScopes: HKLM -> {E8E070A8-8AD4-4347-99E9-9873CA358A66} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
SearchScopes: HKLM-x32 -> DefaultScope {E8E070A8-8AD4-4347-99E9-9873CA358A66} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
SearchScopes: HKLM-x32 -> {E8E070A8-8AD4-4347-99E9-9873CA358A66} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TNJB
SearchScopes: HKU\S-1-5-21-3195950817-2305904056-3742619546-1001 -> DefaultScope {E8E070A8-8AD4-4347-99E9-9873CA358A66} URL = 
SearchScopes: HKU\S-1-5-21-3195950817-2305904056-3742619546-1001 -> {E8E070A8-8AD4-4347-99E9-9873CA358A66} URL = 
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 
FireFox:
========
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "https://www.google.com/webhp?hl=en&tab=ww"
CHR Profile: C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (BetterTTV) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2014-10-09]
CHR Extension: (Theme Creator) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\akpelnjfckgfiplcikojhomllgombffc [2014-08-26]
CHR Extension: (Google Drive) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-23]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-04]
CHR Extension: (YouTube) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-23]
CHR Extension: (Google Search) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-23]
CHR Extension: (Dark Vibe) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkckeanhmkjaechlhllmapjaaglgpcbj [2014-08-26]
CHR Extension: (AdBlock) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-08-23]
CHR Extension: (Google Wallet) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-23]
CHR Extension: (Gmail) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-23]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [21840 2014-03-21] ()
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [103240 2014-03-25] (ELAN Microelectronics Corp.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel® Corporation) [File not signed]
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel® Corporation)
R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-03-06] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2014-03-06] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-10-11] ()
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3358912 2014-09-21] (INCA Internet Co., Ltd.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3671792 2013-10-11] (Intel® Corporation)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [24904 2014-02-06] (ELAN Microelectronic Corp.)
S3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [142280 2013-10-18] (Intel Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2014-03-06] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3488744 2014-08-11] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [293592 2014-02-11] (Realtek Semiconductor Corp.)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [33168 2013-10-10] (Windows ® Win 7 DDK provider)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 MFE_RR; \??\C:\Users\Jonathan\AppData\Local\Temp\mfe_rr.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-11-23 00:19 - 2014-11-23 00:20 - 00015064 _____ () C:\Users\Jonathan\Desktop\FRST.txt
2014-11-23 00:19 - 2014-11-23 00:19 - 02118144 _____ (Farbar) C:\Users\Jonathan\Desktop\FRST64 (1).exe
2014-11-23 00:16 - 2014-11-23 00:16 - 00186568 _____ (ESET) C:\Users\Jonathan\Downloads\ESETPoweliksCleaner (2).exe
2014-11-23 00:15 - 2014-11-23 00:16 - 00315666 _____ () C:\Users\Jonathan\Desktop\ESETPoweliksCleaner (1).exe_20141123.001554.2164.log
2014-11-23 00:15 - 2014-11-23 00:15 - 00315732 _____ () C:\Users\Jonathan\Downloads\ESETPoweliksCleaner.exe_20141123.001530.3912.log
2014-11-23 00:15 - 2014-11-23 00:15 - 00186568 _____ (ESET) C:\Users\Jonathan\Downloads\ESETPoweliksCleaner.exe
2014-11-23 00:15 - 2014-11-23 00:15 - 00186568 _____ (ESET) C:\Users\Jonathan\Downloads\ESETPoweliksCleaner (1).exe
2014-11-22 23:02 - 2014-11-22 23:03 - 00000296 _____ () C:\Users\Jonathan\Downloads\RootkitRemover_20141122_230224.log
2014-11-22 23:02 - 2014-11-22 23:02 - 00783120 _____ (McAfee, Inc.) C:\Users\Jonathan\Downloads\rootkitremover.exe
2014-11-22 22:59 - 2014-11-22 23:00 - 00688992 _____ (Swearware) C:\Users\Jonathan\Desktop\dds.com
2014-11-22 22:55 - 2014-11-22 22:55 - 01188194 _____ () C:\Users\Jonathan\Downloads\ProcessExplorer.zip
2014-11-22 22:20 - 2014-11-22 22:20 - 32507072 _____ (Microsoft Corporation) C:\Users\Jonathan\Downloads\Windows-KB890830-x64-V5.18.exe
2014-11-22 22:20 - 2014-11-22 22:20 - 00002259 _____ () C:\Windows\epplauncher.mif
2014-11-22 22:20 - 2014-10-31 23:26 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-22 22:19 - 2014-11-22 22:19 - 14087848 _____ (Microsoft Corporation) C:\Users\Jonathan\Downloads\mseinstall.exe
2014-11-22 22:10 - 2014-11-22 22:10 - 00025706 _____ () C:\Users\Jonathan\Downloads\Addition.txt
2014-11-22 22:06 - 2014-11-22 22:10 - 00023715 _____ () C:\Users\Jonathan\Downloads\FRST.txt
2014-11-22 22:05 - 2014-11-23 00:19 - 00000000 ____D () C:\FRST
2014-11-22 22:05 - 2014-11-22 22:05 - 02118144 _____ (Farbar) C:\Users\Jonathan\Downloads\FRST64.exe
2014-11-22 12:38 - 2014-11-22 22:48 - 00000000 ____D () C:\Users\Jonathan\AppData\Local\{360e6c08-1eb2-0186-27f4-f18547505f41}
2014-11-03 19:08 - 2014-11-03 19:13 - 131261664 _____ () C:\Users\Jonathan\Downloads\Sam Smith - In the Lonely Hour (Deluxe Edition) (mp3boo.com).zip
2014-11-03 14:43 - 2014-11-03 14:45 - 86633903 _____ () C:\Users\Jonathan\Downloads\The Kooks - Listen (mp3boo.com).zip
2014-11-03 14:34 - 2014-11-03 14:37 - 86426096 _____ () C:\Users\Jonathan\Downloads\Two Door Cinema Club - Tourist History (mp3boo.com).zip
2014-11-03 13:38 - 2014-11-03 13:43 - 00000000 ____D () C:\Users\Jonathan\AppData\Roaming\Apple Computer
2014-11-03 13:38 - 2014-11-03 13:38 - 00000000 ____D () C:\Users\Jonathan\AppData\Local\Apple Computer
2014-11-03 13:38 - 2014-11-03 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-03 13:38 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-11-03 13:36 - 2014-11-03 13:38 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-03 13:36 - 2014-11-03 13:38 - 00000000 ____D () C:\Program Files\iTunes
2014-11-03 13:36 - 2014-11-03 13:38 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-03 13:36 - 2014-11-03 13:36 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-11-03 13:36 - 2014-11-03 13:36 - 00000000 ____D () C:\Program Files\iPod
2014-11-03 13:35 - 2014-11-03 13:36 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-03 13:35 - 2014-11-03 13:35 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-11-03 13:35 - 2014-11-03 13:35 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-11-03 13:35 - 2014-11-03 13:35 - 00000000 ____D () C:\Users\Jonathan\AppData\Local\Apple
2014-11-03 13:35 - 2014-11-03 13:35 - 00000000 ____D () C:\Program Files\Bonjour
2014-11-03 13:35 - 2014-11-03 13:35 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-11-03 13:35 - 2014-11-03 13:35 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-11-03 13:34 - 2014-11-03 13:35 - 00000000 ____D () C:\ProgramData\Apple
2014-10-26 12:06 - 2014-10-26 12:06 - 00003383 _____ () C:\Users\Jonathan\AppData\Local\recently-used.xbel
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-11-23 00:04 - 2014-07-15 06:08 - 01899901 _____ () C:\Windows\WindowsUpdate.log
2014-11-23 00:02 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\sru
2014-11-22 23:55 - 2014-07-15 06:57 - 00000924 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-22 23:36 - 2014-09-13 23:32 - 00000000 ____D () C:\Users\Jonathan\AppData\Local\Battle.net
2014-11-22 22:55 - 2014-09-11 08:57 - 02480312 _____ (Sysinternals - www.sysinternals.com) C:\Users\Jonathan\Desktop\procexp.exe
2014-11-22 22:54 - 2014-08-23 19:48 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3195950817-2305904056-3742619546-1001
2014-11-22 22:48 - 2014-07-15 06:57 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-22 22:48 - 2013-08-22 06:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-22 22:47 - 2014-07-15 06:36 - 05709918 _____ () C:\Users\Public\CAFADEBUG.log
2014-11-22 22:37 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-22 22:13 - 2014-08-23 19:39 - 00000000 ____D () C:\Users\Jonathan
2014-11-22 22:08 - 2014-09-26 22:16 - 00000000 ____D () C:\Users\Jonathan\AppData\Roaming\uTorrent
2014-11-22 21:57 - 2014-04-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Toshiba
2014-11-22 21:53 - 2014-08-23 19:40 - 00000000 ____D () C:\Users\Jonathan\AppData\Local\Pokki
2014-11-22 21:51 - 2014-08-23 19:46 - 00002176 _____ () C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2014-11-22 21:50 - 2014-04-08 21:24 - 00000000 ____D () C:\ProgramData\Toshiba
2014-11-21 16:39 - 2014-09-30 12:10 - 00000000 ____D () C:\Users\Jonathan\Desktop\Everything
2014-11-21 15:11 - 2014-08-24 00:35 - 00000000 ____D () C:\Users\Jonathan\AppData\Roaming\Spotify
2014-11-21 14:50 - 2014-08-24 00:36 - 00000000 ____D () C:\Users\Jonathan\AppData\Local\Spotify
2014-11-21 12:59 - 2014-08-23 21:44 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-20 18:42 - 2014-08-24 16:30 - 00000000 ____D () C:\Users\Jonathan\AppData\Local\CrashDumps
2014-11-20 16:14 - 2014-09-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-11-20 01:08 - 2014-08-23 21:07 - 00000000 ____D () C:\Users\Jonathan\AppData\Roaming\Skype
2014-11-14 08:12 - 2014-04-08 20:21 - 00863592 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-13 23:17 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-13 18:50 - 2014-07-15 06:57 - 00003896 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-13 18:50 - 2014-07-15 06:57 - 00003660 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-05 12:56 - 2014-07-15 06:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-11-03 18:27 - 2014-09-27 11:03 - 00000000 ____D () C:\Users\Jonathan\AppData\Roaming\vlc
2014-11-03 13:42 - 2013-08-22 06:46 - 00047828 _____ () C:\Windows\setupact.log
2014-10-30 03:25 - 2014-08-28 21:19 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-29 13:24 - 2014-09-13 23:37 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-10-26 21:29 - 2014-10-23 15:38 - 00000000 ____D () C:\Program Files (x86)\WTFast
2014-10-26 12:10 - 2014-10-21 16:49 - 00000000 ____D () C:\Users\Jonathan\.gimp-2.8
 
Some content of TEMP:
====================
C:\Users\Jonathan\AppData\Local\Temp\Gw2.exe
C:\Users\Jonathan\AppData\Local\Temp\hcuninstaller_20140830_154120_5672.exe
C:\Users\Jonathan\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Jonathan\AppData\Local\Temp\NGM.exe
C:\Users\Jonathan\AppData\Local\Temp\NGMDll.dll
C:\Users\Jonathan\AppData\Local\Temp\NGMResource.dll
C:\Users\Jonathan\AppData\Local\Temp\oct1FEF.tmp.exe
C:\Users\Jonathan\AppData\Local\Temp\oct61CC.tmp.exe
C:\Users\Jonathan\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Jonathan\AppData\Local\Temp\unicows.dll
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-11-22 05:14
 
==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-11-2014 01
Ran by Jonathan at 2014-11-23 00:20:29
Running from C:\Users\Jonathan\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Reader XI (11.0.03)  MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.03 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{42EC3153-24B0-FCAD-0F16-0904BCBAB179}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.65.36.50 - Conexant)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Digital Pass Launcher (HKLM-x32\...\{2359C6E9-DE4F-4FDA-9C12-AE6EFC2EE330}) (Version: 1.0.0.0 - TOSHIBA America Information Systems, Inc)
Dolby Axon - 1.5.1.1 (HKLM-x32\...\{17936630-5344-4F18-9970-616129E2A114}_is1) (Version: 1.5.1.1 - Dolby Laboratories)
DTS Sound (HKLM-x32\...\{5B54DDC3-0ACC-4722-9C23-C3F07AF4825D}) (Version: 1.01.6700 - DTS, Inc.)
ETDWare PS/2_SMBus-X64 11.8.22.3_WHQL (HKLM\...\Elantech) (Version: 11.8.22.3 - ELAN Microelectronic Corp.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.65 - Google Inc.)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Host App Service (HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\Pokki) (Version: 0.269.3.181 - Pokki)
Intel® Chipset Device Software (x32 Version: 10.0.13 - Intel® Corporation) Hidden
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3345 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel® Wireless Bluetooth® 4.0 (HKLM-x32\...\{96C730E4-F055-4118-BDF3-6E071763853C}) (Version: 3.0.1342.02 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{105fa5c4-72e1-41f2-a82c-884d8aa4b381}) (Version: 16.6.0 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
League of Legends (HKLM-x32\...\League of Legends 3.0.0) (Version: 3.0.0 - Riot Games)
League of Legends (x32 Version: 3.0.0 - Riot Games) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version:  - DICE)
NVIDIA PhysX v8.10.17 (HKLM-x32\...\{E4D15328-8C89-484B-B9AA-F5BE9EA6D01C}) (Version: 8.10.17 - NVIDIA Corporation)
OEM Application Profile (HKLM-x32\...\{8C7185EB-4165-040E-D581-EA62D922E8A2}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
osu! (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)
Pokki Start Menu (HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\Pokki_Start_Menu) (Version: 0.269.3.181 - )
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Quake Live (HKLM-x32\...\Steam App 282440) (Version:  - id Software)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.29077 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
System Requirements Lab Detection (HKLM-x32\...\{2C40FCAB-612A-41F6-9DB1-6FA247DA2CBC}) (Version: 2.0.0.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TOSHIBA Application Installer (HKLM\...\{21A63CA3-75C0-4E56-B602-B7CD2EF6B621}) (Version: 9.0.2.6 - Toshiba Corporation)
TOSHIBA Audio Enhancement (HKLM\...\{1515F5E3-29EA-4CD1-A981-032D88880F09}) (Version: 2.0.18.0 - Toshiba Corporation)
TOSHIBA Display Utility (HKLM\...\{484A4296-6F3D-4182-8CFA-D664F7DA34AA}) (Version: 1.1.17.0 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{94D2A899-0C34-4420-880E-AE337E635AB0}) (Version: 2.4.2.6403 - Toshiba Corporation)
TOSHIBA Function Key (HKLM\...\{1844CFE2-EBA3-490A-8A5E-9BFC646342FD}) (Version: 1.1.5.6402 - Toshiba Corporation)
TOSHIBA Password Utility (HKLM-x32\...\InstallShield_{26BB68BB-CF93-4A12-BC6D-A3B6F53AC8D9}) (Version: 6.0.3.0 - Toshiba Corporation)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 3.2.00.56006005 - Toshiba Corporation)
TOSHIBA Service Station (HKLM\...\{BFE4C813-4DD4-4B1C-97F4-76A459055C8D}) (Version: 2.6.13 - Toshiba Corporation)
TOSHIBA Start (HKLM-x32\...\{4F0F44AF-90E9-4A6E-9E82-354A3AB79F22}) (Version: 1.0.0.2 - TOSHIBA America Information Systems, Inc)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0033 - Toshiba Corporation)
TOSHIBA System Settings (HKLM-x32\...\{4D57ED72-6B01-40BD-9CA9-012B8FC09CEB}) (Version: 2.0.1.32003 - Toshiba Corporation)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 
==================== Restore Points  =========================
 
03-11-2014 21:35:37 Installed iTunes
14-11-2014 04:48:27 Scheduled Checkpoint
21-11-2014 08:12:38 Scheduled Checkpoint
23-11-2014 05:47:54 Removed TOSHIBARegistration
23-11-2014 05:52:15 Removed TOSHIBA User's Guide
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-08-22 05:25 - 2013-08-22 05:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {12A5D088-DB14-4BB3-96E7-C9B5EF708207} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-15] (Google Inc.)
Task: {32C3D4F5-CEA1-43F7-BC04-8F0A7D9217D1} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2013-09-24] (TOSHIBA Corporation)
Task: {4951F651-9BAD-41BB-83B7-8FACE8F14CEF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {69F4C0C1-9C1E-4C37-B791-27C09E475AA9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-15] (Google Inc.)
Task: {F2277B5E-D81A-4FCE-96A9-1F8385446AE1} - System32\Tasks\Resolution+ Setting Task => C:\Program Files\Toshiba\TOSHIBA Smart View Utility\Plugins\ResolutionPlus\TosRegPermissionChg.exe [2014-03-12] (TOSHIBA Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
2014-03-21 13:09 - 2014-03-21 13:09 - 00021840 _____ () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-15 06:10 - 2014-03-06 12:15 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll
2014-11-18 19:58 - 2014-11-14 13:15 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\libglesv2.dll
2014-11-18 19:58 - 2014-11-14 13:15 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\libegl.dll
2014-11-18 19:58 - 2014-11-14 13:15 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\pdf.dll
2014-11-18 19:58 - 2014-11-14 13:15 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.65\ffmpegsumo.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
HKLM\...\StartupApproved\Run: => "ETDCtrl"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run: => "TecoResident"
HKLM\...\StartupApproved\Run: => "TCrdMain"
HKLM\...\StartupApproved\Run: => "TSSSrv"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "TSVU"
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\StartupApproved\Run: => "Pokki"
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3195950817-2305904056-3742619546-1001\...\StartupApproved\Run: => "Spotify Web Helper"
 
========================= Accounts: ==========================
 
Administrator (S-1-5-21-3195950817-2305904056-3742619546-500 - Administrator - Disabled)
Guest (S-1-5-21-3195950817-2305904056-3742619546-501 - Limited - Disabled)
Jonathan (S-1-5-21-3195950817-2305904056-3742619546-1001 - Administrator - Enabled) => C:\Users\Jonathan
 
==================== Faulty Device Manager Devices =============
 
Name: Intel® Wireless Bluetooth® 4.0
Description: Intel® Wireless Bluetooth® 4.0
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Intel Corporation
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (11/22/2014 10:28:07 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8
 
Error: (11/22/2014 10:20:55 PM) (Source: Microsoft Security Client Setup) (EventID: 100) (User: Rachelle)
Description: HRESULT:0x8004FF6F
Description:You don’t need to install Microsoft Security Essentials. Your version of Windows includes an updated version of Windows Defender that provides the same level of protection as Microsoft Security Essentials, along with other significant improvements.  <a>For more information on the differences and improvements, see online Help</a>. Error code:0x8004FF6F.
 
Error: (11/22/2014 10:08:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program ToshibaServiceStation.exe version 2.6.7.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 12f8
 
Start Time: 01d006e2d3e885de
 
Termination Time: 15
 
Application Path: C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe
 
Report Id: 05150d84-72d7-11e4-8271-c4544496b85f
 
Faulting package full name: 
 
Faulting package-relative application ID:
 
Error: (11/22/2014 09:44:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Wow.exe version 5.4.2.17688 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 1aac
 
Start Time: 01d006e07941a441
 
Termination Time: 0
 
Application Path: C:\Users\Jonathan\Desktop\WOW\World of Warcraft - Mists of Pandaria 5.4.2 (17688)\Wow.exe
 
Report Id: c1a3c818-72d3-11e4-8270-c4544496b85f
 
Faulting package full name: 
 
Faulting package-relative application ID:
 
Error: (11/20/2014 06:42:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: rads_user_kernel.exe, version: 0.0.0.0, time stamp: 0x4e65c1ac
Faulting module name: rads_user_kernel.exe, version: 0.0.0.0, time stamp: 0x4e65c1ac
Exception code: 0xc0000005
Fault offset: 0x000b8554
Faulting process id: 0x1290
Faulting application start time: 0xrads_user_kernel.exe0
Faulting application path: rads_user_kernel.exe1
Faulting module path: rads_user_kernel.exe2
Report Id: rads_user_kernel.exe3
Faulting package full name: rads_user_kernel.exe4
Faulting package-relative application ID: rads_user_kernel.exe5
 
Error: (11/18/2014 07:57:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program League of Legends.exe version 4.19.0.457 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 1750
 
Start Time: 01d003aa6871ec66
 
Termination Time: 4294967295
 
Application Path: C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.67\deploy\League of Legends.exe
 
Report Id: 2be732ea-6fa0-11e4-8270-c4544496b85f
 
Faulting package full name: 
 
Faulting package-relative application ID:
 
Error: (11/14/2014 11:36:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program rads_user_kernel.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 1c0
 
Start Time: 01d000a6d1ff51f8
 
Termination Time: 1
 
Application Path: C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
 
Report Id: 1be589ee-6c9a-11e4-8270-c4544496b85f
 
Faulting package full name: 
 
Faulting package-relative application ID:
 
Error: (11/13/2014 11:13:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WLANExt.exe, version: 6.3.9600.16384, time stamp: 0x5215e075
Faulting module name: IWMSPROV.DLL, version: 16.6.0.0, time stamp: 0x52585ba5
Exception code: 0xc0000005
Fault offset: 0x0000000000002fc4
Faulting process id: 0x470
Faulting application start time: 0xWLANExt.exe0
Faulting application path: WLANExt.exe1
Faulting module path: WLANExt.exe2
Report Id: WLANExt.exe3
Faulting package full name: WLANExt.exe4
Faulting package-relative application ID: WLANExt.exe5
 
Error: (11/08/2014 07:46:02 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program rads_user_kernel.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: e9c
 
Start Time: 01cffb6b0c9f3678
 
Termination Time: 0
 
Application Path: C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
 
Report Id: 5504d5d5-675e-11e4-826f-c4544496b85f
 
Faulting package full name: 
 
Faulting package-relative application ID:
 
Error: (11/07/2014 11:38:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: chrome.exe, version: 38.0.2125.111, time stamp: 0x5447163b
Faulting module name: chrome.dll, version: 38.0.2125.111, time stamp: 0x54471342
Exception code: 0xc0000005
Fault offset: 0x0015d7a8
Faulting process id: 0x1bc4
Faulting application start time: 0xchrome.exe0
Faulting application path: chrome.exe1
Faulting module path: chrome.exe2
Report Id: chrome.exe3
Faulting package full name: chrome.exe4
Faulting package-relative application ID: chrome.exe5
 
 
System errors:
=============
Error: (11/22/2014 10:42:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB2267602 (Definition 1.189.522.0).
 
Error: (11/22/2014 09:06:43 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 80.
 
Error: (11/22/2014 09:02:05 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 80.
 
Error: (11/22/2014 06:48:11 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 80.
 
Error: (11/22/2014 06:48:11 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 80.
 
Error: (11/22/2014 06:33:22 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 20.
 
Error: (11/22/2014 05:44:09 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 80.
 
Error: (11/22/2014 04:30:35 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 80.
 
Error: (11/22/2014 05:15:36 AM) (Source: DCOM) (EventID: 10010) (User: Rachelle)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 
Error: (11/22/2014 05:15:06 AM) (Source: DCOM) (EventID: 10010) (User: Rachelle)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 
 
Microsoft Office Sessions:
=========================
Error: (11/22/2014 10:28:07 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8
 
Error: (11/22/2014 10:20:55 PM) (Source: Microsoft Security Client Setup) (EventID: 100) (User: Rachelle)
Description: HRESULT:0x8004FF6F
Description:You don’t need to install Microsoft Security Essentials. Your version of Windows includes an updated version of Windows Defender that provides the same level of protection as Microsoft Security Essentials, along with other significant improvements.  <a>For more information on the differences and improvements, see online Help</a>. Error code:0x8004FF6F.
 
Error: (11/22/2014 10:08:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: ToshibaServiceStation.exe2.6.7.012f801d006e2d3e885de15C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe05150d84-72d7-11e4-8271-c4544496b85f
 
Error: (11/22/2014 09:44:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Wow.exe5.4.2.176881aac01d006e07941a4410C:\Users\Jonathan\Desktop\WOW\World of Warcraft - Mists of Pandaria 5.4.2 (17688)\Wow.exec1a3c818-72d3-11e4-8270-c4544496b85f
 
Error: (11/20/2014 06:42:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b8554129001d00534be9db069C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exefc70c2e5-7127-11e4-8270-c4544496b85f
 
Error: (11/18/2014 07:57:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: League of Legends.exe4.19.0.457175001d003aa6871ec664294967295C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.67\deploy\League of Legends.exe2be732ea-6fa0-11e4-8270-c4544496b85f
 
Error: (11/14/2014 11:36:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: rads_user_kernel.exe0.0.0.01c001d000a6d1ff51f81C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe1be589ee-6c9a-11e4-8270-c4544496b85f
 
Error: (11/13/2014 11:13:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WLANExt.exe6.3.9600.163845215e075IWMSPROV.DLL16.6.0.052585ba5c00000050000000000002fc447001cffb6ab6e65b17C:\Windows\system32\WLANExt.exeC:\Program Files\Intel\WiFi\bin\IWMSPROV.DLLcd602bf7-6bcd-11e4-826f-c4544496b85f
 
Error: (11/08/2014 07:46:02 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: rads_user_kernel.exe0.0.0.0e9c01cffb6b0c9f36780C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe5504d5d5-675e-11e4-826f-c4544496b85f
 
Error: (11/07/2014 11:38:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: chrome.exe38.0.2125.1115447163bchrome.dll38.0.2125.11154471342c00000050015d7a81bc401cffb256ab4f1c6C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\38.0.2125.111\chrome.dll492045a2-671a-11e4-826e-c4544496b85f
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7-4510U CPU @ 2.00GHz
Percentage of memory in use: 26%
Total physical RAM: 12208.14 MB
Available physical RAM: 8931.41 MB
Total Pagefile: 14064.14 MB
Available Pagefile: 10654.76 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
 
==================== Drives ================================
 
Drive c: (TI10692200C) (Fixed) (Total:921.05 GB) (Free:755.93 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 00000000)
 
Partition: GPT Partition Type.
 
==================== End Of Log ============================


#7 idescrete

idescrete
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:56 PM

Posted 23 November 2014 - 03:24 AM

 
Zoek.exe v5.0.0.0 Updated 21-11-2014
Tool run by Jonathan on Sun 11/23/2014 at  0:22:53.90.
Microsoft Windows 8.1 6.3.9600  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jonathan\Desktop\zoek.exe [Scan all users] [Script inserted] 
 
==== System Restore Info ======================
 
11/23/2014 12:23:14 AM Zoek.exe System Restore Point Created Succesfully.
 
==== Running Processes ======================
 
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\System32\TiltWheelMouse.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jonathan\Desktop\zoek.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
 
==== Services(whitelist) ======================
Powered by E Dev
 
R2 - [AdobeARMservice] - Adobe Acrobat Update Service - c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe
R2 - [AMD External Events Utility] - AMD External Events Utility - c:\windows\system32\atiesrxx.exe
R2 - [Apple Mobile Device] - Apple Mobile Device - c:\program files (x86)\common files\apple\mobile device support\applemobiledeviceservice.exe
R2 - [CxAudMsg] - Conexant Audio Message Service - c:\windows\system32\cxaudmsg64.exe
R2 - [dts_apo_service] - DTS APO Service - c:\program files (x86)\dts, inc\dts studio sound\dts_apo_service.exe
R2 - [ETDService] - Elan Service - c:\program files\elantech\etdservice.exe
R2 - [EvtEng] - Intel® PROSet/Wireless Event Log - c:\program files\intel\wifi\bin\evteng.exe
R2 - [Intel® Capability Licensing Service Interface] - Intel® Capability Licensing Service Interface - c:\program files\intel\icls client\heciserver.exe
R2 - [Intel® ME Service] - Intel® ME Service - c:\program files (x86)\intel\intel® management engine components\fwservice\intelmefwservice.exe
R2 - [jhi_service] - Intel® Dynamic Application Loader Host Interface Service - c:\program files (x86)\intel\intel® management engine components\dal\jhi_service.exe
R2 - [LMS] - Intel® Management and Security Application Local Management Service - c:\program files (x86)\intel\intel® management engine components\lms\lms.exe
R2 - [RegSrvc] - Intel® PROSet/Wireless Registry Service - c:\program files\common files\intel\wirelesscommon\regsrvc.exe
R2 - [TOSHIBA eco Utility Service] - TOSHIBA eco Utility Service - c:\program files\toshiba\teco\tecoservice.exe
R2 - [WinDefend] - Windows Defender Service - c:\program files\windows defender\msmpeng.exe
R2 - [WMPNetworkSvc] - Windows Media Player Network Sharing Service - c:\program files\windows media player\wmpnetwk.exe
R2 - [WSearch] - Windows Search - c:\windows\system32\searchindexer.exe
R2 - [ZeroConfigService] - Intel® PROSet/Wireless Zero Configuration Service - c:\program files\intel\wifi\bin\zeroconfigservice.exe
R3 - [iPod Service] - iPod Service - c:\program files\ipod\bin\ipodservice.exe
R3 - [TMachInfo] - TMachInfo - c:\program files\toshiba\toshiba service station\tmachinfo.exe
R3 - [VSS] - Volume Shadow Copy - c:\windows\system32\vssvc.exe
R3 - [WdNisSvc] - Windows Defender Network Inspection Service - c:\program files\windows defender\nissrv.exe
S2 - [Bonjour Service] - Bonjour Service - c:\program files\bonjour\mdnsresponder.exe
S2 - [gupdate] - Google Update Service (gupdate) - c:\program files (x86)\google\update\googleupdate.exe
S2 - [SkypeUpdate] - Skype Updater - c:\program files (x86)\skype\updater\updater.exe
S2 - [sppsvc] - Software Protection - c:\windows\system32\sppsvc.exe
S3 - [ALG] - Application Layer Gateway Service - c:\windows\system32\alg.exe
S3 - [COMSysApp] - COM+ System Application - c:\windows\system32\dllhost.exe
S3 - [cphs] - Intel® Content Protection HECI Service - c:\windows\syswow64\intelcphecisvc.exe
S3 - [Fax] - Fax - c:\windows\system32\fxssvc.exe
S3 - [FontCache3.0.0.0] - Windows Presentation Foundation Font Cache 3.0.0.0 - c:\windows\microsoft.net\framework64\v3.0\wpf\presentationfontcache.exe
S3 - [gupdatem] - Google Update Service (gupdatem) - c:\program files (x86)\google\update\googleupdate.exe
S3 - [IDriverT] - InstallDriver Table Manager - c:\program files (x86)\common files\installshield\driver\11\intel 32\idrivert.exe
S3 - [IEEtwCollectorService] - Internet Explorer ETW Collector Service - c:\windows\system32\ieetwcollector.exe
S3 - [Intel® Capability Licensing Service TCP IP Interface] - Intel® Capability Licensing Service TCP IP Interface - c:\program files\intel\icls client\socketheciserver.exe
S3 - [MSDTC] - Distributed Transaction Coordinator - c:\windows\system32\msdtc.exe
S3 - [msiserver] - Windows Installer - c:\windows\system32\msiexec.exe
S3 - [MyWiFiDHCPDNS] - Wireless PAN DHCP Server - c:\program files\intel\wifi\bin\pandhcpdns.exe
S3 - [PerfHost] - Performance Counter DLL Host - c:\windows\syswow64\perfhost.exe
S3 - [RpcLocator] - Remote Procedure Call (RPC) Locator - c:\windows\system32\locator.exe
S3 - [SNMPTRAP] - SNMP Trap - c:\windows\system32\snmptrap.exe
S3 - [Steam Client Service] - Steam Client Service - c:\program files (x86)\common files\steam\steamservice.exe
S3 - [TrustedInstaller] - Windows Modules Installer - c:\windows\servicing\trustedinstaller.exe
S3 - [vds] - Virtual Disk - c:\windows\system32\vds.exe
S3 - [wbengine] - Block Level Backup Engine Service - c:\windows\system32\wbengine.exe
S3 - [wmiApSrv] - WMI Performance Adapter - c:\windows\system32\wbem\wmiapsrv.exe
 
==== System Specs ======================
 
Windows: Windows Version 6.2 (Build 9200)
Memory (RAM): 12209 MB
CPU Info: Intel® Core™ i7-4510U CPU @ 2.00GHz
CPU Speed: 2597.9 MHz
Sound Card: Speakers (Conexant SmartAudio H | 
Display Adapters: Intel® HD Graphics Family | Intel® HD Graphics Family | Intel® HD Graphics Family
Monitors: 1x; Generic PnP Monitor | 
Screen Resolution: 1366 X 768 - 32 bit
Network: Network Present
Network Adapters: Microsoft Wi-Fi Direct Virtual Adapter | Intel® Dual Band Wireless-AC 3160 | Realtek PCIe GBE Family Controller
CD / DVD Drives: No optical drives found.
Ports: COM Ports NOT Present. LPT Port NOT Present. 
Mouse: 5 Button Wheel Mouse Present
Hard Disks: C:  921.0GB
Hard Disks - Free: C:  756.1GB
Manufacturer *: INSYDE Corp.
BIOS Info: AT/AT COMPATIBLE |  | TOSQCI - 1
Time Zone: Pacific Standard Time
Motherboard *: Type2 - Board Vendor Name1 Type2 - Board Product Name1
Country: United States 
Language: ENU 
 
==== System Specs (Software) ======================
 
Anti-Virus: Windows Defender On-access scanning disabled (Outdated)
Anti-Spyware: Windows Defender disabled (Outdated)
Default Browser: Google Chrome 39.0.2171.65
Internet Explorer Version: 11.0.9600.17031 
Google Chrome version: 39.0.2171.65
Adobe Reader version: 11.0.03.37
Sun Java version: 1.7.0_71 (32-bit) 
 
==== Files Recently Created / Modified ======================
 
====== C:\Windows ====
2014-11-23 06:20:54 B0C72A8C72E1DD8FFD9587D318F1C089 2259 ----a-w- C:\Windows\epplauncher.mif
====== C:\Users\Jonathan\AppData\Local\Temp ====
====== Java Cache =====
====== C:\Windows\SysWOW64 =====
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2014-11-23 06:20:47 D92FB5770CBDE049A4732B76A77F6864 103374192 ----a-w- C:\Windows\Sysnative\MRT.exe
====== C:\Windows\Sysnative\drivers =====
2014-11-03 21:38:18 8E98D21EE06192492A5671A6144D092F 33240 ----a-w- C:\Windows\Sysnative\drivers\GEARAspiWDM.sys
====== C:\Windows\Tasks ======
2014-11-03 21:35:36 -------- d-----w- C:\Windows\Sysnative\Tasks\Apple
====== C:\Windows\Temp ======
======= C:\Program Files =====
2014-11-03 21:36:48 -------- d-----w- C:\Program Files\iPod
2014-11-03 21:36:47 -------- d-----w- C:\Program Files\iTunes
2014-11-03 21:35:19 -------- d-----w- C:\Program Files\Common Files\Apple
2014-11-03 21:35:13 -------- d-----w- C:\Program Files\Bonjour
======= C:\PROGRA~2 =====
2014-11-03 21:36:47 -------- d-----w- C:\PROGRA~2\iTunes
2014-11-03 21:35:33 -------- d-----w- C:\PROGRA~2\Apple Software Update
2014-11-03 21:35:13 -------- d-----w- C:\PROGRA~2\Bonjour
2014-11-03 21:34:41 -------- d-----w- C:\PROGRA~2\COMMON~1\Apple
======= C: =====
====== C:\Users\Jonathan\AppData\Roaming ======
2014-11-03 21:38:21 -------- d-----w- C:\Users\Jonathan\AppData\Local\Apple Computer
2014-11-03 21:38:20 -------- d-----w- C:\Users\Jonathan\AppData\Roaming\Apple Computer
2014-11-03 21:35:36 -------- d-----w- C:\Users\Jonathan\AppData\Local\Apple
2014-11-03 21:35:30 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\Apple Computer
2014-10-26 20:06:11 CDD67E7549C1BEE2B68FB28DF9A36A10 3383 ----a-w- C:\Users\Jonathan\AppData\Local\recently-used.xbel
====== C:\Users\Jonathan ======
2014-11-23 08:19:41 D1268C05D0CEDBDE0F724E60C9D614CC 2118144 ----a-w- C:\Users\Jonathan\Desktop\FRST64 (1).exe
2014-11-23 08:16:11 7650EF7FFE338A50ADE28288FB601B7A 186568 ----a-w- C:\Users\Jonathan\Downloads\ESETPoweliksCleaner (2).exe
2014-11-23 08:15:47 7650EF7FFE338A50ADE28288FB601B7A 186568 ----a-w- C:\Users\Jonathan\Downloads\ESETPoweliksCleaner (1).exe
2014-11-23 08:15:23 7650EF7FFE338A50ADE28288FB601B7A 186568 ----a-w- C:\Users\Jonathan\Downloads\ESETPoweliksCleaner.exe
2014-11-23 06:59:51 8B968045D75783A09592C3105F2865DA 688992 ----a-w- C:\Users\Jonathan\Desktop\dds.com
2014-11-23 06:20:13 4DEDE96BD568BD11DC92C6D893666E1E 32507072 ----a-w- C:\Users\Jonathan\Downloads\Windows-KB890830-x64-V5.18.exe
2014-11-23 06:19:22 AB484D84730FD1197F514FE3B53433F8 14087848 ----a-w- C:\Users\Jonathan\Downloads\mseinstall.exe
2014-11-23 06:05:16 D1268C05D0CEDBDE0F724E60C9D614CC 2118144 ----a-w- C:\Users\Jonathan\Downloads\FRST64.exe
2014-11-03 21:38:19 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-03 21:36:47 -------- d-----w- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-03 21:36:47 -------- d-----w- C:\ProgramData\Apple Computer
2014-11-03 21:34:41 -------- d-----w- C:\ProgramData\Apple
 
====== C: exe-files ==
2014-11-23 08:19:41 D1268C05D0CEDBDE0F724E60C9D614CC 2118144 ----a-w- C:\Users\Jonathan\Desktop\FRST64 (1).exe
2014-11-23 08:16:11 7650EF7FFE338A50ADE28288FB601B7A 186568 ----a-w- C:\Users\Jonathan\Downloads\ESETPoweliksCleaner (2).exe
2014-11-23 08:15:47 7650EF7FFE338A50ADE28288FB601B7A 186568 ----a-w- C:\Users\Jonathan\Downloads\ESETPoweliksCleaner (1).exe
2014-11-23 08:15:23 7650EF7FFE338A50ADE28288FB601B7A 186568 ----a-w- C:\Users\Jonathan\Downloads\ESETPoweliksCleaner.exe
2014-11-23 06:20:47 D92FB5770CBDE049A4732B76A77F6864 103374192 ----a-w- C:\Windows\System32\MRT.exe
2014-11-23 06:20:13 4DEDE96BD568BD11DC92C6D893666E1E 32507072 ----a-w- C:\Users\Jonathan\Downloads\Windows-KB890830-x64-V5.18.exe
2014-11-23 06:19:22 AB484D84730FD1197F514FE3B53433F8 14087848 ----a-w- C:\Users\Jonathan\Downloads\mseinstall.exe
2014-11-23 06:05:16 D1268C05D0CEDBDE0F724E60C9D614CC 2118144 ----a-w- C:\Users\Jonathan\Downloads\FRST64.exe
2014-11-21 20:58:57 155C30C0DCBF5E6A2FD6AB2E6100A99C 103424 ----a-w- C:\Program Files (x86)\Steam\SteamApps\downloading\730\csgo.exe
2014-11-21 20:58:38 CC7ED069C2FC82B5B1555C2044C765CC 833728 ----a-w- C:\Program Files (x86)\Common Files\Steam\SteamServiceTmp.exe
2014-11-20 07:37:19 208F5294935D6814B97F028A0E032D5A 10001456 ----a-w- C:\Program Files (x86)\Battle.net\Battle.net.5293\Battle.net.exe
2014-11-20 05:24:32 957AD5B28823F3351CACD751B83B7D90 15973880 ----a-w- C:\Riot Games\League of Legends\RADS\projects\lol_game_client\releases\0.0.1.7\deploy\League of Legends.exe
2014-11-20 03:27:01 591535226A9DB2F2C2BE80253C798C80 1704440 ----a-w- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.11\deploy\rPipe.exe
2014-11-20 03:26:58 ACE2737187B05155ED3AA317D5C307F1 4247544 ----a-w- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.11\deploy\LoLPatcher.exe
2014-11-19 03:57:42 ACB85151061E0184BF898B79B8FDCEE5 6704720 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\39.0.2171.65\39.0.2171.65_38.0.2125.122_chrome_updater.exe
=== C: other files ==
2014-11-23 06:59:51 8B968045D75783A09592C3105F2865DA 688992 ----a-w- C:\Users\Jonathan\Desktop\dds.com
2014-11-23 06:55:03 FE7F83689172CC17185D6FB1AEFDFC6E 1188194 ----a-w- C:\Users\Jonathan\Downloads\ProcessExplorer.zip
2014-11-23 06:08:12 E66BF5EC5967A87CFA1C03B693E1D40A 104 ----a-w- C:\Users\Jonathan\AppData\Local\Temp\utt59D.tmp.bat
 
==== Startup Registry Enabled ======================
 
[HKEY_USERS\S-1-5-21-3195950817-2305904056-3742619546-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="C:\Users\Jonathan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"
"Pokki"=""%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON"
 
[HKEY_USERS\S-1-5-21-3195950817-2305904056-3742619546-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #1"="C:\Users\Jonathan\AppData\Local\Pokki\Engine\HostAppService.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Jonathan\AppData\Local\Pokki\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session"
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe MSRun"
"TSVU"="c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe"
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="C:\Users\Jonathan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"
"Pokki"=""%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON"
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #1"="C:\Users\Jonathan\AppData\Local\Pokki\Engine\HostAppService.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend=C:\Users\Jonathan\AppData\Local\Pokki\Engine\inspector --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session"
 
==== Startup Registry Enabled x64 ======================
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\Windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"
"Persistence"="C:\Windows\system32\igfxpers.exe"
"cAudioFilterAgent"="C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe"
"SmartAudio"="C:\Program Files\CONEXANT\SAII\SACpl.exe /t"
"TecoResident"="C:\Program Files\TOSHIBA\Teco\TecoResident.exe"
"TSSSrv"="C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe"
"MouseDriver"="TiltWheelMouse.exe"
"ETDCtrl"="%ProgramFiles%\Elantech\ETDCtrl.exe "
"TCrdMain"="C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe"
 
==== Task Scheduler Jobs ======================
 
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [07/15/2014 06:57 AM]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [07/15/2014 06:57 AM]
 
==== Other Scheduled Tasks ======================
 
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\Resolution+ Setting Task" [C:\Program Files\Toshiba\TOSHIBA Smart View Utility\Plugins\ResolutionPlus\TosRegPermissionChg.exe]
"C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]
"C:\Windows\SysNative\tasks\TOSHIBA\Service Station" ["C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe"]
 
==== C:\zoek_backup content ======================
 
C:\zoek_backup (files=0 folders=0 0 bytes)
 
==== EOF on Sun 11/23/2014 at  0:24:30.93 ======================


#8 idescrete

idescrete
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:56 PM

Posted 23 November 2014 - 03:27 AM

Thanks for your help by the way!  :bananas:  :bananas:  :bananas:



#9 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:08:56 AM

Posted 23 November 2014 - 12:31 PM

You are welcome!

Let's do a final check up:

Step 1


Don't remove on your own anything that Hitman Pro detects!
This scanner, as it is a really good for checking, has been known for deleting files instead of curing them, which in some cases may render the machine unbootable.
Any removals will be done manually after careful analysis of the scan results!


Please download hitmanpro_32.pngHitmanPro 32-bit / HitmanPro 64-bit by SurfRight and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
  • Right-click onhitmanpro.pngicon and select admin.PNGRun as Administrator to start the tool.
  • If the program won't run please run it while holding down the left CTRL key until it's loaded!
  • Click on the Next button (1). You must agree with the terms of EULA (2 - if asked).
  • Check the box beside "No, I only want to perform a one-time scan to check this computer" and click on the Next button. (3)
  • The program will start to scan the computer. It would only take several minutes.
  • When the scan is done click on Save Log (4) and close HitmanPro! (5)
  • Copy and paste the content of the log file in your next reply.
hitman.gif


Step 2

Please downloadesetlogo.pngOnline Scanner and save it to your Desktop.
  • Disable the realtime-protection of your antivirus and anti-malware programs because they might interfere with the scan.
  • Start installer.pngwith administartor privileges.
  • Select the option Yes, I accept the Terms of Use and click on Start.
  • Choose the following settings:
settings.png
  • Click on Start. The virus signature database will begin to download. This may take some time.
  • When completed the Online Scan will begin automatically.
    Note: This scan might take a long time! Please be patient.
  • When completed select Uninstall application on close if you so wish, but make sure you copy the logfile first!
  • Now click on Finish
  • A log filelog.pngis created at logpath.png
    Copy and paste the content of this log file in your next reply.
esetlog.png
Note: Do not forget to re-enable your antivirus application after running the above scan!
eset.gif

lesestoff.png

Can you please tell me which problems still persist now?
How is the computer running?

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#10 idescrete

idescrete
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:56 PM

Posted 23 November 2014 - 11:40 PM

HitmanPro 3.7.9.232
www.hitmanpro.com
 
   Computer name . . . . : RACHELLE
   Windows . . . . . . . : 6.3.0.9600.X64/4
   User name . . . . . . : Rachelle\Jonathan
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free
 
   Scan date . . . . . . : 2014-11-23 20:33:15
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 4m 23s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No
 
   Threats . . . . . . . : 0
   Traces  . . . . . . . : 106
 
   Objects scanned . . . : 1,586,366
   Files scanned . . . . : 69,791
   Remnants scanned  . . : 629,344 files / 887,231 keys
 
Suspicious files ____________________________________________________________
 
   C:\Users\Jonathan\Desktop\FRST64 (1).exe
      Size . . . . . . . : 2,118,144 bytes
      Age  . . . . . . . : 0.8 days (2014-11-23 00:19:41)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : E6F98F6FB182E5E8F6AFA5CB7F2BCD2ACCFEE6598D985F2F7A34C7CC01904D57
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
          0.0s C:\Users\Jonathan\Desktop\FRST64 (1).exe
         13.8s C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCache\IE\SQMOP76A\up64[1]
         13.9s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{74FB54B6-80A8-4D93-A32A-A6D15E2122F0}
         15.2s C:\Users\Jonathan\Desktop\FRST.txt
         18.1s C:\Windows\Prefetch\FRST64 (1).EXE-EC8894B7.pf
         47.5s C:\Users\Jonathan\Desktop\Addition.txt
 
   C:\Users\Jonathan\Downloads\FRST64.exe
      Size . . . . . . . : 2,118,144 bytes
      Age  . . . . . . . : 0.9 days (2014-11-22 22:05:16)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : E6F98F6FB182E5E8F6AFA5CB7F2BCD2ACCFEE6598D985F2F7A34C7CC01904D57
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
 
   C:\Windows\SysWOW64\GameMon.des
      Size . . . . . . . : 3,358,912 bytes
      Age  . . . . . . . : 44.5 days (2014-10-10 09:21:47)
      Entropy  . . . . . : 8.0
      SHA-256  . . . . . : 22B4F46AF7D0F81CEF2B4281CA8D0C4AEC472C7796D1A894891362DC57E96DEC
      Product  . . . . . : nProtect Game Monitor
      Publisher  . . . . : INCA Internet Co., Ltd.
      Description  . . . : nProtect Game Monitor Rev 2135
      Version  . . . . . : 2014.9.22.1
      RSA Key Size . . . : 2048
      Service  . . . . . : npggsvc
      LanguageID . . . . : 1042
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 25.0
         The file name extension of this program is not common.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
         Starts automatically as a service during system bootup.
         Program is code signed with a valid Authenticode certificate.
      Startup
         HKLM\SYSTEM\CurrentControlSet\Services\npggsvc\
 
 
Cookies _____________________________________________________________________
 
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:2o7.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:canwestglobal.112.2o7.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:coxnet.112.2o7.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:gntbcstglobal.112.2o7.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:googleadservices.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:hearstmagazines.112.2o7.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:in.getclicky.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:microsoftsto.112.2o7.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:pornfun.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:pornhub.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:rainbowmedia.122.2o7.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:ruleporn.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:server.cpmstar.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:survey.g.doubleclick.net
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:trackalyzer.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.pornhub.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.youporn.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:xiti.com
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:yadro.ru
   C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Cookies:youporn.com
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\012CONXM.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\06ABL423.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\0HA26ZQF.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\1BPEVINW.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\1N4J7QX8.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\20FZZNR0.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\2LPZURAD.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\2NTGJB5R.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\3KH7TLR0.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\40AT0119.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\459B2LUV.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\45EL9L78.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\46C9QUOG.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\4X821ERU.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\5MS96MNK.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\5O0X9N99.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\6HLYTE8V.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\6L6OUH4O.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\6OLXRQL9.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\7O3MBMYQ.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\7SK3HFHB.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\881FN0RU.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\8JP30NDL.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\8KLTPU5J.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\8NUUVGC7.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\927D4SI4.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\9C7KETZ4.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\BBNVUPKG.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\BINN0TXC.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\BMSOGSPW.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\C61SX00C.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\CMVOPEEM.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\CS7RQJCW.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\DFX4BQVR.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\EPZ1AZ9U.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\EX91RKF1.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\FM1IGZF1.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\GHIIHN3R.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\H6QFAZO5.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\HDVR1GIV.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\HO3CIXQS.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\HS1WG10U.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\HYLQFDMF.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\IDZO7KDR.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\IGVTJYS5.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\IT6MWW9O.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\JF3JL5KK.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\JJ65P96D.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\K05OXBPX.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\LZWA6B2I.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\M0DZ36KM.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\M1J4RYN8.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\MA3RUY73.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\MCUXGB7B.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\MDK1THXA.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\MKANOCOV.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\NH5ZJLRX.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\NWAVM1HD.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\O5WJA3DB.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\PFPOOG9T.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\PIUWM1MZ.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\QTG5J8J4.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\QVIOON58.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\R4WLF77X.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\RBOX0RS6.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\RJI2XCGS.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\RO0DGJ8E.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\S8AFLOFE.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\ST2WX7SB.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\T1M6PN2K.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\TA4C97GJ.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\THX5OT0H.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\UR40G026.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\UWBH4I53.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\VF0BMP55.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\VS20UP1U.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\W8YFC20Z.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\WIMMW29W.txt
   C:\Users\Jonathan\AppData\Local\Microsoft\Windows\INetCookies\ZIH6P1K4.txt
 
 

As of right now, there don't see to be many issues. However, I'm afraid that there may be lingering malware that is only appearing to be gone. 



#11 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:08:56 AM

Posted 24 November 2014 - 03:22 AM

Please go ahead with step 2... :)


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#12 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:08:56 AM

Posted 27 November 2014 - 03:31 PM

Hi,

3 Day Inactivity

This is the third day since my last post. Are you still there?

If you need more time, just let me know.

If you do not post within 48 hours, this thread will be closed due to inactivity.
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#13 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:08:56 AM

Posted 29 November 2014 - 09:24 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.
regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users