Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Been hit with COM Surrogate, need help removing


  • This topic is locked This topic is locked
16 replies to this topic

#1 BigRedWarrior

BigRedWarrior

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 25 December 2014 - 12:30 AM

Hi Bleeping Computer! 

I'm not entirely sure how it happened, by my computer ended up contracting the infamous COM Surrogate virus, which happened literally 48 hours after I decided to download Malwarebytes Anti-Malware on here. What are the chances of that?  :(

 

What happened first was that the noticed that this MBAM notifications popped up blocking some suspicious IP or URL. It looked like:

Mbam_Alert.jpg

 

I've had this pop up before when I was streaming a basketball game, so I didn't think much of it, I just went on with whatever I was doing, when all the sudden a bunch of these kept coming up, sometimes blocking an IP, at other times blocking a URL. I got kind of worried, so I opened up task manager, and I saw a bunch of processes hogging up my memory, and shortly after, my fan went insane. 

Task_Mngr.jpg

 

A quick Google search on "dllhost.exe" and COM Surrogate revealed that I wasn't the only one having this problem. Judging from the Task Manager processes, it looks like a ton of other suspicious crap besides just the dllhost.exe is also running. In fact, most of the high memory usage stuff, other than Rockmelt (which is the browser I'm using) looks fishy. 

I ran DDS and I've attached the logs that I've gotten from it. Regarding those two, I know it says that Bitdefender is disabled, but that's because my license expired. I'd recently downloaded Malwarebytes for that very reason. 

I've also noticed that most topics on this forum use Farbar Recovery Scan Tool, so I went ahead and ran that too. I've attached those files as well

I really appreciate all the help I can get. I'm really frustrated over here. This is one of the worst possible times I could be getting this issue, since I have a career deciding exam coming up and I need my computer in order to access practice tests. 

Thanks in advance. 

Attached Files


Edited by BigRedWarrior, 25 December 2014 - 12:45 AM.


BC AdBot (Login to Remove)

 


#2 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:33 AM

Posted 25 December 2014 - 06:48 AM

Merry Christmas :santa: &

:welcome: to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully: :exclame:

  • My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
  • Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
  • If I don't reply within 24 hours please PM me!
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.

Step 1
logo.png
Please download Powelikscleaner (by ESET) and save it to your Desktop.

  • Double-click the 3.png to start the tool.
  • Read the terms of the End-user license agreement and click Agree if you agree to them.
  • The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.
  • If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.
  • The tool will produce a log in the same directory the tool was run from.
  • Please copy and paste the log in your next reply.

1.png
2.png

Step 2

frst.pngfrstscan.png

Start FRST with administator privileges.

  • Press the Scan button.
  • When finished, FRST will produce a log (FRST.txt) in the same directory the tool was run from.
    Please copy and paste the log in your next reply.

Step 3

Please download 51a612a8b27e2-Zoek.pngZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on 51a612a8b27e2-Zoek.png icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
    process;
    services-list;
    systemspecs;
    startupall;
    filesrcm;
    
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#3 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 25 December 2014 - 01:01 PM

Hi Jürgen :hello: Merry Christmas to you as well!

Thanks for you help.  I just wanted to confirm something about running ESETPoweliksCleaner. The computer did not restart automatically after I exited the tool. I did that manually. Is that normal, or should the program have prompted me to restart the computer automatically? Regardless, I proceeded with your instructions. Here are the ESETPoweliksCleaner logs:

 

[2014.12.25 12:51:09.924] - Begin
[2014.12.25 12:51:09.925] -
[2014.12.25 12:51:09.929] -     ....................................
[2014.12.25 12:51:09.930] -   ..::::::::::::::::::....................
[2014.12.25 12:51:09.934] -   .::EEEEEE:::SSSSSS::..EEEEEE..TTTTTTTT..    Win32/Poweliks
[2014.12.25 12:51:09.938] -  .::EE::::EE:SS:::::::.EE....EE....TT......   Version: 1.0.0.1
[2014.12.25 12:51:09.941] -  .::EEEEEEEE::SSSSSS::.EEEEEEEE....TT......   Built: Oct 15 2014
[2014.12.25 12:51:09.944] -  .::EE:::::::::::::SS:.EE..........TT......
[2014.12.25 12:51:09.946] -   .::EEEEEE:::SSSSSS::..EEEEEE.....TT.....    Copyright © ESET, spol. s r.o.
[2014.12.25 12:51:09.947] -   ..::::::::::::::::::....................    1992-2013. All rights reserved.
[2014.12.25 12:51:09.948] -     ....................................
[2014.12.25 12:51:09.948] -
[2014.12.25 12:51:09.948] - --------------------------------------------------------------------------------
[2014.12.25 12:51:09.949] -
[2014.12.25 12:51:09.950] - INFO: OS: 6.1.7601 SP1
[2014.12.25 12:51:09.951] - INFO: Product Type: Workstation
[2014.12.25 12:51:09.951] - INFO: WoW64: True
[2014.12.25 12:51:09.952] - INFO: Machine guid: 2B8E0CC5-DEE2-4C6A-9936-3BA5ABF28240
[2014.12.25 12:51:09.954] -
[2014.12.25 12:51:12.220] - INFO: Scanning for system infection...
[2014.12.25 12:51:12.220] - --------------------------------------------------------------------------------
[2014.12.25 12:51:12.221] -
[2014.12.25 12:51:12.221] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.12.25 12:51:12.222] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.12.25 12:51:12.224] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.12.25 12:51:12.224] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.12.25 12:51:12.225] - INFO: Processing classes...
[2014.12.25 12:51:12.229] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}]
[2014.12.25 12:51:12.229] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{03C43AFB-0EA0-46AA-99A1-B85DF1C8D3D6}]
[2014.12.25 12:51:12.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0B4AA204-AB61-47E3-B5B4-27DCF375EBAC}]
[2014.12.25 12:51:12.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0B4AA204-AB61-47E3-B5B4-27DCF375EBAC}VersionIndependentProgID]
[2014.12.25 12:51:12.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}]
[2014.12.25 12:51:12.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0F9285DF-3511-4FE6-A587-CD8F61A121CA}]
[2014.12.25 12:51:12.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0FC7E9BC-E053-4AD8-BB2B-C52837B9008D}]
[2014.12.25 12:51:12.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}]
[2014.12.25 12:51:12.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}]
[2014.12.25 12:51:12.230] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{31261F21-2B16-45EE-BEAB-07C4CFA18B65}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{3F65C453-D051-4B7A-A5EA-0F3FAB0BA77F}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{644D8D6C-7CD2-4FB7-921C-3C8552E69074}]
[2014.12.25 12:51:12.231] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{6835F21B-AD12-485C-A8FD-D7DF60C72A69}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{699A646B-C61E-4C36-A253-620E4EBD294C}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{6AC91CBD-DB47-406A-AF60-90F8150FA5B8}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{71FDCAEA-B6F2-4B6C-A18C-6C85F0E4662F}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{7E024D23-24D9-425B-B2E3-1BF397408365}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}]
[2014.12.25 12:51:12.232] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{BEBBC426-4F16-4567-8FE1-BE198C982027}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{C9E37353-EC76-4A58-B575-BBA8B4BD06D1}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.233] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.234] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.235] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.236] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.237] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.237] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.237] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.237] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.237] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.237] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.237] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.237] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.238] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.239] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.240] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.241] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.242] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.242] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.242] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.242] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.242] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.242] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.242] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.243] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.243] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.243] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.243] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.243] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.243] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.243] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.244] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.244] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.244] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.244] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.244] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.244] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.245] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.246] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.246] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.246] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.246] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.246] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.246] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.246] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.247] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.247] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.247] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.247] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.247] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.247] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.247] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.247] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.248] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.249] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.249] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.249] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.249] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.249] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.249] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.249] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.250] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.250] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.250] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.250] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.250] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.250] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.250] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.251] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.251] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.251] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.251] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.251] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.251] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.251] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.252] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.252] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.252] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.252] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.252] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.252] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.252] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.253] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.253] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.253] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.253] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.253] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.253] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.253] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.254] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.254] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.254] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.254] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.254] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.254] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.254] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.254] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.255] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.256] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.256] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.256] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.256] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.256] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.256] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.256] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.257] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.258] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.258] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.258] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.258] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.258] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.258] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.258] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.258] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.259] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.260] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.261] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.262] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.263] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.263] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.263] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.263] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.263] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.263] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.263] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.264] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.264] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.264] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.264] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.264] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.264] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.264] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.265] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.265] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.265] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.265] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.265] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.266] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.266] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.266] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.266] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.266] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.266] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.267] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.267] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.267] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.267] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.267] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.267] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.267] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.268] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.268] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.268] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.268] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.268] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.268] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.268] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.268] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.269] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.269] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.269] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.269] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.269] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.269] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.269] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.269] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.270] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.271] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.271] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.271] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.271] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.271] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.271] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.271] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.272] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.272] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.272] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.272] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.272] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.272] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.273] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.273] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.273] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.273] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.273] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.273] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.273] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.273] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.274] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.274] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.274] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.274] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.274] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.274] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.275] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.275] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.275] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.275] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.275] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.275] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.275] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.276] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.277] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.277] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.277] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.277] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.277] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.277] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.278] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.278] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.278] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.278] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.278] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.278] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.279] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.279] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.279] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.279] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.279] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.279] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.280] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.280] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.280] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.280] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.280] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.280] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.280] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.280] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.281] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.281] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.281] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.281] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.281] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.281] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.281] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.282] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.283] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.283] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.283] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.283] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.283] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.283] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.283] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.284] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.284] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.284] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.284] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.284] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.284] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.284] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.285] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.286] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.286] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.286] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.286] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.286] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.286] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.286] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.287] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.287] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.287] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.287] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.287] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.287] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.287] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.288] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.288] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.288] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.288] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.288] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.288] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.288] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.288] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.289] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.289] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.289] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.289] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.289] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.289] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.289] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.289] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.290] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.290] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.290] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.290] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.290] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.290] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.290] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.291] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.291] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.291] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.291] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.291] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.291] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.291] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.292] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.292] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.292] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.292] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.292] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.292] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.292] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.293] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.293] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.293] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.293] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.293] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.293] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.293] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.294] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.294] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.294] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.294] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.294] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.294] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.295] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.295] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.295] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.295] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.295] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.295] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.295] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.296] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.296] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.296] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.296] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.296] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.296] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.296] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.296] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.297] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.297] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.297] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.297] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.297] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.298] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.298] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.298] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.298] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.298] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.298] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.298] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.299] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.299] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.299] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.299] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.299] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.299] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.299] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.300] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.300] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.300] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.300] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.300] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.300] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.300] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.301] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.301] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.301] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.301] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.301] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.301] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.302] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.302] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.302] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.302] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.302] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.302] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.302] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.303] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.303] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.303] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.303] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.303] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.303] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.304] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.304] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.304] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.304] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.304] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.304] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.305] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.305] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.305] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.305] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.305] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.305] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.305] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.306] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.306] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.306] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.306] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.306] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.306] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.307] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.307] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.307] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.307] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.307] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.307] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.307] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.308] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.308] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.308] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.308] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.308] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.308] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.309] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.309] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.309] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.310] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.310] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.310] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.310] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.311] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.311] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.311] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.311] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.312] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.312] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.312] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.312] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.312] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.312] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.312] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.313] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.313] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.313] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.313] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.313] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.313] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.314] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.314] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.314] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.314] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.314] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.314] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.314] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.315] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.315] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.315] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.315] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.315] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.315] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.316] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.316] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.316] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.317] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.317] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.317] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.317] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.317] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.318] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.318] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.318] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.318] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.318] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.318] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.319] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.319] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.319] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.319] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.319] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.319] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.319] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.319] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.320] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.320] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.320] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.320] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.320] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.320] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.320] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.320] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.321] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.321] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.321] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.321] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.321] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.321] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.321] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.321] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.322] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.322] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.322] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.322] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.322] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.322] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.322] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.322] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.323] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.323] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.323] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.323] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.323] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.323] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.324] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.324] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.324] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.324] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.324] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.324] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.324] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.325] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.325] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.325] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.325] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.325] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.325] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.325] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.325] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.326] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.326] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.326] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.326] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.326] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.326] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.326] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.327] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.327] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.327] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.327] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.327] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.327] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.327] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.328] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.328] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.328] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.328] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.328] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.328] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.328] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.329] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.329] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.329] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.329] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.329] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.329] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.329] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.330] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.331] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.331] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.331] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.331] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.331] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.331] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.331] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.331] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.332] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.332] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.332] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.332] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.332] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.332] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.333] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.333] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.333] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.333] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.333] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.333] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.333] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.334] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.334] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.334] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.334] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.334] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.334] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.334] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.335] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.335] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.335] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.335] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.335] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.335] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.335] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.336] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.336] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.336] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.336] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.336] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.336] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.336] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.337] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.338] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.338] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.338] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.338] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.338] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.338] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.338] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.338] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.339] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.339] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.339] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.339] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.339] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.339] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.339] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.339] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.340] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.340] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.340] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.340] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.340] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.340] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.340] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.340] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.341] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.342] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.342] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.342] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.342] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.342] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.342] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.342] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.342] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.343] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.343] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.343] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.343] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.343] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.343] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.344] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.344] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.344] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.344] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.344] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.344] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.345] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.345] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.345] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.345] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBB}]
[2014.12.25 12:51:12.345] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBC}]
[2014.12.25 12:51:12.345] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
[2014.12.25 12:51:12.345] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}]
[2014.12.25 12:51:12.346] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}]
[2014.12.25 12:51:12.346] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}]
[2014.12.25 12:51:12.346] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{DBFA3C03-20D5-4EE5-8C06-B8C4C2B71783}]
[2014.12.25 12:51:12.346] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.12.25 12:51:12.346] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}]
[2014.12.25 12:51:12.347] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}]
[2014.12.25 12:51:12.347] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}]
[2014.12.25 12:51:12.347] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
[2014.12.25 12:51:12.347] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}]
[2014.12.25 12:51:12.347] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.347] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.348] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.348] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.348] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.348] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.348] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.348] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.348] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FD10EA6A-0D14-4AA2-A376-0C8D51CA8779}]
[2014.12.25 12:51:12.348] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}]
[2014.12.25 12:51:12.349] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}]
[2014.12.25 12:51:12.349] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}]
[2014.12.25 12:51:12.349] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0F9285DF-3511-4FE6-A587-CD8F61A121CA}]
[2014.12.25 12:51:12.349] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}]
[2014.12.25 12:51:12.349] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{699A646B-C61E-4C36-A253-620E4EBD294C}]
[2014.12.25 12:51:12.349] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{71FDCAEA-B6F2-4B6C-A18C-6C85F0E4662F}]
[2014.12.25 12:51:12.349] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{7E024D23-24D9-425B-B2E3-1BF397408365}]
[2014.12.25 12:51:12.349] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}]
[2014.12.25 12:51:12.350] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
[2014.12.25 12:51:12.350] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.12.25 12:51:12.350] - WARNING: Found suspicous classid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.12.25 12:51:12.350] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
[2014.12.25 12:51:12.350] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{BD22D1CE-1AAB-47ED-9FF0-C34606E926A3}]
[2014.12.25 12:51:12.350] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{C9E37353-EC76-4A58-B575-BBA8B4BD06D1}]
[2014.12.25 12:51:12.350] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}]
[2014.12.25 12:51:12.350] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}]
[2014.12.25 12:51:12.351] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}]
[2014.12.25 12:51:12.351] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}]
[2014.12.25 12:51:12.351] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
[2014.12.25 12:51:12.351] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}]
[2014.12.25 12:51:12.351] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.351] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.351] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.352] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.352] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.352] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.352] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.352] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:12.352] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}]
[2014.12.25 12:51:12.352] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.12.25 12:51:12.356] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.12.25 12:51:12.358] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.12.25 12:51:12.358] - INFO: Processing invalid values in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.12.25 12:51:12.358] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.12.25 12:51:12.358] - INFO: Processing value [ServerExecutable] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.12.25 12:51:12.358] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.12.25 12:51:12.358] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.12.25 12:51:12.359] - INFO: Processing invalid subkeys in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.12.25 12:51:12.359] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]...
[2014.12.25 12:51:12.362] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.12.25 12:51:12.366] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.12.25 12:51:12.366] - INFO: Win32/Poweliks found
[2014.12.25 12:51:44.468] - INFO: process: dllhost.exe, pid 6460, parent 3168
[2014.12.25 12:51:44.468] - INFO: Terminated process pid = 6460
[2014.12.25 12:51:44.469] - INFO: process: dllhost.exe, pid 4272, parent 6460
[2014.12.25 12:51:44.470] - INFO: Terminated process pid = 4272
[2014.12.25 12:51:44.471] - INFO: process: dllhost.exe, pid 11868, parent 480
[2014.12.25 12:51:44.472] - INFO: Terminated process pid = 11868
[2014.12.25 12:51:44.474] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.12.25 12:51:44.475] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]...
[2014.12.25 12:51:44.477] - INFO: Processing [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.12.25 12:51:44.477] - INFO: Processing [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce]...
[2014.12.25 12:51:44.478] - INFO: Processing classes...
[2014.12.25 12:51:44.481] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}]
[2014.12.25 12:51:44.482] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{03C43AFB-0EA0-46AA-99A1-B85DF1C8D3D6}]
[2014.12.25 12:51:44.482] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0B4AA204-AB61-47E3-B5B4-27DCF375EBAC}]
[2014.12.25 12:51:44.482] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0B4AA204-AB61-47E3-B5B4-27DCF375EBAC}VersionIndependentProgID]
[2014.12.25 12:51:44.482] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}]
[2014.12.25 12:51:44.482] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0F9285DF-3511-4FE6-A587-CD8F61A121CA}]
[2014.12.25 12:51:44.482] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0FC7E9BC-E053-4AD8-BB2B-C52837B9008D}]
[2014.12.25 12:51:44.482] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}]
[2014.12.25 12:51:44.482] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}]
[2014.12.25 12:51:44.483] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}]
[2014.12.25 12:51:44.483] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{31261F21-2B16-45EE-BEAB-07C4CFA18B65}]
[2014.12.25 12:51:44.483] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}]
[2014.12.25 12:51:44.483] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}]
[2014.12.25 12:51:44.483] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{3F65C453-D051-4B7A-A5EA-0F3FAB0BA77F}]
[2014.12.25 12:51:44.483] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}]
[2014.12.25 12:51:44.483] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}]
[2014.12.25 12:51:44.484] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}]
[2014.12.25 12:51:44.484] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{644D8D6C-7CD2-4FB7-921C-3C8552E69074}]
[2014.12.25 12:51:44.484] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{6835F21B-AD12-485C-A8FD-D7DF60C72A69}]
[2014.12.25 12:51:44.484] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{699A646B-C61E-4C36-A253-620E4EBD294C}]
[2014.12.25 12:51:44.484] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{6AC91CBD-DB47-406A-AF60-90F8150FA5B8}]
[2014.12.25 12:51:44.484] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{71FDCAEA-B6F2-4B6C-A18C-6C85F0E4662F}]
[2014.12.25 12:51:44.484] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}]
[2014.12.25 12:51:44.484] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{7E024D23-24D9-425B-B2E3-1BF397408365}]
[2014.12.25 12:51:44.485] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}]
[2014.12.25 12:51:44.485] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}]
[2014.12.25 12:51:44.485] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
[2014.12.25 12:51:44.485] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}]
[2014.12.25 12:51:44.485] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}]
[2014.12.25 12:51:44.485] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}]
[2014.12.25 12:51:44.485] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
[2014.12.25 12:51:44.485] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{BEBBC426-4F16-4567-8FE1-BE198C982027}]
[2014.12.25 12:51:44.486] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
[2014.12.25 12:51:44.486] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
[2014.12.25 12:51:44.486] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{C9E37353-EC76-4A58-B575-BBA8B4BD06D1}]
[2014.12.25 12:51:44.486] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.486] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.486] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.486] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.486] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.487] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.487] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.487] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.487] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.487] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.487] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.487] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.487] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.488] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.489] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.489] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.489] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.489] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.489] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.489] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.489] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.489] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.490] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.490] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.490] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.490] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.490] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.490] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.490] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.490] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.491] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.491] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.491] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.491] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.491] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.491] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.491] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.491] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.492] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.492] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.492] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.492] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.492] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.492] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.492] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.492] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.493] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
 


Edited by BigRedWarrior, 25 December 2014 - 01:58 PM.


#4 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 25 December 2014 - 01:02 PM

[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.494] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.495] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.496] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.497] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.498] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.499] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.500] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.501] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.502] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.503] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.504] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.505] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.505] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.505] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.505] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.505] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.506] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.507] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.508] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.509] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.510] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.511] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.512] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.513] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.514] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.515] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.516] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.517] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.518] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.519] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0066-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.520] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0067-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0068-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0069-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0070-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.521] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0071-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.522] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.523] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.524] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.525] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.526] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.527] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.528] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.529] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.530] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.531] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.532] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.532] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.532] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.532] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.532] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.532] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.532] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.532] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.533] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.534] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.535] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.536] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.537] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.539] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.540] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.541] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.542] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.543] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.544] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.544] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.544] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.544] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.544] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.544] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.544] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.544] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.545] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.545] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0076-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.545] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.545] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.545] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0077-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.545] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.545] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.545] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0078-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.546] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.546] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.546] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0079-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.546] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.547] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.547] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0080-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.547] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.547] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.547] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0081-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.547] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.547] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.548] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.549] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.550] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.551] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.551] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.551] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.551] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.551] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.551] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.551] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.552] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.552] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.552] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.552] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.552] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.552] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.552] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.553] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.553] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.553] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.553] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.553] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.553] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.553] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.553] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.554] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.555] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.556] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.557] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.558] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.558] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.558] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.558] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.558] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.558] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.559] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.559] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.559] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.559] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.559] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.559] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.560] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.560] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.560] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.560] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.560] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.560] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.560] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.561] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.561] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.561] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.561] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.561] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.562] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.562] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.562] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.562] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.562] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.562] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.562] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.563] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.564] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.565] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.566] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.566] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.566] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.566] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.566] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0056-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0057-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0058-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.567] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0059-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0060-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0061-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0062-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.568] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.569] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0063-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.569] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.569] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.569] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0064-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.570] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.570] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.570] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0065-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.570] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.570] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.571] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0066-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.571] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.571] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBB}]
[2014.12.25 12:51:44.571] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0067-ABCDEFFEDCBC}]
[2014.12.25 12:51:44.571] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
[2014.12.25 12:51:44.571] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}]
[2014.12.25 12:51:44.571] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}]
[2014.12.25 12:51:44.572] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}]
[2014.12.25 12:51:44.572] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{DBFA3C03-20D5-4EE5-8C06-B8C4C2B71783}]
[2014.12.25 12:51:44.572] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
[2014.12.25 12:51:44.572] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}]
[2014.12.25 12:51:44.572] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}]
[2014.12.25 12:51:44.572] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}]
[2014.12.25 12:51:44.573] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
[2014.12.25 12:51:44.573] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}]
[2014.12.25 12:51:44.573] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.573] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.573] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.573] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.573] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.574] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.574] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.574] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.574] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FD10EA6A-0D14-4AA2-A376-0C8D51CA8779}]
[2014.12.25 12:51:44.574] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}]
[2014.12.25 12:51:44.575] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}]
[2014.12.25 12:51:44.575] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}]
[2014.12.25 12:51:44.575] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{0F9285DF-3511-4FE6-A587-CD8F61A121CA}]
[2014.12.25 12:51:44.576] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}]
[2014.12.25 12:51:44.576] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{699A646B-C61E-4C36-A253-620E4EBD294C}]
[2014.12.25 12:51:44.576] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{71FDCAEA-B6F2-4B6C-A18C-6C85F0E4662F}]
[2014.12.25 12:51:44.576] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{7E024D23-24D9-425B-B2E3-1BF397408365}]
[2014.12.25 12:51:44.577] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}]
[2014.12.25 12:51:44.577] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
[2014.12.25 12:51:44.577] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.12.25 12:51:44.577] - INFO: Deleted classid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]
[2014.12.25 12:51:44.578] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
[2014.12.25 12:51:44.578] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{BD22D1CE-1AAB-47ED-9FF0-C34606E926A3}]
[2014.12.25 12:51:44.578] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{C9E37353-EC76-4A58-B575-BBA8B4BD06D1}]
[2014.12.25 12:51:44.578] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}]
[2014.12.25 12:51:44.578] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}]
[2014.12.25 12:51:44.578] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}]
[2014.12.25 12:51:44.578] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}]
[2014.12.25 12:51:44.579] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
[2014.12.25 12:51:44.579] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}]
[2014.12.25 12:51:44.579] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.579] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.580] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.581] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.581] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.581] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.581] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.581] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
[2014.12.25 12:51:44.581] - INFO: Processing clsid [\Registry\User\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}]
[2014.12.25 12:51:44.581] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.12.25 12:51:44.582] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.12.25 12:51:44.582] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.12.25 12:51:44.582] - INFO: Processing invalid values in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.12.25 12:51:44.582] - INFO: Processing value [] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.12.25 12:51:44.582] - INFO: Processing value [ServerExecutable] = [%systemroot%\sysWOW64\wbem\wmiprvse.exe]
[2014.12.25 12:51:44.582] - INFO: Processing value [] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.12.25 12:51:44.584] - INFO: Processing value [ServerExecutable] = [%systemroot%\system32\wbem\wmiprvse.exe]
[2014.12.25 12:51:44.584] - INFO: Processing invalid subkeys in [HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32]...
[2014.12.25 12:51:44.584] - INFO: Processing [HKLM\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}]...
[2014.12.25 12:51:44.584] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.12.25 12:51:44.584] - INFO: Processing subkey [\Registry\Machine\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32]
[2014.12.25 12:51:44.584] - INFO: Cleaning status: 0
[2014.12.25 12:51:48.538] - End

That's the rest of the PoweliksCleaner log. It was too long for a single post, so I split it into two.



#5 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 25 December 2014 - 01:04 PM

Here is the FRST log:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-12-2014
Ran by Parth (administrator) on XJ-9 on 25-12-2014 13:02:58
Running from C:\Users\Parth\Desktop\BleepingComputer
Loaded Profile: Parth (Available profiles: Parth)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe
(LogMeIn, Inc.) C:\Users\Parth\AppData\Roaming\cubby\cubby.exe
(Dropbox, Inc.) C:\Users\Parth\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [BDAgent] => C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe [1091200 2012-12-12] (Bitdefender)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2012-08-04] (IDT, Inc.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-25] (CANON INC.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2014-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1213848 2010-09-14] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2010-09-09] (CANON INC.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-06-14] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2012-11-20] (cyberlink)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-12-16] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [RockMelt Update] => C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [136336 2012-07-12] (RockMelt Inc.)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [Facebook Update] => C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-11-28] (Facebook Inc.)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [Google Update] => C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-02-01] (Google Inc.)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3618648 2014-12-18] (Electronic Arts)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [LogMeIn Cubby] => C:\Users\Parth\AppData\Roaming\cubby\cubby.exe [5454608 2014-09-17] (LogMeIn, Inc.)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {0df60474-f7b2-11e2-acc2-082e5f88a833} - F:\TL-Bootstrap.exe
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {148632fc-0d9a-11e2-818d-082e5f88a833} - G:\LaunchU3.exe -a
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {1c6c2a96-7737-11e3-9936-082e5f88a833} - G:\Startme.exe
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {2176157c-ad19-11e1-b48f-4ceb42290d41} - G:\TL-Bootstrap.exe
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {b3503542-acbd-11e1-a2fe-4ceb42290d41} - F:\setup.exe
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {ca4cfd24-a5db-11e2-8366-082e5f88a833} - F:\VZW_Software_upgrade_assistant.exe
Startup: C:\Users\Parth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxshell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxshell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxshell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxshell.dll (Bitdefender)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_app_14_33_ff&cd=2XzuyEtN2Y1L1QzuyE0C0E0ByEtBtBzytD0DtA0EyByE0CyCtN0D0Tzu0SzyyDzytN1L2XzutAtFtDtFtCtDtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtA0Ezyzz0CyByBtGtC0FyBtBtG0Ezy0DyDtGyDtB0FtAtGtD0C0ByC0ByEtD0DtDtC0Azz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtC0A0C0CzztBtBtGyByDyDtAtGyEyCyDyEtGzytByEzytG0DzyzytD0A0E0E0BtByC0ByD2Q&cr=1545170317&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_app_14_33_ff&cd=2XzuyEtN2Y1L1QzuyE0C0E0ByEtBtBzytD0DtA0EyByE0CyCtN0D0Tzu0SzyyDzytN1L2XzutAtFtDtFtCtDtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtA0Ezyzz0CyByBtGtC0FyBtBtG0Ezy0DyDtGyDtB0FtAtGtD0C0ByC0ByEtD0DtDtC0Azz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtC0A0C0CzztBtBtGyByDyDtAtGyEyCyDyEtGzytByEzytG0DzyzytD0A0E0E0BtByC0ByD2Q&cr=1545170317&ir=
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {977D423B-5C68-401D-B409-A1B7B86B6F4C} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKLM-x32 -> {977D423B-5C68-401D-B409-A1B7B86B6F4C} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_app_14_33_ff&cd=2XzuyEtN2Y1L1QzuyE0C0E0ByEtBtBzytD0DtA0EyByE0CyCtN0D0Tzu0SzyyDzytN1L2XzutAtFtDtFtCtDtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtA0Ezyzz0CyByBtGtC0FyBtBtG0Ezy0DyDtGyDtB0FtAtGtD0C0ByC0ByEtD0DtDtC0Azz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtC0A0C0CzztBtBtGyByDyDtAtGyEyCyDyEtGzytByEzytG0DzyzytD0A0E0E0BtByC0ByD2Q&cr=1545170317&ir=
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_app_14_33_ff&cd=2XzuyEtN2Y1L1QzuyE0C0E0ByEtBtBzytD0DtA0EyByE0CyCtN0D0Tzu0SzyyDzytN1L2XzutAtFtDtFtCtDtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtA0Ezyzz0CyByBtGtC0FyBtBtG0Ezy0DyDtGyDtB0FtAtGtD0C0ByC0ByEtD0DtDtC0Azz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtC0A0C0CzztBtBtGyByDyDtAtGyEyCyDyEtGzytByEzytG0DzyzytD0A0E0E0BtByC0ByD2Q&cr=1545170317&ir=
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> {977D423B-5C68-401D-B409-A1B7B86B6F4C} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-08-24] (EasyBits Software Corp.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 68.237.161.12

FireFox:
========
FF ProfilePath: C:\Users\Parth\AppData\Roaming\Mozilla\Firefox\Profiles\gwfrzde4.default-1408202781653
FF DefaultSearchEngine: Google
FF Homepage: google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\9.0.1.4055459\npmathplugin.dll (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Parth\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Parth\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @talk.google.com/O1DPlugin -> C:\Users\Parth\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Parth\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @us-w1.rockmelt.com/RockMelt Update;version=8 -> C:\Users\Parth\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll (RockMelt Inc.)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF user.js: detected! => C:\Users\Parth\AppData\Roaming\Mozilla\Firefox\Profiles\gwfrzde4.default-1408202781653\user.js
FF Plugin ProgramFiles/Appdata: C:\Users\Parth\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Parth\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: Adblock Plus - C:\Users\Parth\AppData\Roaming\Mozilla\Firefox\Profiles\gwfrzde4.default-1408202781653\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-16]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2014-12-09]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-12-09]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext [2012-05-07]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-08-13]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://astromenda.com/?f=7&a=ast_app_14_33_ff&cd=2XzuyEtN2Y1L1QzuyE0C0E0ByEtBtBzytD0DtA0EyByE0CyCtN0D0Tzu0SzyyDzytN1L2XzutAtFtDtFtCtDtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtA0Ezyzz0CyByBtGtC0FyBtBtG0Ezy0DyDtGyDtB0FtAtGtD0C0ByC0ByEtD0DtDtC0Azz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtC0A0C0CzztBtBtGyByDyDtAtGyEyCyDyEtGzytByEzytG0DzyzytD0A0E0E0BtByC0ByD2Q&cr=1545170317&ir="
CHR DefaultSearchKeyword: Default -> astromenda.com
CHR DefaultSearchURL: Default -> http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_app_14_33_ff&cd=2XzuyEtN2Y1L1QzuyE0C0E0ByEtBtBzytD0DtA0EyByE0CyCtN0D0Tzu0SzyyDzytN1L2XzutAtFtDtFtCtDtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtA0Ezyzz0CyByBtGtC0FyBtBtG0Ezy0DyDtGyDtB0FtAtGtD0C0ByC0ByEtD0DtDtC0Azz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtC0A0C0CzztBtBtGyByDyDtAtGyEyCyDyEtGzytByEzytG0DzyzytD0A0E0E0BtByC0ByD2Q&cr=1545170317&ir=
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR Profile: C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-10]
CHR Extension: (Google Drive) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-10]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-26]
CHR Extension: (YouTube) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-10]
CHR Extension: (Google Search) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-10]
CHR Extension: (Google Wallet) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-10]
CHR Extension: (Gmail) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-10]
CHR HKLM-x32\...\Chrome\Extension: [dfaldikcoaplhepekpbngkepfcoiihef] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-08-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [901184 2011-01-24] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [991296 2011-01-24] (Intel Corporation) [File not signed]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [244720 2012-02-08] (CyberLink)
R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2413056 2012-11-20] (Realsil Microelectronics Inc.) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-18] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-06-17] ()
S3 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [75384 2012-09-04] (Bitdefender)
S3 Update Server; C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe [466736 2011-10-14] (BitDefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe [67904 2012-09-04] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe [1957912 2012-12-12] (Bitdefender)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [705552 2012-12-12] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-12-12] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [587024 2012-12-12] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93160 2012-09-04] (BitDefender LLC)
R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [442088 2011-08-16] (BitDefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdsandbox; C:\Windows\system32\drivers\bdsandbox.sys [79952 2011-11-17] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [103944 2010-01-19] (BitDefender)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-25] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2014-12-24] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [329800 2011-10-27] (BitDefender S.R.L.)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-25 00:26 - 2014-12-25 13:03 - 00000000 ____D () C:\FRST
2014-12-25 00:01 - 2014-12-25 13:02 - 00000000 ____D () C:\Users\Parth\Desktop\BleepingComputer
2014-12-24 23:29 - 2014-12-24 23:29 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-24 20:51 - 2014-12-24 20:51 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-12-24 20:51 - 2014-12-24 20:51 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-12-24 20:50 - 2014-12-24 20:51 - 15201368 _____ () C:\Users\Parth\Downloads\RogueKiller.exe
2014-12-22 16:14 - 2014-12-25 12:54 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-22 16:14 - 2014-12-22 16:14 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-22 16:14 - 2014-12-22 16:14 - 00001106 _____ () C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-22 16:14 - 2014-12-22 16:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-22 16:14 - 2014-12-22 16:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-22 16:14 - 2014-12-22 16:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-22 16:14 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-22 16:14 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-22 16:14 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-18 10:37 - 2014-12-13 00:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 10:37 - 2014-12-12 22:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 06:38 - 2014-10-17 21:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-15 06:38 - 2014-10-17 20:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-15 06:38 - 2014-07-06 21:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-15 06:38 - 2014-07-06 21:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-12-15 06:38 - 2014-07-06 21:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-12-15 06:38 - 2014-07-06 21:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-12-15 06:38 - 2014-07-06 20:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-12-15 06:38 - 2014-07-06 20:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-12-15 06:38 - 2014-07-06 20:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-12-15 06:38 - 2014-07-06 20:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-12-10 11:38 - 2014-12-10 11:38 - 00000000 ____D () C:\Users\Parth\Downloads\Random bleep
2014-12-10 04:51 - 2014-11-26 20:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 04:51 - 2014-11-26 20:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 04:51 - 2014-11-21 22:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 04:51 - 2014-11-21 22:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 04:51 - 2014-11-21 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 04:51 - 2014-11-21 21:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 04:51 - 2014-11-21 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 04:51 - 2014-11-21 21:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 04:51 - 2014-11-21 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 04:51 - 2014-11-21 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 04:51 - 2014-11-21 21:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 04:51 - 2014-11-21 21:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 04:51 - 2014-11-21 21:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 04:51 - 2014-11-21 21:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 04:51 - 2014-11-21 21:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 04:51 - 2014-11-21 21:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 04:51 - 2014-11-21 21:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 04:51 - 2014-11-21 21:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 04:51 - 2014-11-21 21:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 04:51 - 2014-11-21 21:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 04:51 - 2014-11-21 21:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 04:51 - 2014-11-21 21:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 04:51 - 2014-11-21 21:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 04:51 - 2014-11-21 21:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 04:51 - 2014-11-21 21:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 04:51 - 2014-11-21 21:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 04:51 - 2014-11-21 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 04:51 - 2014-11-21 21:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 04:51 - 2014-11-21 21:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 04:51 - 2014-11-21 20:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 04:51 - 2014-11-21 20:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 04:51 - 2014-11-21 20:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 04:51 - 2014-11-21 20:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 04:51 - 2014-11-21 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 04:51 - 2014-11-21 20:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 04:51 - 2014-11-21 20:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 04:51 - 2014-11-21 20:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 04:51 - 2014-11-21 20:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 04:51 - 2014-11-21 20:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 04:51 - 2014-11-21 20:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 04:51 - 2014-11-21 20:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 04:51 - 2014-11-21 20:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 04:51 - 2014-11-21 20:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 04:51 - 2014-11-21 20:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 04:51 - 2014-11-21 20:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 04:51 - 2014-11-21 20:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 04:51 - 2014-11-21 20:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 04:51 - 2014-11-21 20:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 04:51 - 2014-11-21 20:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 04:51 - 2014-11-21 20:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 04:51 - 2014-11-21 20:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 04:51 - 2014-11-21 20:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 04:51 - 2014-11-21 19:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 04:51 - 2014-11-21 19:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 04:51 - 2014-11-10 22:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 04:51 - 2014-11-10 21:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 04:51 - 2014-11-10 20:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 04:51 - 2014-10-29 21:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 04:51 - 2014-10-29 20:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 04:51 - 2014-10-02 21:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 04:51 - 2014-10-02 21:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 04:51 - 2014-10-02 21:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 04:51 - 2014-10-02 21:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 04:51 - 2014-10-02 21:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 04:51 - 2014-10-02 20:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 04:51 - 2014-10-02 20:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 04:51 - 2014-10-02 20:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 04:51 - 2014-10-02 20:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 04:51 - 2014-10-02 20:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 04:50 - 2014-11-07 22:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 04:50 - 2014-11-07 21:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-09 14:30 - 2014-12-09 14:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-29 21:16 - 2014-11-29 21:16 - 00000000 __SHD () C:\Users\Parth\AppData\Local\EmieBrowserModeList

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-25 13:01 - 2014-03-27 21:40 - 00000000 ____D () C:\ProgramData\Origin
2014-12-25 12:55 - 2013-11-04 14:46 - 00000000 ___RD () C:\Users\Parth\Documents\Dropbox
2014-12-25 12:55 - 2013-11-04 14:41 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\Dropbox
2014-12-25 12:54 - 2014-05-27 09:03 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\cubby
2014-12-25 12:54 - 2014-03-27 21:40 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-12-25 12:54 - 2012-04-27 17:11 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-25 12:53 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-25 12:53 - 2009-07-13 23:51 - 00127512 _____ () C:\Windows\setupact.log
2014-12-25 12:52 - 2012-02-27 10:00 - 01374173 _____ () C:\Windows\WindowsUpdate.log
2014-12-25 12:52 - 2009-07-13 23:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-25 12:52 - 2009-07-13 23:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-25 12:48 - 2012-05-10 13:26 - 00000376 _____ () C:\Users\Parth\AppData\Roamingprivacy.xml
2014-12-25 12:47 - 2010-11-20 22:47 - 00701856 _____ () C:\Windows\PFRO.log
2014-12-25 03:12 - 2014-02-01 21:42 - 00000908 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job
2014-12-25 03:05 - 2012-04-26 16:03 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-25 02:35 - 2012-07-12 23:27 - 00000928 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job
2014-12-25 02:15 - 2012-11-28 17:10 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job
2014-12-25 02:00 - 2014-06-29 18:38 - 00000000 ____D () C:\Users\Parth\AppData\Local\Adobe
2014-12-25 00:37 - 2012-04-26 15:29 - 00000000 ____D () C:\Users\Parth\AppData\Local\CrashDumps
2014-12-25 00:32 - 2012-07-12 23:27 - 00000876 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job
2014-12-24 23:26 - 2014-06-04 13:09 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForParth.job
2014-12-24 23:25 - 2012-04-26 16:17 - 00000000 ____D () C:\Windows\Sun
2014-12-24 21:19 - 2012-05-21 15:20 - 00000327 _____ () C:\Windows\system32\checkdnsid.xml
2014-12-24 19:59 - 2012-04-26 15:29 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{8749DA3B-8A55-45BF-A5A0-51E131BCADED}
2014-12-23 17:50 - 2014-03-10 20:19 - 00000000 ____D () C:\Users\Parth\Downloads\Movies
2014-12-23 17:15 - 2012-11-28 17:10 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job
2014-12-23 17:12 - 2014-02-01 21:42 - 00000856 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job
2014-12-23 16:51 - 2012-04-26 22:09 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\BitTorrent
2014-12-23 16:51 - 2012-04-26 16:03 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-23 16:51 - 2012-04-26 16:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-23 16:51 - 2012-04-26 16:03 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-23 14:13 - 2014-06-04 13:09 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForParth
2014-12-23 14:11 - 2012-05-23 19:42 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-12-23 14:11 - 2012-05-09 17:03 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-12-22 17:26 - 2012-10-08 16:56 - 00000000 ____D () C:\Users\Parth\AppData\Local\My Games
2014-12-22 16:10 - 2009-07-14 00:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-18 13:38 - 2013-11-04 14:44 - 00001876 _____ () C:\Windows\wininit.ini
2014-12-18 13:38 - 2013-11-04 14:44 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-18 13:29 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-15 06:44 - 2013-08-07 03:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-15 06:44 - 2012-06-02 09:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-15 06:39 - 2012-08-04 15:20 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 13:29 - 2014-09-25 16:18 - 00000000 ____D () C:\Users\Parth\Downloads\H&M
2014-12-10 12:06 - 2014-03-10 20:19 - 00000000 ____D () C:\Users\Parth\Downloads\Games
2014-12-10 10:45 - 2011-08-24 23:35 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-04 17:26 - 2012-08-27 08:06 - 00000000 ____D () C:\Users\Parth\Documents\Shtuff
2014-11-30 17:13 - 2013-08-28 14:14 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\vlc
2014-11-29 21:16 - 2014-02-10 00:43 - 00000000 ____D () C:\Program Files (x86)\Google

Some content of TEMP:
====================
C:\Users\Parth\AppData\Local\Temp\2367.exe
C:\Users\Parth\AppData\Local\Temp\2CC1.exe
C:\Users\Parth\AppData\Local\Temp\32F1.exe
C:\Users\Parth\AppData\Local\Temp\6B29.exe
C:\Users\Parth\AppData\Local\Temp\889.exe
C:\Users\Parth\AppData\Local\Temp\916E.exe
C:\Users\Parth\AppData\Local\Temp\9EE6.exe
C:\Users\Parth\AppData\Local\Temp\A812.exe
C:\Users\Parth\AppData\Local\Temp\AutoRun.exe
C:\Users\Parth\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Parth\AppData\Local\Temp\avguidx.dll
C:\Users\Parth\AppData\Local\Temp\B18B.exe
C:\Users\Parth\AppData\Local\Temp\blekko.exe
C:\Users\Parth\AppData\Local\Temp\CH.dll
C:\Users\Parth\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Parth\AppData\Local\Temp\contentDATs.exe
C:\Users\Parth\AppData\Local\Temp\Copy.dll
C:\Users\Parth\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\Parth\AppData\Local\Temp\D46C.exe
C:\Users\Parth\AppData\Local\Temp\D4FB.exe
C:\Users\Parth\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Parth\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Parth\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpiigwg6.dll
C:\Users\Parth\AppData\Local\Temp\Extract.exe
C:\Users\Parth\AppData\Local\Temp\FlashPlayer.exe
C:\Users\Parth\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit-1.exe
C:\Users\Parth\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe
C:\Users\Parth\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\Parth\AppData\Local\Temp\iGearedHelper.dll
C:\Users\Parth\AppData\Local\Temp\jre-6u32-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\Parth\AppData\Local\Temp\lgyn.exe
C:\Users\Parth\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Parth\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Parth\AppData\Local\Temp\mssinstaller.exe
C:\Users\Parth\AppData\Local\Temp\ncpuwurm.exe
C:\Users\Parth\AppData\Local\Temp\NGMDll.dll
C:\Users\Parth\AppData\Local\Temp\NGMResource.dll
C:\Users\Parth\AppData\Local\Temp\NGMSetup.exe
C:\Users\Parth\AppData\Local\Temp\ntdll_dump.dll
C:\Users\Parth\AppData\Local\Temp\ochelper.exe
C:\Users\Parth\AppData\Local\Temp\oi_{23C10207-AF82-4FCD-AEA5-27AD96B5CB15}.exe
C:\Users\Parth\AppData\Local\Temp\oi_{E61F1D3C-E6B0-4835-8929-0D4B6F5B20D7}.exe
C:\Users\Parth\AppData\Local\Temp\oi_{EB403CA5-4C0D-4977-9CAE-3C3A7B7D5986}.exe
C:\Users\Parth\AppData\Local\Temp\ose00000.exe
C:\Users\Parth\AppData\Local\Temp\Resource.exe
C:\Users\Parth\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Parth\AppData\Local\Temp\setup.exe
C:\Users\Parth\AppData\Local\Temp\sp54620.exe
C:\Users\Parth\AppData\Local\Temp\SP54630.exe
C:\Users\Parth\AppData\Local\Temp\SP54714.exe
C:\Users\Parth\AppData\Local\Temp\SP54746.exe
C:\Users\Parth\AppData\Local\Temp\SP54841.exe
C:\Users\Parth\AppData\Local\Temp\SP54900.exe
C:\Users\Parth\AppData\Local\Temp\SP54999.exe
C:\Users\Parth\AppData\Local\Temp\SP55092.exe
C:\Users\Parth\AppData\Local\Temp\SP55094.exe
C:\Users\Parth\AppData\Local\Temp\SP55101.exe
C:\Users\Parth\AppData\Local\Temp\SP55102.exe
C:\Users\Parth\AppData\Local\Temp\SP55104.exe
C:\Users\Parth\AppData\Local\Temp\SP55107.exe
C:\Users\Parth\AppData\Local\Temp\SP55109.exe
C:\Users\Parth\AppData\Local\Temp\SP55152.exe
C:\Users\Parth\AppData\Local\Temp\SP55175.exe
C:\Users\Parth\AppData\Local\Temp\SP56215.exe
C:\Users\Parth\AppData\Local\Temp\SP56221.exe
C:\Users\Parth\AppData\Local\Temp\SP56878.exe
C:\Users\Parth\AppData\Local\Temp\SP56904.exe
C:\Users\Parth\AppData\Local\Temp\SP56929.exe
C:\Users\Parth\AppData\Local\Temp\SP56978.exe
C:\Users\Parth\AppData\Local\Temp\SP57090.exe
C:\Users\Parth\AppData\Local\Temp\SP57232.exe
C:\Users\Parth\AppData\Local\Temp\SP57398.exe
C:\Users\Parth\AppData\Local\Temp\sp58915.exe
C:\Users\Parth\AppData\Local\Temp\SP58987.exe
C:\Users\Parth\AppData\Local\Temp\SP59755.exe
C:\Users\Parth\AppData\Local\Temp\sp64126.exe
C:\Users\Parth\AppData\Local\Temp\SRLDetectionLibrary610623509971753038.dll
C:\Users\Parth\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Parth\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Parth\AppData\Local\Temp\unicows.dll
C:\Users\Parth\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Parth\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Parth\AppData\Local\Temp\utt5183.tmp.exe
C:\Users\Parth\AppData\Local\Temp\ydzjvizu.exe
C:\Users\Parth\AppData\Local\Temp\yxwn.exe
C:\Users\Parth\AppData\Local\Temp\_hnjkdia.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-18 18:47

==================== End Of Log ============================



#6 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 25 December 2014 - 01:56 PM

Here's the Zoek log as well:

Zoek.exe v5.0.0.0 Updated 24-12-2014
Tool run by Parth on Thu 12/25/2014 at 13:47:03.73.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Parth\Desktop\BleepingComputer\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

12/25/2014 1:47:45 PM Zoek.exe System Restore Point Created Succesfully.

==== Running Processes ======================

C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\Parth\AppData\Roaming\cubby\cubby.exe
C:\Users\Parth\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Users\Parth\Desktop\BleepingComputer\zoek.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe

==== Services(whitelist) ======================
Powered by E Dev

R2 - [AdobeARMservice] - Adobe Acrobat Update Service - c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe
R2 - [AESTFilters] - Andrea ST Filters Service - c:\program files\idt\wdm\aestsr64.exe
R2 - [AMD External Events Utility] - AMD External Events Utility - c:\windows\system32\atiesrxx.exe
R2 - [AMPPALR3] - Intel® Centrino® Wireless Bluetooth® + High Speed Service - c:\program files\intel\bluetoothhs\bthsamppalservice.exe
R2 - [BTHSSecurityMgr] - Intel® Centrino® Wireless Bluetooth® + High Speed Security Service - c:\program files\intel\bluetoothhs\bthssecuritymgr.exe
R2 - [EvtEng] - Intel® PROSet/Wireless Event Log - c:\program files\intel\wifi\bin\evteng.exe
R2 - [ezSharedSvc] - Easybits Services for Windows - c:\windows\system32\ezsharedsvchost.exe [x]
R2 - [FPLService] - TrueSuiteService - c:\program files (x86)\hp simplepass 2011\truesuiteservice.exe
R2 - [HP Support Assistant Service] - HP Support Assistant Service - c:\program files (x86)\hewlett-packard\hp support framework\hpsa_service.exe
R2 - [HPClientSvc] - HP Client Services - c:\program files\hewlett-packard\hp client services\hpclientservices.exe
R2 - [hpsrv] - HP Service - c:\windows\system32\hpservice.exe
R2 - [IAStorDataMgrSvc] - Intel® Rapid Storage Technology - c:\program files (x86)\intel\intel® rapid storage technology\iastordatamgrsvc.exe
R2 - [IconMan_R] - IconMan_R - c:\program files (x86)\realtek\realtek pcie card reader\riconman.exe
R2 - [LMS] - Intel® Management and Security Application Local Management Service - c:\program files (x86)\intel\intel® management engine components\lms\lms.exe
R2 - [PnkBstrA] - PnkBstrA - c:\windows\system32\pnkbstra.exe [x]
R2 - [RegSrvc] - Intel® PROSet/Wireless Registry Service - c:\program files\common files\intel\wirelesscommon\regsrvc.exe
R2 - [STacSV] - Audio Service - c:\program files\idt\wdm\stacsv64.exe
R2 - [TeamViewer9] - TeamViewer 9 - c:\program files (x86)\teamviewer\version9\teamviewer_service.exe
R2 - [UNS] - Intel® Management and Security Application User Notification Service - c:\program files (x86)\intel\intel® management engine components\uns\uns.exe
R2 - [UPDATESRV] - BitDefender Desktop Update Service - c:\program files\bitdefender\bitdefender 2012\updatesrv.exe
R2 - [VSSERV] - BitDefender Virus Shield - c:\program files\bitdefender\bitdefender 2012\vsserv.exe
R2 - [wlidsvc] - Windows Live ID Sign-in Assistant - c:\program files\common files\microsoft shared\windows live\wlidsvc.exe
R2 - [WMPNetworkSvc] - Windows Media Player Network Sharing Service - c:\program files\windows media player\wmpnetwk.exe
R2 - [WSearch] - Windows Search - c:\windows\system32\searchindexer.exe
R2 - [ZeroConfigService] - Intel® PROSet/Wireless Zero Configuration Service - c:\program files\intel\wifi\bin\zeroconfigservice.exe
R3 - [FontCache3.0.0.0] - Windows Presentation Foundation Font Cache 3.0.0.0 - c:\windows\microsoft.net\framework64\v3.0\wpf\presentationfontcache.exe
R3 - [hpCMSrv] - HP Connection Manager 4 Service - c:\program files (x86)\hewlett-packard\hp connection manager\hpcmsrv.exe
R3 - [hpqwmiex] - HP Software Framework Service - c:\program files (x86)\hewlett-packard\shared\hpqwmiex.exe
R3 - [VSS] - Volume Shadow Copy - c:\windows\system32\vssvc.exe
S2 - [CLKMSVC10_38F51D56] - CyberLink Product - 2012/11/20 21:24:58 - c:\program files (x86)\cyberlink\powerdvd10\navfilter\kmsvc.exe
S2 - [clr_optimization_v4.0.30319_32] - Microsoft .NET Framework NGEN v4.0.30319_X86 - c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe
S2 - [clr_optimization_v4.0.30319_64] - Microsoft .NET Framework NGEN v4.0.30319_X64 - c:\windows\microsoft.net\framework64\v4.0.30319\mscorsvw.exe
S2 - [MBAMService] - MBAMService - c:\program files (x86)\malwarebytes anti-malware\mbamservice.exe
S2 - [sppsvc] - Software Protection - c:\windows\system32\sppsvc.exe
S3 - [AdobeFlashPlayerUpdateSvc] - Adobe Flash Player Update Service - c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe
S3 - [ALG] - Application Layer Gateway Service - c:\windows\system32\alg.exe
S3 - [aspnet_state] - ASP.NET State Service - c:\windows\microsoft.net\framework64\v4.0.30319\aspnet_state.exe
S3 - [COMSysApp] - COM+ System Application - c:\windows\system32\dllhost.exe
S3 - [ehRecvr] - Windows Media Center Receiver Service - c:\windows\ehome\ehrecvr.exe
S3 - [ehSched] - Windows Media Center Scheduler Service - c:\windows\ehome\ehsched.exe
S3 - [Fax] - Fax - c:\windows\system32\fxssvc.exe
S3 - [GamesAppService] - GamesAppService - c:\program files (x86)\wildtangent games\app\gamesappservice.exe
S3 - [IEEtwCollectorService] - Internet Explorer ETW Collector Service - c:\windows\system32\ieetwcollector.exe
S3 - [Microsoft SharePoint Workspace Audit Service] - Microsoft SharePoint Workspace Audit Service - c:\program files (x86)\microsoft office\office14\groove.exe
S3 - [MozillaMaintenance] - Mozilla Maintenance Service - c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe
S3 - [MSDTC] - Distributed Transaction Coordinator - c:\windows\system32\msdtc.exe
S3 - [msiserver] - Windows Installer - c:\windows\system32\msiexec.exe
S3 - [MyWiFiDHCPDNS] - Wireless PAN DHCP Server - c:\program files\intel\wifi\bin\pandhcpdns.exe
S3 - [Origin Client Service] - Origin Client Service - c:\program files (x86)\origin\originclientservice.exe
S3 - [ose] - Office  Source Engine - c:\program files (x86)\common files\microsoft shared\source engine\ose.exe
S3 - [osppsvc] - Office Software Protection Platform - c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppsvc.exe
S3 - [PerfHost] - Performance Counter DLL Host - c:\windows\syswow64\perfhost.exe
S3 - [RpcLocator] - Remote Procedure Call (RPC) Locator - c:\windows\system32\locator.exe
S3 - [SafeBox] - SafeBox - c:\program files\bitdefender\bitdefender safebox\safeboxservice.exe
S3 - [SNMPTRAP] - SNMP Trap - c:\windows\system32\snmptrap.exe
S3 - [Steam Client Service] - Steam Client Service - c:\program files (x86)\common files\steam\steamservice.exe
S3 - [TrustedInstaller] - Windows Modules Installer - c:\windows\servicing\trustedinstaller.exe
S3 - [Update Server] - BitDefender Update Server v2 - c:\program files\common files\bitdefender\bitdefender arrakis server\bin\arrakis3.exe
S3 - [vds] - Virtual Disk - c:\windows\system32\vds.exe
S3 - [WatAdminSvc] - Windows Activation Technologies Service - c:\windows\system32\wat\watadminsvc.exe
S3 - [wbengine] - Block Level Backup Engine Service - c:\windows\system32\wbengine.exe
S3 - [wmiApSrv] - WMI Performance Adapter - c:\windows\system32\wbem\wmiapsrv.exe
S4 - [clr_optimization_v2.0.50727_32] - Microsoft .NET Framework NGEN v2.0.50727_X86 - c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe
S4 - [clr_optimization_v2.0.50727_64] - Microsoft .NET Framework NGEN v2.0.50727_X64 - c:\windows\microsoft.net\framework64\v2.0.50727\mscorsvw.exe
S4 - [MBAMScheduler] - MBAMScheduler - c:\program files (x86)\malwarebytes anti-malware\mbamscheduler.exe

==== System Specs ======================

Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601)
Memory (RAM): 8140 MB
CPU Info: Intel® Core™ i7-2670QM CPU @ 2.20GHz
CPU Speed: 2194.1 MHz
Sound Card: Speakers and Headphones (IDT Hi |
Communications Headphones (IDT  |
Display Adapters: Intel® HD Graphics Family | Intel® HD Graphics Family | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver
Monitors: 1x; Generic PnP Monitor |
Screen Resolution: 1920 X 1080 - 32 bit
Network: Network Present
Network Adapters: Microsoft Virtual WiFi Miniport Adapter | Intel® Centrino® Wireless-N 1030 | Realtek PCIe GBE Family Controller
CD / DVD Drives: 1x (E: | ) E: hp      BD ROM BC-5550H
Ports: COM Ports NOT Present. LPT Port NOT Present.
Mouse: 16 Button Wheel Mouse Present
Hard Disks: C:  914.0GB | D:  17.2GB
Hard Disks - Free: C:  694.2GB | D:  1.8GB
Manufacturer *: Hewlett-Packard
BIOS Info: AT/AT COMPATIBLE | 10/23/12 | HPQOEM - 1
Time Zone: Eastern Standard Time
Motherboard *: Hewlett-Packard 1803
Country: United States
Language: ENU

==== System Specs (Software) ======================

Anti-Virus: Bitdefender Antivirus On-access scanning disabled (Outdated)
Anti-Spyware: Windows Defender disabled (Outdated)
Anti-Spyware: Bitdefender Antispyware disabled (Outdated)
Firewall: Bitdefender Firewall disabled
Default Browser: Firefox    34.0.5
Internet Explorer Version: 11.0.9600.17501
Mozilla Firefox version: 18.0.1 (x86 en-US)
Adobe Reader version: 10.1.13.16
Sun Java version: 1.7.0_67 (32-bit)
Sun Java version: 1.6.0_24 (64-bit)
Flash Player version: 16.0.0.235
Shockwave Player version: 12.1.1r151

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\Parth\AppData\Local\Temp ====
2014-12-25 17:55:11    97511FE2CA09CC2E06C3CD6519C3494E    43008    ----a-w-    C:\Users\Parth\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpiigwg6.dll
2014-12-25 01:51:43    A2B0924D50F4435FD389499047CE553A    1292192    ----a-w-    C:\Users\Parth\AppData\Local\Temp\dllnt_dump.dll
====== Java Cache =====
====== C:\Windows\SysWOW64 =====
2014-12-18 15:37:48    0481346D0EF668C0D4FF69A7BBEFA846    115712    ----a-w-    C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 11:38:48    D17954CA6343F43B62637F51996B4E95    23040    ----a-w-    C:\Windows\SysWOW64\mfpmp.exe
2014-12-15 11:38:48    60FBCF033FF42A40C916C01A962A8802    50176    ----a-w-    C:\Windows\SysWOW64\rrinstaller.exe
2014-12-15 11:38:48    52096F5F476733F2E2725CF346FF373B    2048    ----a-w-    C:\Windows\SysWOW64\mferror.dll
2014-12-15 11:38:48    20257A0BFB824B49055A6EEC29C72C03    103424    ----a-w-    C:\Windows\SysWOW64\mfps.dll
2014-12-15 11:38:47    FF0A6E76FAE624AC74780AB008752F98    3209728    ----a-w-    C:\Windows\SysWOW64\mf.dll
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2014-12-18 15:37:48    5564883BFB523D5078A5B1FE3128FD63    144384    ----a-w-    C:\Windows\Sysnative\ieUnatt.exe
2014-12-15 11:38:48    AB2EB93A982A2C26BA3E4D2D65328804    24576    ----a-w-    C:\Windows\Sysnative\mfpmp.exe
2014-12-15 11:38:48    9797A23F773C0782A0D91BEC44054166    206848    ----a-w-    C:\Windows\Sysnative\mfps.dll
2014-12-15 11:38:48    68E09E7CD4DC52F132A4B492ACE8C243    55808    ----a-w-    C:\Windows\Sysnative\rrinstaller.exe
2014-12-15 11:38:48    63578DB847FCC40883CB8F303E785D46    2048    ----a-w-    C:\Windows\Sysnative\mferror.dll
2014-12-15 11:38:47    6E1DDE0E72FB8268F42F6777CE4C5036    4121600    ----a-w-    C:\Windows\Sysnative\mf.dll
====== C:\Windows\Sysnative\drivers =====
2014-12-25 01:51:44    FD44FA80DA03EA144153A76DEBBB61B4    35064    ----a-w-    C:\Windows\Sysnative\drivers\TrueSight.sys
2014-12-22 21:14:34    26C43960C99EE861A5D0EDC4DCF3B1C3    129752    ----a-w-    C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys
2014-12-22 21:14:06    CA43F8904E24BBE49982E4C0B29E6579    25816    ----a-w-    C:\Windows\Sysnative\drivers\mbam.sys
2014-12-22 21:14:06    A646C2DDB8C46E9B20A326FAF566646C    63704    ----a-w-    C:\Windows\Sysnative\drivers\mwac.sys
2014-12-22 21:14:06    478CC94C937D235CB0A96AB8F2359D81    93400    ----a-w-    C:\Windows\Sysnative\drivers\mbamchameleon.sys
2014-12-10 09:51:25    70988118145F5F10EF24720B97F35F65    119296    ----a-w-    C:\Windows\Sysnative\drivers\tdx.sys
====== C:\Windows\Tasks ======
2014-12-25 04:29:23    B63AD96D5AB77552EFDB7D2277C3B0CB    3886    ----a-w-    C:\Windows\Sysnative\Tasks\Adobe Acrobat Update Task
====== C:\Windows\Temp ======
======= C:\Program Files =====
======= C:\PROGRA~2 =====
======= C: =====
====== C:\Users\Parth\AppData\Roaming ======
2014-12-25 08:14:06    4F67B146470E7D9820F2A01E5AA21884    240656    ----a-w-    C:\Windows\serviceprofiles\Localservice\AppData\Local\FontCache3.0.0.0.dat
2014-12-24 04:56:04    --------    d-sh--w-    C:\Users\Parth\AppData\Locallow\EmieBrowserModeList
2014-11-30 02:16:28    --------    d-sh--w-    C:\Users\Parth\AppData\Local\EmieBrowserModeList
====== C:\Users\Parth ======
2014-12-25 01:51:29    --------    d-----w-    C:\ProgramData\RogueKiller
2014-12-25 01:50:57    5D77D9FD9510B017C973144E65795A80    15201368    ----a-w-    C:\Users\Parth\Downloads\RogueKiller.exe

====== C: exe-files ==
2014-12-25 17:50:31    7650EF7FFE338A50ADE28288FB601B7A    186568    ----a-w-    C:\Documents and Settings\Parth\Desktop\BleepingComputer\ESETPoweliksCleaner.exe
2014-12-25 05:25:38    7F82228150A6FA1EC9F758EAE52BFD4D    2122240    ----a-w-    C:\Documents and Settings\Parth\Desktop\BleepingComputer\FRST64.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\ProgramData\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Application Data\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 04:29:08    516C021FEBEDE2962C9252DF85606C76    382168    ----a-w-    C:\Documents and Settings\All Users\Adobe\ARM\S\3327\AdobeARMHelper.exe
2014-12-25 02:26:00    E3EBEC90E9637BF19977DF54A8B2B295    153088    ----a-w-    C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\Antivirus_25042_3392\bdc.exe
2014-12-25 01:50:57    5D77D9FD9510B017C973144E65795A80    15201368    ----a-w-    C:\Documents and Settings\Parth\Downloads\RogueKiller.exe
2014-12-23 21:17:50    41431CC1C6817FFBD352BF762EE09BC5    1381208    ----a-w-    C:\Documents and Settings\Parth\AppData\Roaming\BitTorrent\updates\7.9.2_36804.exe
2014-12-22 21:08:15    0BDAE865738D27A4D84D50591C8C9D2D    860488    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\xuxiwtugd.exe
2014-12-22 21:08:15    037B1E7798960E0420003D05BB577EE6    33280    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\rundll32.exe
2014-12-22 21:08:14    30A9BA6BDB2927E3E222629880BF03DE    1912136    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\36.0.1985.143\delegate_execute.exe
2014-12-22 21:08:14    007E8B07E512FDA381C0BED5CF8BA6E6    1936712    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\36.0.1985.143\nacl64.exe
2014-12-19 13:48:18    FC5B75CA6A1DA31EDD4F8D53F5540B98    81088    ----a-w-    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
2014-12-19 13:48:18    3E04F1E482357B1FC8B088197C3D9FF8    1022152    ----a-w-    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
2014-12-19 13:48:18    31657ADA786863B73FAC28E5BD0753AD    382168    ----a-w-    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
=== C: other files ==
2014-12-25 08:04:31    0E5CF342B2D5E52186563056821F9741    15752    ----a-w-    C:\Documents and Settings\Parth\AppData\Local\Temp\ac8c\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A5CSLEM0\glow[1].zip
2014-12-25 04:59:26    8B968045D75783A09592C3105F2865DA    688992    ------r-    C:\Documents and Settings\Parth\Desktop\BleepingComputer\dds.com
2014-12-25 03:32:29    FD43DF524EE7E2460A87990378FFD34F    34536    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_white.dat.zip
2014-12-25 03:32:29    B93D9B41ABD4AB965EA782B4BE302A12    130    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_update.txt.zip
2014-12-25 03:32:29    B72F817901B2E226FB4A3EB1E748397A    116949    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_summ.dat.zip
2014-12-25 03:32:28    C14E5F709B3C097708AD5E6E32BCE1A9    120797    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_spoof.sig.zip
2014-12-25 03:32:27    25B0E47F3E6E7864B290D425A19E3288    109058    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_sign.slf.zip
2014-12-25 03:32:25    1945DA3DEE5C46529D739A030DEEBE02    85614    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_proxy.dat.zip
2014-12-25 03:32:13    CDB3E1B7176CEA77ABD5FDB39B242E64    70677    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_fuzzy2.sig.zip
2014-12-25 03:32:09    259D7B48F3103A43BE5ACBD8DF645510    60896    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_fuzzy.sig.zip
2014-12-25 03:32:07    FD4B38E94292E00251B9F39C47EE5710    40    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\phversion.txt.zip
2014-12-25 03:32:07    33AA8CB471BA9DEE750C069BCA801127    98    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\ph_black.dat.zip
2014-12-25 03:32:06    BE9A60D34F059D2ADB8DE94BCC620AF6    303    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\phconf.ini.zip
2014-12-25 03:32:05    AEA2FA668453E23C431649801E5EA548    43    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\phar_histprot.dat.zip
2014-12-25 03:32:05    6D0BB00954CEB7FBEE436BB55A8397A9    100    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\phar_unmip.dat.zip
2014-12-25 03:32:05    3189DE1FF1F8AFED0F70E352DFCD2ABB    104    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\phar_histprot2.dat.zip
2014-12-25 03:32:02    D0439FD37B50BF9818F12D47DC2DEA78    181    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\fr_summ.dat.zip
2014-12-25 03:32:02    B4D1B6CDC90EF72C3A6C68C8FDC210C1    1528    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\fr_sign3.slf.zip
2014-12-25 03:32:01    351CF55C78B6E6F10E2B45E410918D38    1527    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\fr_sign.slf.zip
2014-12-25 03:32:00    9E0573ECB4A0800788A3AA64AD731BBC    97    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\fr_mw.dat.zip
2014-12-25 03:32:00    542B66EAB3BEB63A73E1ABA551F93313    1301    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\fr_list.dat.zip
2014-12-25 03:31:58    FB3C6492A06DE877A1137AF9B2E852D7    151    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\fr_fuzzy3.sig.zip
2014-12-25 03:31:58    FB3C6492A06DE877A1137AF9B2E852D7    151    ----a-w-    C:\Program Files\Bitdefender\Bitdefender 2012\as2core\Antiphishing_20313_171\fr_fuzzy2.sig.zip
2014-12-22 21:08:14    D2F6A1B11344D9AC7BCFB75900D4ADE1    23668    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\36.0.1985.143\default_apps\youtube.crx
2014-12-22 21:08:14    8AD223868AB9974F7746D0227730A0CC    26392    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\36.0.1985.143\default_apps\search.crx
2014-12-22 21:08:14    71E1283B8440F6264CEC99DF9AD81F5B    25561    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\36.0.1985.143\default_apps\drive.crx
2014-12-22 21:08:14    2E2E328E5BF6BE61203164B3E9EA8094    24040    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\36.0.1985.143\default_apps\gmail.crx
2014-12-22 21:08:14    2C71C49F991095A1848624907BACBB08    4578    ----a-w-    C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq\Fsugspmbr\36.0.1985.143\default_apps\docs.crx

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-1475708435-3113983898-3304898519-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent"
"RockMelt Update"="C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe /c"
"Facebook Update"="C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"Google Update"="C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe /c"
"EADM"="C:\Program Files (x86)\Origin\Origin.exe -AutoStart"
"LogMeIn Cubby"="C:\Users\Parth\AppData\Roaming\cubby\cubby.exe -hidden"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe"
"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Easybits Recovery"="C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe"
"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"
"VirtualCloneDrive"="C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe /s"
"BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices"
"APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
"CanonSolutionMenuEx"="C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon"
"IJNetworkScannerSelectorEX"="C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE"
"HPConnectionManager"="C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe"
"HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"RemoteControl10"="C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"BDRegion"="C:\Program Files (x86)\Cyberlink\Shared files\brs.exe"
"HPOSD"="C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"Adobe Acrobat Speed Launcher"="C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
"Acrobat Assistant 8.0"="C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent"
"RockMelt Update"="C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe /c"
"Facebook Update"="C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"Google Update"="C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe /c"
"EADM"="C:\Program Files (x86)\Origin\Origin.exe -AutoStart"
"LogMeIn Cubby"="C:\Users\Parth\AppData\Roaming\cubby\cubby.exe -hidden"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BTMTrayAgent"="rundll32.exe C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll,TrayApp"
"BDAgent"="C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe"
"IgfxTray"="C:\Windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"
"Persistence"="C:\Windows\system32\igfxpers.exe"
"CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon"
"AdobeAAMUpdater-1.0"="C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "
"SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"="C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe Update"

==== Startup Folders ======================

2013-11-04 19:44:45    1131    ----a-w-    C:\Users\Parth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [12/23/2014 04:51 PM]
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job --a------ C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe [11/28/2012 05:10 PM]
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job --a------ C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe [11/28/2012 05:10 PM]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job --a------ C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe [02/01/2014 09:42 PM]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job --a------ C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe [02/01/2014 09:42 PM]
C:\Windows\tasks\HPCeeScheduleForParth.job --a------ [Undetermined Task]
C:\Windows\tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job --a------ C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [07/12/2012 11:26 PM]
C:\Windows\tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job --a------ C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [07/12/2012 11:26 PM]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]
"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\AdobeAAMUpdater-1.0-XJ-9-Parth" [C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe]
"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core" [C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA" [C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core" [C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA" [C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\HPCeeScheduleForParth" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe]
"C:\Windows\SysNative\tasks\MirageAgent" [C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe]
"C:\Windows\SysNative\tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core" [C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe]
"C:\Windows\SysNative\tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA" [C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe]
"C:\Windows\SysNative\tasks\RunAsStdUser Task for VeohWebPlayer" [C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe]
"C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]
"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{8749DA3B-8A55-45BF-A5A0-51E131BCADED}" [C:\Windows\system32\msfeedssync.exe]
"C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask" [C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]
"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== EOF on Thu 12/25/2014 at 13:54:27.96 ======================
 



#7 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:33 AM

Posted 25 December 2014 - 02:46 PM

Hi,
 

The computer did not restart automatically after I exited the tool. I did that manually.

 
You've done everything right! :)
 
 

warning.gif Malware Warning

If your computer was used for online banking, has credit card information or other sensitive data, using a non-infected computer/device you should immediately change all account information (including those used for banking, Email, eBay, Paypal, online forums, etc).

Step 1

frst.pngfrstfix.png
Please download the attached fixlist txt.gif and save it in the same directory as FRST.

  • Start FRST with Administrator privileges.
  • Press the Fix button.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished, a log file (Fixlog.txt) pops up and is saved to the same location the tool was run from.
    Please copy and paste its contents in your next reply.

Attached File  fixlist.txt   1.2KB   8 downloads

Step 2

Please downloadesetlogo.pngOnline Scanner and save it to your Desktop.

  • Disable the realtime-protection of your antivirus and anti-malware programs because they might interfere with the scan.
  • Start installer.pngwith administartor privileges.
  • Select the option Yes, I accept the Terms of Use and click on Start.
  • Choose the following settings:

settings.png

  • Click on Start. The virus signature database will begin to download. This may take some time.
  • When completed the Online Scan will begin automatically.
    Note: This scan might take a long time! Please be patient.
  • When completed select Uninstall application on close if you so wish, but make sure you copy the logfile first!
  • Now click on Finish
  • A log filelog.pngis created at logpath.png
    Copy and paste the content of this log file in your next reply.

esetlog.png
Note: Do not forget to re-enable your antivirus application after running the above scan!
eset.gif


Step 3

frst.pngfrstscan.png

Start FRST with administator privileges.

  • Make sure the following option is checked: addition.png
  • Press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
    Please copy and paste these logs in your next reply.

lesestoff.png

Can you please tell me which problems still persist now?
How is the computer running?


Edited by deeprybka, 25 December 2014 - 02:51 PM.

regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#8 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 25 December 2014 - 03:07 PM

Hey Jurgen, I'm about to leave soon to visit family for Christmas Day. I'm going to do everything you asked when I arrive at their home, but in the meantime, I won't start anything since you said the scan may take some time. That being said, it may be a few hours until I update you.

I really appreciate all the help. I hope you're having a Merry Christmas. :) Thanks for everything.



#9 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:33 AM

Posted 25 December 2014 - 03:09 PM

:thumbup2:

 

You are welcome!


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#10 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 26 December 2014 - 12:07 PM

Here goes nothing. I'm going to separate the different logs into different posts, because I'm assuming that makes it easier for you to read. =P

The fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-12-2014
Ran by Parth at 2014-12-26 00:36:19 Run:1
Running from C:\Users\Parth\Desktop\BleepingComputer
Loaded Profile: Parth (Available profiles: Parth)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_app_14_33_ff&cd=
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/
Toolbar: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR StartupUrls: Default -> "hxxp://astromenda.com/?f=
CHR DefaultSearchKeyword: Default -> astromenda.com
CHR DefaultSearchURL: Default -> http://astromenda.com/
Task: {2A52331B-6740-44A0-8E68-AA7AC8068CFF} - \Scheduled Update for Ask Toolbar
C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq
CreateRestorePoint:
EmptyTemp:
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
Chrome StartupUrls deleted successfully.
Chrome DefaultSearchKeyword deleted successfully.
Chrome DefaultSearchURL deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2A52331B-6740-44A0-8E68-AA7AC8068CFF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2A52331B-6740-44A0-8E68-AA7AC8068CFF}" => Key deleted successfully.
C:\Documents and Settings\Parth\AppData\LocalLow\Adobe\Ndgocghvhuq => Moved successfully.
Restore point was successfully created.
EmptyTemp: => Removed 11.7 GB temporary data.


The system needed a reboot.

==== End of Fixlog 00:52:04 ====



#11 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 26 December 2014 - 12:08 PM

The ESET Online Scanner log:

 

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=82be0e872923444196f7378b39bde7d4
# engine=21707
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-12-26 09:55:40
# local_time=2014-12-26 04:55:40 (-0500, Eastern Standard Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Bitdefender Antivirus'
# compatibility_mode=2056 16777213 100 85 0 177725638 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 0 171131190 0 0
# scanned=443598
# found=10
# cleaned=0
# scan_time=13821
sh=7EAA52B1426D0138C6B69223B90B608F1F1B6441 ft=1 fh=8aaee018f182e1e0 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\GenericAskToolbar.dll.vir"
sh=896119BFF783AD60C97CD06577E6B6CB826E7164 ft=1 fh=237827a814a6dc33 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\precache.exe.vir"
sh=7AA39C07B72368ADF0908669979F39798AFD1F96 ft=1 fh=2af16103b74a812e vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\SaUpdate.exe.vir"
sh=2785AFF66F130FAC4DC9FDED3C4ED0A9CFB7ADB6 ft=1 fh=4357f842641162e5 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\UpdateTask.exe.vir"
sh=1F9A4A664E2ADC63FB98F802BEE01EE81A83EBDB ft=1 fh=4b98aedd39daa4bf vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com\Updater\Updater.exe.vir"
sh=A2833427129285B2B50453419ED72AF63B8E7FDE ft=1 fh=31c40c766444b949 vn="Win32/Toolbar.Montiera.J potentially unwanted application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.3.8\escortShld.dll.vir"
sh=EAD1EE01C0FF5C843913F4ACA179569077D3B069 ft=1 fh=c71c00112d9cbb77 vn="a variant of Win32/Toolbar.Escort.A potentially unwanted application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.3.8\bh\BabylonToolbar.dll.vir"
sh=294742C59CFB3FAAE38D3CE6B9C75BE062AFAA66 ft=1 fh=9215b8a5782cc616 vn="a variant of Win32/InstallBrain.AW potentially unwanted application" ac=I fn="C:\Program Files (x86)\Uninstall Information\ib_uninst_361\uninstall.exe"
sh=294742C59CFB3FAAE38D3CE6B9C75BE062AFAA66 ft=1 fh=9215b8a5782cc616 vn="a variant of Win32/InstallBrain.AW potentially unwanted application" ac=I fn="C:\Program Files (x86)\Uninstall Information\ib_uninst_391\uninstall.exe"
sh=C22C132B1D169DCEDAD597B41D70A97166FD1FB9 ft=0 fh=0000000000000000 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\Windows\Installer\1a20995.msi"
 



#12 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 26 December 2014 - 12:10 PM

The FRST.txt log:

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-12-2014
Ran by Parth (administrator) on XJ-9 on 26-12-2014 12:01:48
Running from C:\Users\Parth\Desktop\BleepingComputer
Loaded Profile: Parth (Available profiles: Parth)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(RockMelt Inc.) C:\Users\Parth\AppData\Local\RockMelt\Update\1.2.189.1\RockMeltCrashHandler.exe
(LogMeIn, Inc.) C:\Users\Parth\AppData\Roaming\cubby\cubby.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Dropbox, Inc.) C:\Users\Parth\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [BDAgent] => C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe [1091200 2012-12-12] (Bitdefender)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2012-08-04] (IDT, Inc.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-25] (CANON INC.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2014-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1213848 2010-09-14] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2010-09-09] (CANON INC.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-06-14] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2012-11-20] (cyberlink)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-12-16] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [RockMelt Update] => C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [136336 2012-07-12] (RockMelt Inc.)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [Facebook Update] => C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-11-28] (Facebook Inc.)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [Google Update] => C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-02-01] (Google Inc.)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3618648 2014-12-18] (Electronic Arts)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Run: [LogMeIn Cubby] => C:\Users\Parth\AppData\Roaming\cubby\cubby.exe [5454608 2014-09-17] (LogMeIn, Inc.)
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {0df60474-f7b2-11e2-acc2-082e5f88a833} - F:\TL-Bootstrap.exe
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {148632fc-0d9a-11e2-818d-082e5f88a833} - G:\LaunchU3.exe -a
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {1c6c2a96-7737-11e3-9936-082e5f88a833} - G:\Startme.exe
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {2176157c-ad19-11e1-b48f-4ceb42290d41} - G:\TL-Bootstrap.exe
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {b3503542-acbd-11e1-a2fe-4ceb42290d41} - F:\setup.exe
HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\MountPoints2: {ca4cfd24-a5db-11e2-8366-082e5f88a833} - F:\VZW_Software_upgrade_assistant.exe
Startup: C:\Users\Parth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxshell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxshell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxshell.dll (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxshell.dll (Bitdefender)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {977D423B-5C68-401D-B409-A1B7B86B6F4C} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 -> {977D423B-5C68-401D-B409-A1B7B86B6F4C} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> {977D423B-5C68-401D-B409-A1B7B86B6F4C} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-08-24] (EasyBits Software Corp.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 68.237.161.12

FireFox:
========
FF ProfilePath: C:\Users\Parth\AppData\Roaming\Mozilla\Firefox\Profiles\gwfrzde4.default-1408202781653
FF DefaultSearchEngine: Google
FF Homepage: google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\9.0.1.4055459\npmathplugin.dll (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Parth\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Parth\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @talk.google.com/O1DPlugin -> C:\Users\Parth\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Parth\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: @us-w1.rockmelt.com/RockMelt Update;version=8 -> C:\Users\Parth\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll (RockMelt Inc.)
FF Plugin HKU\S-1-5-21-1475708435-3113983898-3304898519-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF user.js: detected! => C:\Users\Parth\AppData\Roaming\Mozilla\Firefox\Profiles\gwfrzde4.default-1408202781653\user.js
FF Plugin ProgramFiles/Appdata: C:\Users\Parth\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Parth\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: Adblock Plus - C:\Users\Parth\AppData\Roaming\Mozilla\Firefox\Profiles\gwfrzde4.default-1408202781653\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-16]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2014-12-09]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-12-09]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext
FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext [2012-05-07]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-08-13]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR Profile: C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-10]
CHR Extension: (Google Drive) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-10]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-26]
CHR Extension: (YouTube) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-10]
CHR Extension: (Google Search) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-10]
CHR Extension: (Google Wallet) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-10]
CHR Extension: (Gmail) - C:\Users\Parth\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-10]
CHR HKLM-x32\...\Chrome\Extension: [dfaldikcoaplhepekpbngkepfcoiihef] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-08-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [901184 2011-01-24] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [991296 2011-01-24] (Intel Corporation) [File not signed]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [244720 2012-02-08] (CyberLink)
R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2413056 2012-11-20] (Realsil Microelectronics Inc.) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-18] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-06-17] ()
S3 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [75384 2012-09-04] (Bitdefender)
S3 Update Server; C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe [466736 2011-10-14] (BitDefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe [67904 2012-09-04] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe [1957912 2012-12-12] (Bitdefender)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [705552 2012-12-12] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-12-12] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [587024 2012-12-12] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93160 2012-09-04] (BitDefender LLC)
R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [442088 2011-08-16] (BitDefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC)
S3 bdsandbox; C:\Windows\system32\drivers\bdsandbox.sys [79952 2011-11-17] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [103944 2010-01-19] (BitDefender)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2014-12-24] ()
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [329800 2011-10-27] (BitDefender S.R.L.)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-26 00:57 - 2014-12-26 00:57 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-25 13:47 - 2014-12-25 13:54 - 00036484 _____ () C:\zoek-results.log
2014-12-25 13:18 - 2014-12-25 13:18 - 00000000 ____D () C:\zoek_backup
2014-12-25 00:26 - 2014-12-26 12:01 - 00000000 ____D () C:\FRST
2014-12-25 00:01 - 2014-12-26 12:01 - 00000000 ____D () C:\Users\Parth\Desktop\BleepingComputer
2014-12-24 23:29 - 2014-12-24 23:29 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-24 20:51 - 2014-12-24 20:51 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-12-24 20:51 - 2014-12-24 20:51 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-12-24 20:50 - 2014-12-24 20:51 - 15201368 _____ () C:\Users\Parth\Downloads\RogueKiller.exe
2014-12-22 16:14 - 2014-12-26 11:59 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-22 16:14 - 2014-12-22 16:14 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-22 16:14 - 2014-12-22 16:14 - 00001106 _____ () C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-22 16:14 - 2014-12-22 16:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-22 16:14 - 2014-12-22 16:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-22 16:14 - 2014-12-22 16:14 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-22 16:14 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-22 16:14 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-22 16:14 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-18 10:37 - 2014-12-13 00:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 10:37 - 2014-12-12 22:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 06:38 - 2014-10-17 21:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-15 06:38 - 2014-10-17 20:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-15 06:38 - 2014-07-06 21:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-15 06:38 - 2014-07-06 21:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-12-15 06:38 - 2014-07-06 21:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-12-15 06:38 - 2014-07-06 21:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-12-15 06:38 - 2014-07-06 20:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-12-15 06:38 - 2014-07-06 20:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-12-15 06:38 - 2014-07-06 20:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-12-15 06:38 - 2014-07-06 20:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-12-10 11:38 - 2014-12-10 11:38 - 00000000 ____D () C:\Users\Parth\Downloads\Random bleep
2014-12-10 04:51 - 2014-11-26 20:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 04:51 - 2014-11-26 20:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 04:51 - 2014-11-21 22:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 04:51 - 2014-11-21 22:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 04:51 - 2014-11-21 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 04:51 - 2014-11-21 21:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 04:51 - 2014-11-21 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 04:51 - 2014-11-21 21:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 04:51 - 2014-11-21 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 04:51 - 2014-11-21 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 04:51 - 2014-11-21 21:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 04:51 - 2014-11-21 21:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 04:51 - 2014-11-21 21:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 04:51 - 2014-11-21 21:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 04:51 - 2014-11-21 21:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 04:51 - 2014-11-21 21:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 04:51 - 2014-11-21 21:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 04:51 - 2014-11-21 21:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 04:51 - 2014-11-21 21:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 04:51 - 2014-11-21 21:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 04:51 - 2014-11-21 21:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 04:51 - 2014-11-21 21:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 04:51 - 2014-11-21 21:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 04:51 - 2014-11-21 21:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 04:51 - 2014-11-21 21:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 04:51 - 2014-11-21 21:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 04:51 - 2014-11-21 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 04:51 - 2014-11-21 21:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 04:51 - 2014-11-21 21:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 04:51 - 2014-11-21 20:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 04:51 - 2014-11-21 20:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 04:51 - 2014-11-21 20:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 04:51 - 2014-11-21 20:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 04:51 - 2014-11-21 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 04:51 - 2014-11-21 20:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 04:51 - 2014-11-21 20:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 04:51 - 2014-11-21 20:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 04:51 - 2014-11-21 20:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 04:51 - 2014-11-21 20:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 04:51 - 2014-11-21 20:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 04:51 - 2014-11-21 20:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 04:51 - 2014-11-21 20:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 04:51 - 2014-11-21 20:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 04:51 - 2014-11-21 20:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 04:51 - 2014-11-21 20:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 04:51 - 2014-11-21 20:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 04:51 - 2014-11-21 20:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 04:51 - 2014-11-21 20:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 04:51 - 2014-11-21 20:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 04:51 - 2014-11-21 20:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 04:51 - 2014-11-21 20:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 04:51 - 2014-11-21 20:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 04:51 - 2014-11-21 19:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 04:51 - 2014-11-21 19:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 04:51 - 2014-11-10 22:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 04:51 - 2014-11-10 21:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 04:51 - 2014-11-10 20:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 04:51 - 2014-10-29 21:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 04:51 - 2014-10-29 20:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 04:51 - 2014-10-02 21:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 04:51 - 2014-10-02 21:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 04:51 - 2014-10-02 21:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 04:51 - 2014-10-02 21:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 04:51 - 2014-10-02 21:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 04:51 - 2014-10-02 20:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 04:51 - 2014-10-02 20:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 04:51 - 2014-10-02 20:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 04:51 - 2014-10-02 20:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 04:51 - 2014-10-02 20:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 04:50 - 2014-11-07 22:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 04:50 - 2014-11-07 21:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-09 14:30 - 2014-12-09 14:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-29 21:16 - 2014-11-29 21:16 - 00000000 __SHD () C:\Users\Parth\AppData\Local\EmieBrowserModeList

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-26 11:53 - 2012-02-27 10:00 - 01412013 _____ () C:\Windows\WindowsUpdate.log
2014-12-26 11:35 - 2012-07-12 23:27 - 00000928 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job
2014-12-26 11:15 - 2012-11-28 17:10 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job
2014-12-26 11:12 - 2014-02-01 21:42 - 00000908 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job
2014-12-26 11:05 - 2012-04-26 16:03 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-26 02:01 - 2014-06-29 18:38 - 00000000 ____D () C:\Users\Parth\AppData\Local\Adobe
2014-12-26 01:01 - 2009-07-13 23:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-26 01:01 - 2009-07-13 23:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-26 00:59 - 2012-04-26 15:29 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{8749DA3B-8A55-45BF-A5A0-51E131BCADED}
2014-12-26 00:57 - 2014-03-27 21:40 - 00000000 ____D () C:\ProgramData\Origin
2014-12-26 00:56 - 2013-11-04 14:46 - 00000000 ___RD () C:\Users\Parth\Documents\Dropbox
2014-12-26 00:55 - 2013-11-04 14:41 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\Dropbox
2014-12-26 00:54 - 2014-05-27 09:03 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\cubby
2014-12-26 00:54 - 2014-03-27 21:40 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-12-26 00:54 - 2012-04-27 17:11 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-26 00:53 - 2012-05-10 13:26 - 00000376 _____ () C:\Users\Parth\AppData\Roamingprivacy.xml
2014-12-26 00:53 - 2010-11-20 22:47 - 00702856 _____ () C:\Windows\PFRO.log
2014-12-26 00:53 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-26 00:53 - 2009-07-13 23:51 - 00127568 _____ () C:\Windows\setupact.log
2014-12-26 00:36 - 2014-02-01 21:42 - 00000856 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job
2014-12-26 00:36 - 2012-11-28 17:10 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job
2014-12-26 00:33 - 2012-07-12 23:27 - 00000876 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job
2014-12-25 14:31 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2014-12-25 00:37 - 2012-04-26 15:29 - 00000000 ____D () C:\Users\Parth\AppData\Local\CrashDumps
2014-12-24 23:26 - 2014-06-04 13:09 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForParth.job
2014-12-24 23:25 - 2012-04-26 16:17 - 00000000 ____D () C:\Windows\Sun
2014-12-24 21:19 - 2012-05-21 15:20 - 00000327 _____ () C:\Windows\system32\checkdnsid.xml
2014-12-23 17:50 - 2014-03-10 20:19 - 00000000 ____D () C:\Users\Parth\Downloads\Movies
2014-12-23 16:51 - 2012-04-26 22:09 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\BitTorrent
2014-12-23 16:51 - 2012-04-26 16:03 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-23 16:51 - 2012-04-26 16:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-23 16:51 - 2012-04-26 16:03 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-23 14:13 - 2014-06-04 13:09 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForParth
2014-12-23 14:11 - 2012-05-23 19:42 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-12-23 14:11 - 2012-05-09 17:03 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-12-22 17:26 - 2012-10-08 16:56 - 00000000 ____D () C:\Users\Parth\AppData\Local\My Games
2014-12-22 16:10 - 2009-07-14 00:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-18 13:38 - 2013-11-04 14:44 - 00001876 _____ () C:\Windows\wininit.ini
2014-12-18 13:38 - 2013-11-04 14:44 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-18 13:29 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-15 06:44 - 2013-08-07 03:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-15 06:44 - 2012-06-02 09:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-15 06:39 - 2012-08-04 15:20 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 13:29 - 2014-09-25 16:18 - 00000000 ____D () C:\Users\Parth\Downloads\H&M
2014-12-10 12:06 - 2014-03-10 20:19 - 00000000 ____D () C:\Users\Parth\Downloads\Games
2014-12-10 10:45 - 2011-08-24 23:35 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-04 17:26 - 2012-08-27 08:06 - 00000000 ____D () C:\Users\Parth\Documents\Shtuff
2014-11-30 17:13 - 2013-08-28 14:14 - 00000000 ____D () C:\Users\Parth\AppData\Roaming\vlc
2014-11-29 21:16 - 2014-02-10 00:43 - 00000000 ____D () C:\Program Files (x86)\Google

Some content of TEMP:
====================
C:\Users\Parth\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwac02v.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-25 14:24

==================== End Of Log ============================


And finally, the Addition.txt log:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-12-2014
Ran by Parth at 2014-12-26 12:02:50
Running from C:\Users\Parth\Desktop\BleepingComputer
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Disabled - Out of date) {98CD50CE-5097-4098-9669-6C401FB3969C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Antispyware (Disabled - Up to date) {23ACB12A-76AD-4F16-ACD9-57326434DC21}
FW: Bitdefender Firewall (Disabled) {A0F6D1EB-1AF8-41C0-BD36-C575E160D1E7}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.2 - Adobe Systems)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
AMD Catalyst Install Manager (HKLM\...\{3BF3599D-7F28-C60B-1C5D-82BFD4E5EF33}) (Version: 3.0.838.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AuthenTec TrueAPI (Version: 1.3.0.144 - AuthenTec, Inc.) Hidden
Batman: Arkham Asylum Game of the Year Edition (HKLM-x32\...\{CFABC775-5386-4BA5-86B4-505BBD36E812}) (Version: 1.0.0.0 - Eidos Inc./Warner Brothers)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
BioShock Infinite (HKLM-x32\...\BioShock Infinite_is1) (Version:  - )
Bitdefender Total Security 2012 (HKLM\...\Bitdefender) (Version: 15.0.38 - Bitdefender)
Bitdefender Total Security 2012 (Version: 15.0.38 - Bitdefender) Hidden
BitTorrent (HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\BitTorrent) (Version: 7.9.2.36804 - BitTorrent Inc.)
Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blio (HKLM-x32\...\{9368DDD5-CE7F-4BD7-A83A-F00FABE338EC}) (Version: 2.2.6699 - K-NFB Reading Technology, Inc.)
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version:  - )
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version:  - )
Canon MP Navigator EX 4.1 (HKLM-x32\...\MP Navigator EX 4.1) (Version:  - )
Canon MX410 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX410_series) (Version:  - )
Canon MX410 series User Registration (HKLM-x32\...\Canon MX410 series User Registration) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Canon Speed Dial Utility (HKLM-x32\...\Speed Dial Utility) (Version:  - )
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cubby (HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Cubby) (Version: 1.0.0.12648 - LogMeIn, Inc.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5.3817 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.3922 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DC++ 0.801 (HKLM-x32\...\DC++) (Version: 0.801 - Jacek Sieka)
Dead Space™ (HKLM-x32\...\{9789E33B-317A-44B2-AF9A-FF8708AD93E0}) (Version: 1.0.0.222 - Electronic Arts)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
Dropbox (HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
Easy Media Player 1.1.12 (HKLM-x32\...\Easy Media Player) (Version: 1.1.12 - Easy Media Player)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE - The Traitor Soul (x32 Version: 2.2.0.95 - WildTangent) Hidden
Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Graboid Video 3.89 Setup (HKLM-x32\...\{6b5f9db0-02dc-4c5b-b16b-6a7f1f81557e}) (Version: 3.8.9 - FUSENET)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM\...\{DFB497E0-CE3F-40FC-9596-FC7A48775DE4}) (Version: 4.1.16.1 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{5E63C0AB-19B0-47D4-842E-6B324EB0614B}) (Version: 4.1.23.1 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{83A375B6-6FC2-4F8A-948E-E506DB9DCDF0}) (Version: 1.1.0.0 - Hewlett-Packard)
HP DVB-T TV Tuner 8.0.64.43 (HKLM-x32\...\HP DVB-T TV Tuner) (Version: 8.0.64.43 - )
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent)
HP MovieStore (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0 - Hewlett-Packard)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
HP Power Manager (HKLM-x32\...\{7E799992-5DA0-4A1A-9443-B1836B063FEC}) (Version: 1.4.8 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP SimplePass 2011 (HKLM-x32\...\{4741965C-AFD0-4D00-81D1-1039F96D4DC3}) (Version: 5.3.0.273 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{962CB079-85E6-405F-8704-1C62365AE46F}) (Version: 4.5.10.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
Icecream Screen Recorder version 1.33 (HKLM-x32\...\{7ADEC622-3230-4C9A-9DCE-9BD462B74095}_is1) (Version: 1.33 - Icecream Apps)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6345.0 - IDT)
Impulse® (HKLM-x32\...\Impulse®) (Version: 3.30 - GameStop)
Impulse® (x32 Version: 3.30 - GameStop) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3074 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel® PROSet/Wireless for Bluetooth® + High Speed (HKLM\...\{37EC048A-81A2-452A-8D1F-3BE2018E767D}) (Version: 15.1.0.0096 - Intel Corporation)
Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{C7B40C35-85AE-4303-9EEA-1A1EA779664D}) (Version: 1.0.2.0511 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)
Intel® WiDi (HKLM-x32\...\{0DD706AF-B542-438C-999E-B30C7F625C8D}) (Version: 2.1.39.0 - Intel Corporation)
Intel® Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel® PROSet/Wireless WiFi Software (HKLM\...\{E2D0B67F-8032-4E11-87C6-C8C721D331B3}) (Version: 15.01.0500.0903 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.670 - Oracle)
Java™ 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle)
Java™ 6 Update 35 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216032FF}) (Version: 6.0.350 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Just Cause 2 (HKLM-x32\...\Just Cause 2) (Version:  - Square Enix)
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version:  - Avalanche Studios)
Just Cause 2: Multiplayer Mod (HKLM-x32\...\Steam App 259080) (Version:  - JC2-MP Team)
Kerberos Ticket Viewer (HKLM-x32\...\{5A6403D3-E177-42FD-AA16-2FBD441EA26E}) (Version: 1.2.1 - Cornell University)
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Mathematica Extras 9.0 (4055459) (HKLM\...\A-WIN-Extras 9.0.1 4055459_is1) (Version: 9.0.1 - Wolfram Research, Inc.)
MATLAB R2011a (HKLM\...\MatlabR2011a) (Version: 7.12 - The MathWorks, Inc.)
Metro 2033 (HKLM-x32\...\Steam App 43110) (Version:  - 4A Games)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 18.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 18.0.1 (x86 en-US)) (Version: 18.0.1 - Mozilla)
Mozilla Firefox 34.0.5 (x86 en-US) (HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 18.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Net-Print x64 (HKLM\...\{39D542EE-5D08-4E12-B4D1-1C13EE1C0D49}) (Version: 3.0 - Cornell University)
Nexon Game Manager (HKLM-x32\...\{EA2DB6E0-72C5-4ef9-A3A0-E6705F4A6A9E}) (Version:  - )
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
ooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.6.5001 - ooVoo LLC.)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.83 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
Recuva (HKLM\...\Recuva) (Version: 1.50 - Piriform)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.19.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.19.0 - Renesas Electronics Corporation) Hidden
RockMelt (HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\RockMelt) (Version: 0.16.91.483 - RockMelt, Inc.)
RoxioNow Player (HKLM-x32\...\{0EDEB615-1A60-425E-8306-0E10519C7B55}) (Version: 1.9.5.103 - RoxioNow)
Sid Meier's Civilization V (HKLM-x32\...\Civilization V) (Version:  - 2K Games, Inc.)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Slingo Supreme (x32 Version: 2.2.0.95 - WildTangent) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{19B0831B-0C18-4103-86E4-90FCD04CD3B9}) (Version: 6.0.12.5 - Husdawg, LLC)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.25942 - TeamViewer)
Unity Web Player (HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Validity WBF DDK (HKLM\...\{79174AF2-6CB1-42F5-981E-66DCA49391D0}) (Version: 4.3.205.0 - Validity Sensors, Inc.)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95 - WildTangent) Hidden
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
VLC media player 1.0.1 (HKLM-x32\...\VLC media player) (Version: 1.0.1 - VideoLAN Team)
Wheel of Fortune 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden
WinDjView 2.0.2 (HKLM\...\WinDjView) (Version: 2.0.2 - Andrew Zhezherun)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Movie Maker Packages (HKU\S-1-5-21-1475708435-3113983898-3304898519-1001\...\Windows Live Movie Maker Packages) (Version:  - ) <==== ATTENTION
WinRAR 4.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
Wolfram Mathematica 9 (M-WIN-L 9.0.1 4055652) (HKLM\...\M-WIN-L 9.0.1 4055652_is1) (Version: 9.0.1 - Wolfram Research, Inc.)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Parth\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Parth\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{BD22D1CE-1AAB-47ED-9FF0-C34606E926A3}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\cubby\cubbyext64.dll (LogMeIn, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Parth\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Parth\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Parth\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Parth\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1475708435-3113983898-3304898519-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Parth\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points  =========================

15-12-2014 06:37:22 Windows Update
19-12-2014 09:49:18 Windows Update
23-12-2014 14:07:57 Windows Update
25-12-2014 13:28:54 zoek.exe restore point
25-12-2014 13:47:38 zoek.exe restore point
26-12-2014 00:36:21 Restore Point Created by FRST

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2014-08-13 14:50 - 00001805 ___RA C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
127.0.0.1 activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
127.0.0.1 adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
127.0.0.1 ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
127.0.0.1 www.adobeereg.com wwis-dubc1-vip60.adobe.com www.wip.adobe.com www.wip1.adobe.com
127.0.0.1 www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0AA8C007-9239-43C2-8719-2C757F04CEFC} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core => C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-28] (Facebook Inc.)
Task: {1DFFA099-4C9A-4C48-AF8A-62B3E0CD6648} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA => C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-28] (Facebook Inc.)
Task: {1F97183E-6B2E-4E53-AA0A-8BB479782B60} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {2A5886BA-6E64-4D60-8DAC-A14944E36DBD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-12-16] (Microsoft)
Task: {405E8939-B061-405E-980E-FDA19304BB36} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
Task: {45DAA6BC-7A86-469D-8B92-8AB56FF76096} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-10-21] (Hewlett-Packard)
Task: {47FD49D6-1EB4-4D17-8CB4-F41ABB540CD0} - System32\Tasks\{DA31755F-5160-472F-862A-316D3A11674E} => pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {5CCB87F2-C748-4E2F-B9E9-CCD423E42EC3} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink)
Task: {5F4CA4A9-6A3B-443B-AD17-91FE227C8918} - System32\Tasks\HPCeeScheduleForParth => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {7E201227-83C2-49FB-A74C-3EBB65696401} - System32\Tasks\AdobeAAMUpdater-1.0-XJ-9-Parth => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-13] (Adobe Systems Incorporated)
Task: {899E64AC-3F0A-4182-82FF-90A6E4904F71} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A07AE583-965D-4E7F-9DFA-9BC0E98FFF5C} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA => C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-07-12] (RockMelt Inc.)
Task: {A6ACD4F5-E036-4C30-8128-E9D67DE659E1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {A7EC0B8D-51E2-47E1-AA0A-8B70A4F18295} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core => C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-01] (Google Inc.)
Task: {AD51098C-1B6D-4F6F-A2C2-AEDAF30A33E2} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {E09EE2A7-00CF-4A15-A015-E996BF99808E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {E55D4E37-9912-4A26-A065-AC0195CBAFCE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {F58C5333-E36B-4F45-B16D-9BCFE8C41531} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-10-21] (Hewlett-Packard)
Task: {FDC02B61-A62A-49C7-A520-5ECF2FC87286} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core => C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-07-12] (RockMelt Inc.)
Task: {FE94D306-0A89-473A-AD30-273CCD0660A2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA => C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-01] (Google Inc.)
Task: {FFACF320-4F76-40C4-8E7D-908F3359E782} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-23] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job => C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job => C:\Users\Parth\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job => C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job => C:\Users\Parth\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForParth.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001Core.job => C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-1475708435-3113983898-3304898519-1001UA.job => C:\Users\Parth\AppData\Local\RockMelt\Update\RockMeltUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-10-14 23:09 - 2011-10-14 23:09 - 00036256 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\strdecoder.dll
2011-10-14 23:08 - 2011-10-14 23:08 - 00262832 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\txmlutil.dll
2012-01-23 19:17 - 2012-01-23 19:17 - 00184016 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\framework.dll
2012-01-23 19:45 - 2012-01-23 19:45 - 00042960 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\procinfo.dll
2012-01-23 19:16 - 2012-01-23 19:16 - 00076384 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\ExcludeMgr.dll
2012-01-23 19:18 - 2012-01-23 19:18 - 00144912 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\connector.dll
2012-03-27 23:07 - 2012-03-27 23:07 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\UI\accessl.ui
2012-12-12 13:08 - 2012-12-12 13:08 - 00264128 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\avc3al.dll
2011-11-14 19:17 - 2011-11-14 19:17 - 00153680 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\bdfwcore.dll
2012-01-23 19:18 - 2012-01-23 19:18 - 00076408 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\bdmltusrsrv.dll
2012-12-12 13:08 - 2012-12-12 13:08 - 00098816 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\bdmetrics.dll
2012-03-22 11:30 - 2012-03-22 11:30 - 00832000 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpbr.mdl
2012-03-22 11:30 - 2012-03-22 11:30 - 00650752 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpdsp.mdl
2012-03-22 11:30 - 2012-03-22 11:30 - 02816000 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpf.mdl
2012-03-22 11:30 - 2012-03-22 11:30 - 02621952 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpph.mdl
2012-03-22 11:30 - 2012-03-22 11:30 - 01228800 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttprbl.mdl
2012-03-22 11:30 - 2012-03-22 11:30 - 00480256 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimbr.mdl
2012-03-22 11:30 - 2012-03-22 11:30 - 00565760 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimdsp.mdl
2012-03-22 11:30 - 2012-03-22 11:30 - 02555904 _____ () C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimf.mdl
2013-10-25 07:13 - 2008-05-02 13:55 - 00092672 _____ () C:\Windows\System32\redmonnt.dll
2013-06-17 17:19 - 2013-06-17 17:55 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2010-01-09 19:17 - 2010-01-09 19:17 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 00:40 - 2010-01-21 00:40 - 08794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2012-04-26 22:13 - 2012-02-17 19:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2012-02-27 09:57 - 2011-04-14 22:16 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-05-12 17:13 - 2011-05-12 17:13 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-05-08 05:23 - 2011-05-08 05:23 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-04-27 17:05 - 2011-04-27 17:05 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2014-08-31 15:37 - 2014-11-11 13:48 - 01171456 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-31 15:37 - 2014-11-11 13:48 - 00442368 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-31 15:37 - 2014-11-11 13:48 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2013-04-23 17:30 - 2014-11-11 13:47 - 00774656 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-07-19 20:56 - 2014-11-18 15:23 - 02227904 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-31 15:37 - 2014-11-11 13:48 - 00403968 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-31 15:37 - 2014-11-11 13:48 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2012-04-27 17:14 - 2014-11-18 15:23 - 00690880 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-10-21 19:22 - 2014-10-21 19:22 - 00750080 _____ () C:\Users\Parth\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2014-12-26 00:55 - 2014-12-26 00:55 - 00043008 _____ () c:\users\parth\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwac02v.dll
2014-10-21 19:22 - 2014-10-21 19:22 - 00047616 _____ () C:\Users\Parth\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-21 19:22 - 2014-10-21 19:22 - 00863744 _____ () C:\Users\Parth\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-21 19:22 - 2014-10-21 19:22 - 00200704 _____ () C:\Users\Parth\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2014-12-09 14:30 - 2014-12-09 14:30 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2010-01-09 19:18 - 2010-01-09 19:18 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 00:34 - 2010-01-21 00:34 - 08793952 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2012-04-27 17:14 - 2014-11-11 13:48 - 34589888 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-12-21 21:29 - 2014-12-21 21:29 - 16843952 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll
2014-10-19 13:29 - 2014-10-19 13:29 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\b2363cf94faf59386ab4778a39c16e2b\IsdiInterop.ni.dll
2012-02-27 09:56 - 2011-05-20 10:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll
2011-04-27 17:05 - 2011-04-27 17:05 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Parth\Downloads\AdwCleaner.exe:BDU

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\50931225.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\50931225.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-1475708435-3113983898-3304898519-500 - Administrator - Disabled)
Guest (S-1-5-21-1475708435-3113983898-3304898519-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1475708435-3113983898-3304898519-1002 - Limited - Enabled)
Parth (S-1-5-21-1475708435-3113983898-3304898519-1001 - Administrator - Enabled) => C:\Users\Parth

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/26/2014 11:55:02 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/26/2014 11:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 10:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 09:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 08:33:48 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 07:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 06:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 05:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 04:33:51 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 03:33:51 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return


System errors:
=============
Error: (12/26/2014 00:54:41 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (12/26/2014 00:52:22 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.

Module Path: C:\Windows\System32\IWMSSvc.dll

Error: (12/26/2014 00:52:22 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.

Module Path: C:\Windows\System32\IWMSSvc.dll

Error: (12/26/2014 00:52:13 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.

Module Path: C:\Windows\System32\IWMSSvc.dll

Error: (12/26/2014 00:36:50 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:
%%1056

Error: (12/26/2014 00:36:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The HP Connection Manager 4 Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (12/26/2014 00:36:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel® Management and Security Application User Notification Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (12/26/2014 00:36:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Presentation Foundation Font Cache 3.0.0.0 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

Error: (12/26/2014 00:36:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel® Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).

Error: (12/26/2014 00:36:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Intel® Management and Security Application Local Management Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.


Microsoft Office Sessions:
=========================
Error: (12/26/2014 11:55:02 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (12/26/2014 11:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 10:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072efe. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 09:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 08:33:48 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 07:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 06:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 05:33:50 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 04:33:51 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return

Error: (12/26/2014 03:33:51 AM) (Source: Google Update) (EventID: 20) (User: XJ-9)
Description: Network Request Error.
Error: 0x80072f78. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072f78. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return


CodeIntegrity Errors:
===================================
  Date: 2014-12-25 12:53:46.644
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00283_081\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-24 23:26:04.861
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00283_081\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-22 16:03:41.242
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00235_080\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-22 15:56:28.041
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00235_080\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-22 15:54:00.432
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00235_080\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-18 13:31:38.450
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00235_080\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-12-10 08:06:56.574
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00235_080\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-25 10:35:09.552
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00235_080\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-20 03:17:07.837
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00235_080\avcuf64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2014-11-17 20:36:24.010
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2012\Active Virus Control\Avc3_00235_080\avcuf64.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel® Core™ i7-2670QM CPU @ 2.20GHz
Percentage of memory in use: 39%
Total physical RAM: 8139.86 MB
Available physical RAM: 4887.99 MB
Total Pagefile: 16277.9 MB
Available Pagefile: 12243.94 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:914.04 GB) (Free:699.83 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:17.18 GB) (Free:1.85 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: BE2F2B88)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=914 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=17.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================



#13 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 26 December 2014 - 12:17 PM

The computer is running much smoother as of now! My fan no longer sounds like a vacuum cleaner, and there's no fishy processes that seem to be eating up all of my physical memory. :) Also, you were absolutely correct in saying that the ESET Online Scan might take some time... I left it on overnight because after running it for 2 hours 30 minutes, it was only about 30% done. =P

 

As you saw, the ESET Online Scanner "found" some threats, but I believe most of them were just quarantined times by AdwCleaner. I didn't remove any of the items that the Online Scanner found. Did I proceed about that correctly?

 



#14 deeprybka

deeprybka

  • Malware Response Team
  • 5,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:02:33 AM

Posted 26 December 2014 - 12:44 PM

Did I proceed about that correctly?


Yes. :)

These found threats are irrelevant as they are not active malware. Just some (quarantined) adware.

That's it! abklatsch.gif
Your logs look clean to me at the moment. :thumbup2:
We're gonna clean up everything now, close security holes on your computer and in the end I'll provide you with a list of security tips so you hopefully will not need our help anymore in the future.


My help is free for everybody.
If you want to support me fighting against malware or buy me a beer for the assistance you received, then you can consider a donation: btn_donate_SM.gif
Thank you!


Clean Upcleanupm.PNG

Now we remove all the tools we used (including their logs and quarantine folders), restore your settings and delete old and infected system restorepoints:

  • You can uninstall programs that you had to install (e.g. MBAM or ESET Onlinescanner) in the control panel if you so wish.
  • Download delfix.pngDelFix (by Xplode) and save it to your Desktop.
    • Close all running programs and start delfix.exe.
    • Make sure that all available options are checked.
    • Click on Run
    • DelFix should remove all our tools and delete itself afterwards. I don't need the log file.
  • If there is still something left you can delete it manually.

Closing security holes

Many infections happen via drive-by downloads that run unnoticed in the background while the user visits an infected website. To achieve this malware exploits security holes in installed software (e.g. browser or its plugins). Older versions of such software often have lots of known exploitable holes. Therefore it's very important to always keep your software up-to-date.
The following software is outdated. Make sure you remove all old versions and install the current one instead if you need the program:

 

Adobe Reader X
Java 7 Update 67
Java™ 6 Update 24
Java™ 6 Update 35
Mozilla Firefox 18.0.1

 

Tips

I recommend to read and follow the "16 simple and easy ways to keep your computer safe and secure on the Internet" (Link) by Lawrence Abrams.
 


regards,
deeprybka
:busy:
Neminem laede, immo omnes, quantum potes, iuva. Arthur Schopenhauer
 
unite_blue.png
asap.png

#15 BigRedWarrior

BigRedWarrior
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 26 December 2014 - 08:34 PM

Thanks for everything!

I'm currently updating everything you recommended (except for the Adobe Reader, since it wasn't obtained by the most legal means =P). Do you think that will be a problem in the future? I had needed it in order to edit a PDF and convert PDFs to Word docs, but I don't see any immediate need for it. If it's going to be a problem in the future, I'll just remove it.

 

I hope you have a great holiday season! :)






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users