Attachment 108882 Details for Bug 66540 – logfile of processmonitor

logfile of processmonitor

Logfile.CSV (text/csv), 57.99 KB, created by Winfried Donkers on 2014-11-04 10:29:04 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Winfried Donkers

Created: 2014-11-04 10:29:04 UTC

Size: 57.99 KB

patch

obsolete

>ï»¿"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
>"11:17:48,5811762","SearchIndexer.exe","2260","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
>"11:17:48,5813360","SearchIndexer.exe","2260","FileSystemControl","C:","","Control: FSCTL_READ_USN_JOURNAL"
>"11:17:49,0951473","OUTLOOK.EXE","3024","Thread Create","","SUCCESS","Thread ID: 1600"
>"11:17:49,3986825","OUTLOOK.EXE","3024","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
>"11:17:49,3988570","OUTLOOK.EXE","3024","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
>"11:17:49,3989497","OUTLOOK.EXE","3024","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
>"11:17:49,3990360","OUTLOOK.EXE","3024","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
>"11:17:49,3991169","OUTLOOK.EXE","3024","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\CursorBlinkEnable","NAME NOT FOUND","Length: 144"
>"11:17:49,3995775","Explorer.EXE","2328","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\Zvpebfbsg Bssvpr\Bssvpr14\BHGYBBX.RKR","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 07 00 00 00 3A 00 00 00 DC D8 08 00"
>"11:17:49,3996119","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\Zvpebfbsg Bssvpr\Bssvpr14\BHGYBBX.RKR","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 07 00 00 00 3B 00 00 00 DC D8 08 00"
>"11:17:49,3996812","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1.612, Data: 00 00 00 00 5E 01 00 00 9F 07 00 00 B8 5C EE 07"
>"11:17:49,3997177","Explorer.EXE","2328","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\\\QPV-SF-01\Flfgrrzorurre\Frghc\Zvpebfbsg\genpvat gbbyf\CebprffZbavgbe\Cebpzba.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 00 00 00 00 0B 00 00 00 3A DC 02 00"
>"11:17:49,3997341","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\\\QPV-SF-01\Flfgrrzorurre\Frghc\Zvpebfbsg\genpvat gbbyf\CebprffZbavgbe\Cebpzba.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 00 00 00 00 0B 00 00 00 77 FC 02 00"
>"11:17:49,3997636","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1.612, Data: 00 00 00 00 5E 01 00 00 9F 07 00 00 F5 7C EE 07"
>"11:17:49,4958510","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:49,4958763","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:49,4958840","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:49,4960220","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:49,4960511","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4960848","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:49,4960964","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4961544","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:49,4961679","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4961856","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:49,4961965","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4963479","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4963771","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4964290","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4964502","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4983798","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:49,4984026","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:49,4984103","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:49,4985502","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:49,4985768","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4986076","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:49,4986191","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4986788","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:49,4986929","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4987102","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:49,4987211","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4988774","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4989069","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4989592","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:49,4989807","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:50,7168041","mcshield.exe","404","Thread Exit","","SUCCESS","Thread ID: 4556, User Time: 0.0000000, Kernel Time: 0.0000000"
>"11:17:51,8614264","OUTLOOK.EXE","3024","ReadFile","C:\PROGRAM FILES\MICROSOFT OFFICE\Office14\WWLIB.DLL","SUCCESS","Offset: 9.765.888, Length: 32.768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal"
>"11:17:51,8760606","OUTLOOK.EXE","3024","ReadFile","C:\PROGRAM FILES\MICROSOFT OFFICE\Office14\WWLIB.DLL","SUCCESS","Offset: 7.685.120, Length: 32.768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal"
>"11:17:51,8979418","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Common\Cursors","NAME NOT FOUND","Desired Access: Read"
>"11:17:51,8984217","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\General","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:51,8984615","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Common\General","SUCCESS","Desired Access: Read/Write"
>"11:17:51,8984952","OUTLOOK.EXE","3024","RegCloseKey","HKCU\Software\Microsoft\Office\14.0\Common\Toolbars","SUCCESS",""
>"11:17:51,8985074","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\General\PasteOptions","NAME NOT FOUND","Length: 144"
>"11:17:51,9036786","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:51,9037036","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:51,9037116","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:51,9038570","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:51,9038862","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:51,9039198","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:51,9039317","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:51,9039930","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:51,9040068","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:51,9040241","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:51,9040350","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:51,9041900","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:51,9042195","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:51,9042724","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:51,9042929","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:52,3804446","mcshield.exe","404","CreateFile","C:\Windows\System32\nl-NL\syncui.dll.mui","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:52,3804677","mcshield.exe","404","QueryBasicInformationFile","C:\Windows\System32\nl-NL\syncui.dll.mui","SUCCESS","CreationTime: 11-01-2011 02:52:19, LastAccessTime: 11-01-2011 02:52:19, LastWriteTime: 11-01-2011 02:52:19, ChangeTime: 03-11-2014 08:25:43, FileAttributes: A"
>"11:17:52,3804741","mcshield.exe","404","CloseFile","C:\Windows\System32\nl-NL\syncui.dll.mui","SUCCESS",""
>"11:17:52,3805328","mcshield.exe","404","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:52,3806018","mcshield.exe","404","QueryDirectory","C:\Windows","SUCCESS","Filter: Windows, 1: Windows"
>"11:17:52,3806274","mcshield.exe","404","CloseFile","C:\","SUCCESS",""
>"11:17:52,3807307","mcshield.exe","404","CreateFile","C:\Windows","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:52,3807846","mcshield.exe","404","QueryDirectory","C:\Windows\system32","SUCCESS","Filter: system32, 1: System32"
>"11:17:52,3808035","mcshield.exe","404","CloseFile","C:\Windows","SUCCESS",""
>"11:17:52,3809126","mcshield.exe","404","CreateFile","C:\Windows\System32","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:52,3809649","mcshield.exe","404","QueryDirectory","C:\Windows\System32\nl-NL","SUCCESS","Filter: nl-NL, 1: nl-NL"
>"11:17:52,3809851","mcshield.exe","404","CloseFile","C:\Windows\System32","SUCCESS",""
>"11:17:52,3811628","mcshield.exe","404","CreateFile","C:\Windows\System32\nl-NL\syncui.dll.mui","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:52,3811805","mcshield.exe","404","QueryNetworkOpenInformationFile","C:\Windows\System32\nl-NL\syncui.dll.mui","SUCCESS","CreationTime: 11-01-2011 02:52:19, LastAccessTime: 11-01-2011 02:52:19, LastWriteTime: 11-01-2011 02:52:19, ChangeTime: 03-11-2014 08:25:43, AllocationSize: 01-01-1601 01:00:00, EndOfFile: 01-01-1601 01:00:00, FileAttributes: A"
>"11:17:52,3811862","mcshield.exe","404","CloseFile","C:\Windows\System32\nl-NL\syncui.dll.mui","SUCCESS",""
>"11:17:52,3853547","mcshield.exe","404","RegOpenKey","HKU\S-1-5-18","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
>"11:17:52,3853922","mcshield.exe","404","RegOpenKey","HKU\.DEFAULT\Software\Microsoft\Internet Explorer","SUCCESS","Desired Access: All Access"
>"11:17:52,3854089","mcshield.exe","404","RegCloseKey","HKU\.DEFAULT","SUCCESS",""
>"11:17:52,3854217","mcshield.exe","404","RegQueryValue","HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Download Directory","NAME NOT FOUND","Length: 144"
>"11:17:52,3854365","mcshield.exe","404","RegCloseKey","HKU\.DEFAULT\Software\Microsoft\Internet Explorer","SUCCESS",""
>"11:17:52,3857711","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.284.608, Length: 4.096"
>"11:17:52,3858554","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.341.952, Length: 4.096"
>"11:17:52,3858859","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.370.624, Length: 4.096"
>"11:17:52,3859161","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.354.240, Length: 4.096"
>"11:17:52,3859324","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.354.240, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:52,3968200","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.362.432, Length: 4.096"
>"11:17:52,3968485","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.362.432, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:52,3970314","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.358.336, Length: 4.096"
>"11:17:52,3970558","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 25.358.336, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:52,8715668","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:52,8715909","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:52,8715986","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:52,8717394","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:52,8717734","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:52,8718042","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:52,8718161","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:52,8718735","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:52,8718860","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:52,8719027","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:52,8719133","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:52,8720647","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:52,8720958","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:52,8721462","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:52,8721677","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,1108519","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:53,1108759","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:53,1108836","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:53,1110258","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:53,1110559","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,1110880","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:53,1110999","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,1111624","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:53,1111759","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,1111939","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:53,1112048","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,1113568","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,1113870","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,1114393","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,1114604","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,2183365","mcshield.exe","404","CreateFile","C:\Windows\System32\mssph.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2184196","mcshield.exe","404","QueryBasicInformationFile","C:\Windows\System32\mssph.dll","SUCCESS","CreationTime: 08-07-2011 09:08:07, LastAccessTime: 08-07-2011 09:08:07, LastWriteTime: 04-05-2011 05:32:01, ChangeTime: 22-04-2014 10:59:44, FileAttributes: A"
>"11:17:53,2184264","mcshield.exe","404","CloseFile","C:\Windows\System32\mssph.dll","SUCCESS",""
>"11:17:53,2184870","mcshield.exe","404","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2185592","mcshield.exe","404","QueryDirectory","C:\Windows","SUCCESS","Filter: Windows, 1: Windows"
>"11:17:53,2185826","mcshield.exe","404","CloseFile","C:\","SUCCESS",""
>"11:17:53,2186846","mcshield.exe","404","CreateFile","C:\Windows","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2187378","mcshield.exe","404","QueryDirectory","C:\Windows\system32","SUCCESS","Filter: system32, 1: System32"
>"11:17:53,2187568","mcshield.exe","404","CloseFile","C:\Windows","SUCCESS",""
>"11:17:53,2188630","mcshield.exe","404","CreateFile","C:\Windows\System32","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2189127","mcshield.exe","404","QueryDirectory","C:\Windows\System32\mssph.dll","SUCCESS","Filter: mssph.dll, 1: mssph.dll"
>"11:17:53,2189355","mcshield.exe","404","CloseFile","C:\Windows\System32","SUCCESS",""
>"11:17:53,2191125","mcshield.exe","404","CreateFile","C:\Windows\System32\mssph.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2191882","mcshield.exe","404","QueryNetworkOpenInformationFile","C:\Windows\System32\mssph.dll","SUCCESS","CreationTime: 08-07-2011 09:08:07, LastAccessTime: 08-07-2011 09:08:07, LastWriteTime: 04-05-2011 05:32:01, ChangeTime: 22-04-2014 10:59:44, AllocationSize: 01-01-1601 01:00:00, EndOfFile: 01-01-1601 01:00:00, FileAttributes: A"
>"11:17:53,2191947","mcshield.exe","404","CloseFile","C:\Windows\System32\mssph.dll","SUCCESS",""
>"11:17:53,2239668","mcshield.exe","404","RegOpenKey","HKU\S-1-5-18","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
>"11:17:53,2240066","mcshield.exe","404","RegOpenKey","HKU\.DEFAULT\Software\Microsoft\Internet Explorer","SUCCESS","Desired Access: All Access"
>"11:17:53,2240236","mcshield.exe","404","RegCloseKey","HKU\.DEFAULT","SUCCESS",""
>"11:17:53,2240365","mcshield.exe","404","RegQueryValue","HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Download Directory","NAME NOT FOUND","Length: 144"
>"11:17:53,2240512","mcshield.exe","404","RegCloseKey","HKU\.DEFAULT\Software\Microsoft\Internet Explorer","SUCCESS",""
>"11:17:53,2244670","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.908.608, Length: 4.096"
>"11:17:53,2245286","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.851.264, Length: 4.096"
>"11:17:53,2245619","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.879.936, Length: 4.096"
>"11:17:53,2245924","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.892.224, Length: 4.096"
>"11:17:53,2246258","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.888.128, Length: 4.096"
>"11:17:53,2246588","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.884.032, Length: 4.096"
>"11:17:53,2246915","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.884.032, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:53,2339680","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.888.128, Length: 4.096"
>"11:17:53,2339985","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 51.884.032, Length: 4.096"
>"11:17:53,2505054","mcshield.exe","404","CreateFile","C:\Windows\System32\nl-NL\mssph.dll.mui","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2505372","mcshield.exe","404","QueryBasicInformationFile","C:\Windows\System32\nl-NL\mssph.dll.mui","SUCCESS","CreationTime: 11-01-2011 02:52:26, LastAccessTime: 11-01-2011 02:52:26, LastWriteTime: 11-01-2011 02:52:26, ChangeTime: 22-04-2014 10:59:44, FileAttributes: A"
>"11:17:53,2505436","mcshield.exe","404","CloseFile","C:\Windows\System32\nl-NL\mssph.dll.mui","SUCCESS",""
>"11:17:53,2505994","mcshield.exe","404","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2506681","mcshield.exe","404","QueryDirectory","C:\Windows","SUCCESS","Filter: Windows, 1: Windows"
>"11:17:53,2506934","mcshield.exe","404","CloseFile","C:\","SUCCESS",""
>"11:17:53,2507983","mcshield.exe","404","CreateFile","C:\Windows","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2508503","mcshield.exe","404","QueryDirectory","C:\Windows\system32","SUCCESS","Filter: system32, 1: System32"
>"11:17:53,2508692","mcshield.exe","404","CloseFile","C:\Windows","SUCCESS",""
>"11:17:53,2509722","mcshield.exe","404","CreateFile","C:\Windows\System32","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2510235","mcshield.exe","404","QueryDirectory","C:\Windows\System32\nl-NL","SUCCESS","Filter: nl-NL, 1: nl-NL"
>"11:17:53,2510434","mcshield.exe","404","CloseFile","C:\Windows\System32","SUCCESS",""
>"11:17:53,2512250","mcshield.exe","404","CreateFile","C:\Windows\System32\nl-NL\mssph.dll.mui","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
>"11:17:53,2512426","mcshield.exe","404","QueryNetworkOpenInformationFile","C:\Windows\System32\nl-NL\mssph.dll.mui","SUCCESS","CreationTime: 11-01-2011 02:52:26, LastAccessTime: 11-01-2011 02:52:26, LastWriteTime: 11-01-2011 02:52:26, ChangeTime: 22-04-2014 10:59:44, AllocationSize: 01-01-1601 01:00:00, EndOfFile: 01-01-1601 01:00:00, FileAttributes: A"
>"11:17:53,2512484","mcshield.exe","404","CloseFile","C:\Windows\System32\nl-NL\mssph.dll.mui","SUCCESS",""
>"11:17:53,2551506","mcshield.exe","404","RegOpenKey","HKU\S-1-5-18","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
>"11:17:53,2551890","mcshield.exe","404","RegOpenKey","HKU\.DEFAULT\Software\Microsoft\Internet Explorer","SUCCESS","Desired Access: All Access"
>"11:17:53,2552061","mcshield.exe","404","RegCloseKey","HKU\.DEFAULT","SUCCESS",""
>"11:17:53,2552186","mcshield.exe","404","RegQueryValue","HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Download Directory","NAME NOT FOUND","Length: 144"
>"11:17:53,2552336","mcshield.exe","404","RegCloseKey","HKU\.DEFAULT\Software\Microsoft\Internet Explorer","SUCCESS",""
>"11:17:53,2555163","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.963.584, Length: 4.096"
>"11:17:53,2555852","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.906.240, Length: 4.096"
>"11:17:53,2556032","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.906.240, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:53,2662084","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.934.912, Length: 4.096"
>"11:17:53,2662392","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.934.912, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:53,2663688","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.922.624, Length: 4.096"
>"11:17:53,2663778","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.922.624, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:53,2664737","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.914.432, Length: 4.096"
>"11:17:53,2664833","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.914.432, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:53,2665796","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.910.336, Length: 4.096"
>"11:17:53,2665886","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.910.336, Length: 4.096, I/O Flags: Non-cached, Paging I/O, Priority: Normal"
>"11:17:53,2666835","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.914.432, Length: 4.096"
>"11:17:53,2667114","mcshield.exe","404","ReadFile","C:\PROGRAM FILES\McAfee\MANAGED VIRUSSCAN\Shared\mferuntime20141103200505119.dat","SUCCESS","Offset: 48.910.336, Length: 4.096"
>"11:17:53,3349305","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:53,3349568","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:53,3349648","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:53,3351105","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:53,3351390","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,3351756","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:53,3351878","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,3352462","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:53,3352597","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,3352773","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:53,3352882","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,3354406","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,3354691","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,3355198","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:53,3355410","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:54,8225882","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:54,8226132","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:54,8226209","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:54,8227585","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:54,8227890","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:54,8228240","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:54,8228384","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:54,8228987","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:54,8229125","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:54,8229305","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:54,8229414","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:54,8230925","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:54,8231226","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:54,8231743","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:54,8231948","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:55,0951357","OUTLOOK.EXE","3024","Thread Exit","","SUCCESS","Thread ID: 4432, User Time: 0.0000000, Kernel Time: 0.0000000"
>"11:17:55,8691782","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:55,8692212","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:55,8692427","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:55,8695679","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:55,8696189","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:55,8696805","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:55,8697113","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:55,8698464","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:55,8700751","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:55,8701454","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:55,8701768","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:55,8705621","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:55,8706282","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:55,8707443","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:55,8707992","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:57,8291244","spoolsv.exe","1548","Thread Exit","","SUCCESS","Thread ID: 1264, User Time: 0.0000000, Kernel Time: 0.0000000"
>"11:17:58,1050705","AUDIODG.EXE","5956","Thread Exit","","SUCCESS","Thread ID: 6108, User Time: 0.0000000, Kernel Time: 0.0000000"
>"11:17:58,3271149","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:58,3271592","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:58,3271862","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:58,3275118","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:58,3275669","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,3276359","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:58,3276654","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,3277902","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:58,3278233","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,3278659","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:58,3278945","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,3282329","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,3282945","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,3284029","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,3284559","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,5678144","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:58,5678583","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:58,5678782","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:58,5681897","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:58,5682439","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,5683123","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:58,5683424","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,5684631","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:58,5684955","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,5685388","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:58,5685673","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,5688958","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,5689600","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,5690668","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,5691197","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,6390628","OSE.EXE","2708","Thread Create","","SUCCESS","Thread ID: 2348"
>"11:17:58,8238633","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:17:58,8239076","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:17:58,8239275","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:17:58,8242384","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:58,8242929","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,8243609","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:58,8243911","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,8245114","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:17:58,8245444","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,8245874","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:17:58,8246159","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,8249460","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,8250099","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,8251167","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:58,8251706","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:17:59,5741168","unsecapp.exe","2232","Thread Create","","SUCCESS","Thread ID: 2964"
>"11:18:00,4789110","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:18:00,4789350","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:18:00,4789430","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:18:00,4793591","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:18:00,4793970","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:00,4794329","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:18:00,4794448","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:00,4795282","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:18:00,4795423","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:00,4795603","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:18:00,4795789","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:00,4797415","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:00,4797694","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:00,4798223","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:00,4798438","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:00,4830316","soffice.bin","948","Thread Create","","SUCCESS","Thread ID: 5764"
>"11:18:00,6520980","OSE.EXE","2708","Thread Exit","","SUCCESS","Thread ID: 4532, User Time: 0.0000000, Kernel Time: 0.0000000"
>"11:18:01,9132477","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:18:01,9132743","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:18:01,9132823","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:18:01,9134090","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:18:01,9134414","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:01,9134806","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:18:01,9134918","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:01,9135402","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:18:01,9135527","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:01,9135694","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:18:01,9135800","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:01,9137144","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:01,9137404","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:01,9137856","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:01,9138058","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,0400744","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"11:18:02,0401226","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"11:18:02,0401428","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"11:18:02,0404478","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:18:02,0405021","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,0405701","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:18:02,0405999","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,0407192","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"11:18:02,0407523","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,0407956","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"11:18:02,0408232","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,0411565","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,0412181","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,0413252","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,0413785","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"11:18:02,1854378","OUTLOOK.EXE","3024","Thread Exit","","SUCCESS","Thread ID: 4808, User Time: 0.0000000, Kernel Time: 0.0000000"

Actions: View

Attachments on bug 66540: 108882 | 109032 | 109333

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.