Attachment 109032 Details for Bug 66540 – logfile(2) of processmonitor

logfile(2) of processmonitor

Logfile2.CSV (text/csv), 24.81 KB, created by Winfried Donkers on 2014-11-06 12:49:22 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Winfried Donkers

Created: 2014-11-06 12:49:22 UTC

Size: 24.81 KB

patch

obsolete

>ï»¿"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
>"13:37:55,9850939","mcshield.exe","404","Thread Exit","","SUCCESS","Thread ID: 5384, User Time: 0.0000000, Kernel Time: 0.0000000"
>"13:37:56,6249813","OUTLOOK.EXE","3024","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
>"13:37:56,6252489","OUTLOOK.EXE","3024","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
>"13:37:56,6254699","OUTLOOK.EXE","3024","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
>"13:37:56,6256107","OUTLOOK.EXE","3024","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
>"13:37:56,6256884","OUTLOOK.EXE","3024","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\CursorBlinkEnable","NAME NOT FOUND","Length: 144"
>"13:37:56,6260040","Explorer.EXE","2328","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\Zvpebfbsg Bssvpr\Bssvpr14\BHGYBBX.RKR","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 07 00 00 00 4C 00 00 00 7C CC 12 00"
>"13:37:56,6260419","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\Zvpebfbsg Bssvpr\Bssvpr14\BHGYBBX.RKR","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 07 00 00 00 4D 00 00 00 7C CC 12 00"
>"13:37:56,6261086","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1.612, Data: 00 00 00 00 72 01 00 00 CD 16 00 00 D6 09 49 08"
>"13:37:56,6261612","Explorer.EXE","2328","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\\\QPV-SF-01\Flfgrrzorurre\Frghc\Zvpebfbsg\genpvat gbbyf\CebprffZbavgbe\Cebpzba.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 00 00 00 00 20 00 00 00 C5 91 0A 00"
>"13:37:56,6261798","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\\\QPV-SF-01\Flfgrrzorurre\Frghc\Zvpebfbsg\genpvat gbbyf\CebprffZbavgbe\Cebpzba.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 00 00 00 00 20 00 00 00 5C 14 0B 00"
>"13:37:56,6262119","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1.612, Data: 00 00 00 00 72 01 00 00 CD 16 00 00 6D 8C 49 08"
>"13:37:56,7318494","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"13:37:56,7318754","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"13:37:56,7318831","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"13:37:56,7320207","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:56,7320502","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7320878","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:56,7320996","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7321593","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:56,7321731","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7321917","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:56,7322023","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7323537","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7323822","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7324339","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7324554","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7344222","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"13:37:56,7344463","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"13:37:56,7344543","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"13:37:56,7345935","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:56,7346246","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7346615","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:56,7346731","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7347324","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:56,7347459","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7347635","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:56,7347744","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7349258","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7349570","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7350096","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:56,7350307","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:57,2020903","OUTLOOK.EXE","3024","Thread Exit","","SUCCESS","Thread ID: 4644, User Time: 0.0000000, Kernel Time: 0.0000000"
>"13:37:57,7987911","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"13:37:57,7988158","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"13:37:57,7988238","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"13:37:57,7989643","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:57,7989945","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:57,7990265","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:57,7990381","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:57,7990962","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:57,7991093","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:57,7991273","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:57,7991382","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:57,7992896","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:57,7993188","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:57,7993708","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:57,7993919","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,1330244","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"13:37:59,1330510","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"13:37:59,1330587","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"13:37:59,1332024","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:59,1332335","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,1332649","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:59,1332768","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,1333362","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:59,1333493","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,1333666","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:59,1333775","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,1335299","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,1335614","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,1336153","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,1336361","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,3426107","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"13:37:59,3426395","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"13:37:59,3426575","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"13:37:59,3427993","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:59,3428371","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,3428811","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:59,3428936","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,3429552","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:37:59,3429684","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,3429866","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:37:59,3429972","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,3431743","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,3432057","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,3432603","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:37:59,3432827","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7002358","OUTLOOK.EXE","3024","Thread Create","","SUCCESS","Thread ID: 4772"
>"13:38:00,7029818","soffice.bin","948","Thread Create","","SUCCESS","Thread ID: 2472"
>"13:38:00,7033620","lsass.exe","604","RegOpenKey","HKLM\SOFTWARE\Microsoft\IdentityStore\Cache\GlobalStore\IdentityCache","NAME NOT FOUND","Desired Access: Query Value"
>"13:38:00,7034293","lsass.exe","604","RegOpenKey","HKLM\SOFTWARE\Microsoft\IdentityStore\Cache\S-1-5-21-3253602890-114560387-610479601-1179\IdentityCache","NAME NOT FOUND","Desired Access: Query Value"
>"13:38:00,7041402","soffice.bin","948","Thread Create","","SUCCESS","Thread ID: 5352"
>"13:38:00,7154182","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"13:38:00,7154438","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"13:38:00,7154519","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"13:38:00,7155924","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:38:00,7156206","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7156533","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:38:00,7156649","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7157255","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:38:00,7157390","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7157579","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:38:00,7157688","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7159202","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7159494","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7160014","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7160226","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:00,7439242","mcshield.exe","404","Thread Create","","SUCCESS","Thread ID: 5468"
>"13:38:01,2129759","services.exe","580","Thread Create","","SUCCESS","Thread ID: 3508"
>"13:38:01,2132201","services.exe","580","Thread Create","","SUCCESS","Thread ID: 5768"
>"13:38:01,2132868","services.exe","580","Thread Create","","SUCCESS","Thread ID: 2860"
>"13:38:01,2136278","services.exe","580","Thread Create","","SUCCESS","Thread ID: 5976"
>"13:38:01,2137058","services.exe","580","Thread Create","","SUCCESS","Thread ID: 4088"
>"13:38:01,2264164","services.exe","580","Thread Exit","","SUCCESS","Thread ID: 5888, User Time: 0.0000000, Kernel Time: 0.0000000"
>"13:38:05,2199822","services.exe","580","Thread Create","","SUCCESS","Thread ID: 4712"
>"13:38:07,3885097","OUTLOOK.EXE","3024","Thread Exit","","SUCCESS","Thread ID: 6136, User Time: 0.0000000, Kernel Time: 0.0000000"
>"13:38:09,6971722","myAgtSvc.exe","372","Thread Exit","","SUCCESS","Thread ID: 5240, User Time: 0.0000000, Kernel Time: 0.0000000"
>"13:38:12,1341494","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101f042b","NAME NOT FOUND","Length: 144"
>"13:38:12,1341779","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\101e042b","NAME NOT FOUND","Length: 144"
>"13:38:12,1341860","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046\0003042c","NAME NOT FOUND","Length: 144"
>"13:38:12,1343117","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:38:12,1343460","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:12,1343861","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:38:12,1343974","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:12,1344461","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\NewSignature","NAME NOT FOUND","Length: 144"
>"13:38:12,1344586","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:12,1344756","OUTLOOK.EXE","3024","RegQueryValue","HKCU\Software\Microsoft\Office\14.0\Common\MailSettings\ReplySignature","NAME NOT FOUND","Length: 144"
>"13:38:12,1344865","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Common\MailSettings","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:12,1346203","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:12,1346463","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:12,1346925","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:12,1347130","OUTLOOK.EXE","3024","RegOpenKey","HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\Options\Flagging","NAME NOT FOUND","Desired Access: Read/Write"
>"13:38:12,3179151","OUTLOOK.EXE","3024","Thread Create","","SUCCESS","Thread ID: 3960"
>"13:38:12,8798914","OUTLOOK.EXE","3024","Thread Create","","SUCCESS","Thread ID: 5592"
>"13:38:13,2073938","Explorer.EXE","2328","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\\\QPV-SF-01\Flfgrrzorurre\Frghc\Zvpebfbsg\genpvat gbbyf\CebprffZbavgbe\Cebpzba.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 00 00 00 00 20 00 00 00 5C 14 0B 00"
>"13:38:13,2074332","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\\\QPV-SF-01\Flfgrrzorurre\Frghc\Zvpebfbsg\genpvat gbbyf\CebprffZbavgbe\Cebpzba.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 00 00 00 00 21 00 00 00 5C 14 0B 00"
>"13:38:13,2075073","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1.612, Data: 00 00 00 00 72 01 00 00 CE 16 00 00 6D 8C 49 08"
>"13:38:13,2075442","Explorer.EXE","2328","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\Zvpebfbsg Bssvpr\Bssvpr14\BHGYBBX.RKR","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 07 00 00 00 4D 00 00 00 7C CC 12 00"
>"13:38:13,2075580","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\Zvpebfbsg Bssvpr\Bssvpr14\BHGYBBX.RKR","SUCCESS","Type: REG_BINARY, Length: 72, Data: 00 00 00 00 07 00 00 00 4D 00 00 00 43 0D 13 00"
>"13:38:13,2075834","Explorer.EXE","2328","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1.612, Data: 00 00 00 00 72 01 00 00 CE 16 00 00 34 CD 49 08"

Actions: View

Attachments on bug 66540: 108882 | 109032 | 109333

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.