Hello my Friends,
I'm a System Administrator and I'm completely new on packaging files to MSI, so after some searches I found a tool recommended by other users called WinInstall LE. I use the tool that I think that is very easy to use after some common problems. I tried with some knew apps and everything works ok. At the end when I tried with Microsoft Office 2003 I had a problem. I install the application correctly but when I try to run, it appears a box telling that "Microsoft Office Word has not been installed for the current user. Please run setup to install the application.". Can some on give me some clues to solve this problem. Thanks in advance and sorry about my English. It’s not my native language.

Best Regards
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
Enter this search term into Google:

site:microsoft.com 2003 "Microsoft Office Word has not been installed for the current user"

Check out the first hit.
Answered 02/19/2009 by: VBScab
Red Belt

Please log in to comment
0
Dear Friend
I did that first. It says that you have to go to C:\Documents and Settings\All Users\Application Data\Microsoft\Office\Data\ and change the Permission entries or delete that DAT file that is on that folder. I did that already and the problem still exist. Can you help me with this? Thanks in advance.


ORIGINAL: VBScab

Enter this search term into Google:

site:microsoft.com 2003 "Microsoft Office Word has not been installed for the current user"

Check out the first hit.

Answered 02/19/2009 by: toxicrainpx
Yellow Belt

Please log in to comment
0
Yeh...have a little think about how much time we both might have saved if you'd said that in your original post.

Anyway, did you see my signature? Have you run a file/registry/process monitor as the application starts up? I already know the answer, so do that now and report back.
Answered 02/19/2009 by: VBScab
Red Belt

Please log in to comment
0
Ok, I tryed to do what you told me but I cannot identify whats the problem. Can you really help me please? This is part of my procmon :


9:08:20,8440375 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8452868 Explorer.EXE 1760 QueryOpen C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE FAST IO DISALLOWED
9:08:20,8455902 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8458503 Explorer.EXE 1760 QueryBasicInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS CreationTime: 13-08-2003 2:34:38, LastAccessTime: 20-02-2009 9:08:19, LastWriteTime: 13-08-2003 2:34:38, ChangeTime: 20-02-2009 9:07:33, FileAttributes: A
9:08:20,8460679 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8464434 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8467767 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8470962 Explorer.EXE 1760 QueryInformationVolume C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS VolumeCreationTime: 28-10-2008 12:00:35, VolumeSerialNumber: 84CC-1526, SupportsObjects: True, VolumeLabel:
9:08:20,8473608 Explorer.EXE 1760 QueryFileInternalInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS IndexNumber: 0x2000000006a09
9:08:20,8475854 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:20,8478628 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8481701 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:20,8484771 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8491568 Explorer.EXE 1760 QueryOpen C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE FAST IO DISALLOWED
9:08:20,8494538 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8496851 Explorer.EXE 1760 QueryBasicInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS CreationTime: 13-08-2003 2:34:38, LastAccessTime: 20-02-2009 9:08:19, LastWriteTime: 13-08-2003 2:34:38, ChangeTime: 20-02-2009 9:07:33, FileAttributes: A
9:08:20,8500480 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8504020 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8507110 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8509504 Explorer.EXE 1760 QueryInformationVolume C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS VolumeCreationTime: 28-10-2008 12:00:35, VolumeSerialNumber: 84CC-1526, SupportsObjects: True, VolumeLabel:
9:08:20,8512060 Explorer.EXE 1760 QueryFileInternalInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS IndexNumber: 0x2000000006a09
9:08:20,8514367 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:20,8517122 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8520192 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:20,8523251 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,0808380 Explorer.EXE 1760 QueryOpen C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE FAST IO DISALLOWED
9:08:21,0812187 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,0815241 Explorer.EXE 1760 QueryBasicInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS CreationTime: 13-08-2003 2:34:38, LastAccessTime: 20-02-2009 9:08:19, LastWriteTime: 13-08-2003 2:34:38, ChangeTime: 20-02-2009 9:07:33, FileAttributes: A
9:08:21,0817884 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,0821837 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,0825142 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,0827678 Explorer.EXE 1760 QueryInformationVolume C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS VolumeCreationTime: 28-10-2008 12:00:35, VolumeSerialNumber: 84CC-1526, SupportsObjects: True, VolumeLabel:
9:08:21,0829947 Explorer.EXE 1760 QueryFileInternalInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS IndexNumber: 0x2000000006a09
9:08:21,0832240 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:21,0835081 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,0838305 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:21,0841487 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,5803679 VPTray.exe 760 RegQueryValue HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Storages\Filesystem\RealTimeScan\OnOff-L NAME NOT FOUND Length: 144
9:08:21,5804297 VPTray.exe 760 RegQueryValue HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Common\OnOff-L NAME NOT FOUND Length: 144
9:08:21,5804978 VPTray.exe 760 RegQueryValue HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\General\ShowVPIcon SUCCESS Type: REG_DWORD, Length: 4, Data: 1
9:08:21,6104821 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage SUCCESS Desired Access: Query Value
9:08:21,6105748 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\FavoritesChanges SUCCESS Type: REG_DWORD, Length: 4, Data: 1
9:08:21,6106760 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage SUCCESS
9:08:21,6107073 Explorer.EXE 1760 RegOpenKey HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced SUCCESS Desired Access: Query Value
9:08:21,6107690 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_MinMFU NAME NOT FOUND Length: 144
9:08:21,6108707 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced SUCCESS
9:08:21,6129358 Explorer.EXE 1760 QueryOpen C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE FAST IO DISALLOWED
9:08:21,6133246 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,6135839 Explorer.EXE 1760 QueryBasicInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS CreationTime: 13-08-2003 2:34:38, LastAccessTime: 20-02-2009 9:08:20, LastWriteTime: 13-08-2003 2:34:38, ChangeTime: 20-02-2009 9:07:33, FileAttributes: A
9:08:21,6139426 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,6143485 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,6146874 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,6149380 Explorer.EXE 1760 QueryInformationVolume C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS VolumeCreationTime: 28-10-2008 12:00:35, VolumeSerialNumber: 84CC-1526, SupportsObjects: True, VolumeLabel:
9:08:21,6151668 Explorer.EXE 1760 QueryFileInternalInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS IndexNumber: 0x2000000006a09
9:08:21,6154014 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:21,6156903 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,6160074 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:21,6163259 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,6182518 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage SUCCESS Desired Access: Query Value
9:08:21,6183239 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\FavoritesChanges SUCCESS Type: REG_DWORD, Length: 4, Data: 1
9:08:21,6184189 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage SUCCESS
9:08:21,6184501 Explorer.EXE 1760 RegOpenKey HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced SUCCESS Desired Access: Query Value
9:08:21,6185124 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_MinMFU NAME NOT FOUND Length: 144
9:08:21,6186046 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced SUCCESS
9:08:21,6189862 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 07 00 00 00 C0 97 F0 60 B8 91 C9 01
9:08:21,6190502 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 07 00 00 00 C0 97 F0 60 B8 91 C9 01
9:08:21,6191270 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax NAME NOT FOUND Length: 144
9:08:21,6192380 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax NAME NOT FOUND Length: 144
9:08:21,6193223 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jvaqbjf Zrqvn Cynlre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 13 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6193757 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jvaqbjf Zrqvn Cynlre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 13 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6196422 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax NAME NOT FOUND Length: 144
9:08:21,6198182 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax NAME NOT FOUND Length: 144
9:08:21,6199333 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax NAME NOT FOUND Length: 144
9:08:21,6200079 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax NAME NOT FOUND Length: 144
9:08:21,6201045 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax NAME NOT FOUND Length: 144
9:08:21,6201819 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax NAME NOT FOUND Length: 144
9:08:21,6202778 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Gbhe Jvaqbjf KC.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 12 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6203322 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Gbhe Jvaqbjf KC.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 12 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6204110 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax NAME NOT FOUND Length: 144
9:08:21,6204803 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax NAME NOT FOUND Length: 144
9:08:21,6205666 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax NAME NOT FOUND Length: 144
9:08:21,6206356 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax NAME NOT FOUND Length: 144
9:08:21,6207225 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax NAME NOT FOUND Length: 144
9:08:21,6207929 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax NAME NOT FOUND Length: 144
9:08:21,6208789 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax NAME NOT FOUND Length: 144
9:08:21,6209482 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax NAME NOT FOUND Length: 144
9:08:21,6210401 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax NAME NOT FOUND Length: 144
9:08:21,6211117 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax NAME NOT FOUND Length: 144
9:08:21,6212047 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax NAME NOT FOUND Length: 144
9:08:21,6212787 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax NAME NOT FOUND Length: 144
9:08:21,6213690 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tbbtyr Puebzr\Tbbtyr Puebzr.yax NAME NOT FOUND Length: 144
9:08:21,6214550 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tbbtyr Puebzr\Tbbtyr Puebzr.yax NAME NOT FOUND Length: 144
9:08:21,6215427 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\ZntvpQvfp\ZntvpQvfp.yax NAME NOT FOUND Length: 144
9:08:21,6216120 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\ZntvpQvfp\ZntvpQvfp.yax NAME NOT FOUND Length: 144
9:08:21,6217017 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Rkpry 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6217726 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Rkpry 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6218615 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr CbjreCbvag 2003.yax NAME NOT FOUND Length: 144
9:08:21,6219347 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr CbjreCbvag 2003.yax NAME NOT FOUND Length: 144
9:08:21,6220224 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Jbeq 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 20 55 D2 97 3A 93 C9 01
9:08:21,6220841 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Jbeq 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 20 55 D2 97 3A 93 C9 01
9:08:21,6222501 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Qvtvgny Pregvsvpngr sbe ION Cebwrpgf.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6223154 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Qvtvgny Pregvsvpngr sbe ION Cebwrpgf.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6224222 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Pyvc Betnavmre.yax NAME NOT FOUND Length: 144
9:08:21,6224962 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Pyvc Betnavmre.yax NAME NOT FOUND Length: 144
9:08:21,6225906 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Ynathntr Frggvatf.yax NAME NOT FOUND Length: 144
9:08:21,6226652 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Ynathntr Frggvatf.yax NAME NOT FOUND Length: 144
9:08:21,6229580 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Fnir Zl Frggvatf Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6230250 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Fnir Zl Frggvatf Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6231122 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Nccyvpngvba Erpbirel.yax NAME NOT FOUND Length: 144
9:08:21,6231868 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Nccyvpngvba Erpbirel.yax NAME NOT FOUND Length: 144
9:08:21,6232818 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Vzntvat.yax NAME NOT FOUND Length: 144
9:08:21,6233561 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Vzntvat.yax NAME NOT FOUND Length: 144
9:08:21,6235106 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Fpnaavat.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6235868 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Fpnaavat.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6236908 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Cvpgher Znantre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6237681 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Cvpgher Znantre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6239377 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Frg Cebtenz Npprff naq Qrsnhygf.yax NAME NOT FOUND Length: 144
9:08:21,6240076 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Frg Cebtenz Npprff naq Qrsnhygf.yax NAME NOT FOUND Length: 144
9:08:21,6242174 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6242866 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6243825 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqbor Ernqre 6.0.yax NAME NOT FOUND Length: 144
9:08:21,6244512 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqbor Ernqre 6.0.yax NAME NOT FOUND Length: 144
9:08:21,6245411 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jvaqbjf Zbivr Znxre.yax NAME NOT FOUND Length: 144
9:08:21,6246115 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jvaqbjf Zbivr Znxre.yax NAME NOT FOUND Length: 144
9:08:21,6247026 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax NAME NOT FOUND Length: 144
9:08:21,6247747 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax NAME NOT FOUND Length: 144
9:08:21,6248616 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax NAME NOT FOUND Length: 144
9:08:21,6249331 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax NAME NOT FOUND Length: 144
9:08:21,6251161 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax NAME NOT FOUND Length: 144
9:08:21,6251845 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax NAME NOT FOUND Length: 144
9:08:21,6253809 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax NAME NOT FOUND Length: 144
9:08:21,6254784 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax NAME NOT FOUND Length: 144
9:08:21,6255840 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\UlcreGrezvany.yax NAME NOT FOUND Length: 144
9:08:21,6256580 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\UlcreGrezvany.yax NAME NOT FOUND Length: 144
9:08:21,6257578 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax NAME NOT FOUND Length: 144
9:08:21,6259916 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax NAME NOT FOUND Length: 144
9:08:21,6261045 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax NAME NOT FOUND Length: 144
9:08:21,6261793 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax NAME NOT FOUND Length: 144
9:08:21,6262849 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax NAME NOT FOUND Length: 144
9:08:21,6263651 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax NAME NOT FOUND Length: 144
9:08:21,6264607 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax NAME NOT FOUND Length: 144
9:08:21,6265322 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax NAME NOT FOUND Length: 144
9:08:21,6273345 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax NAME NOT FOUND Length: 144
9:08:21,6274136 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax NAME NOT FOUND Length: 144
9:08:21,6275189 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax NAME NOT FOUND Length: 144
9:08:21,6275938 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax NAME NOT FOUND Length: 144
9:08:21,6277776 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Svyrf naq Frggvatf Genafsre Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 11 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6278404 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Svyrf naq Frggvatf Genafsre Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 11 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6280477 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax NAME NOT FOUND Length: 144
9:08:21,6281215 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax NAME NOT FOUND Length: 144
9:08:21,6282173 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Erfgber.yax NAME NOT FOUND Length: 144
9:08:21,6283003 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Erfgber.yax NAME NOT FOUND Length: 144
9:08:21,6283964 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax NAME NOT FOUND Length: 144
9:08:21,6284701 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax NAME NOT FOUND Length: 144
9:08:21,6285626 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax NAME NOT FOUND Length: 144
9:08:21,6286319 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax NAME NOT FOUND Length: 144
9:08:21,6287235 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax NAME NOT FOUND Length: 144
9:08:21,6287942 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax NAME NOT FOUND Length: 144
9:08:21,6288853 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax NAME NOT FOUND Length: 144
9:08:21,6289540 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax NAME NOT FOUND Length: 144
9:08:21,6290448 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax NAME NOT FOUND Length: 144
9:08:21,6291152 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax NAME NOT FOUND Length: 144
9:08:21,6292043 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax NAME NOT FOUND Length: 144
9:08:21,6292825 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax NAME NOT FOUND Length: 144
9:08:21,6293719 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax NAME NOT FOUND Length: 144
9:08:21,6294404 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax NAME NOT FOUND Length: 144
9:08:21,6295300 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Serrpryy.yax NAME NOT FOUND Length: 144
9:08:21,6295982 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Serrpryy.yax NAME NOT FOUND Length: 144
9:08:21,6297549 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Urnegf.yax NAME NOT FOUND Length: 144
9:08:21,6298731 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Urnegf.yax NAME NOT FOUND Length: 144
9:08:21,6299656 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Onpxtnzzba.yax NAME NOT FOUND Length: 144
9:08:21,6300337 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Onpxtnzzba.yax NAME NOT FOUND Length: 144
9:08:21,6301234 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Purpxref.yax NAME NOT FOUND Length: 144
9:08:21,6301910 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Purpxref.yax NAME NOT FOUND Length: 144
9:08:21,6303125 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Urnegf.yax NAME NOT FOUND Length: 144
9:08:21,6303804 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Urnegf.yax NAME NOT FOUND Length: 144
9:08:21,6304679 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Erirefv.yax NAME NOT FOUND Length: 144
9:08:21,6305360 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Erirefv.yax NAME NOT FOUND Length: 144
9:08:21,6306240 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Fcnqrf.yax NAME NOT FOUND Length: 144
9:08:21,6306919 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Fcnqrf.yax NAME NOT FOUND Length: 144
9:08:21,6308635 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Zvarfjrrcre.yax NAME NOT FOUND Length: 144
9:08:21,6309353 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Zvarfjrrcre.yax NAME NOT FOUND Length: 144
9:08:21,6310339 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Cvaonyy.yax NAME NOT FOUND Length: 144
9:08:21,6311057 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Cvaonyy.yax NAME NOT FOUND Length: 144
9:08:21,6311956 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Fbyvgnver.yax NAME NOT FOUND Length: 144
9:08:21,6312766 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Fbyvgnver.yax NAME NOT FOUND Length: 144
9:08:21,6313694 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Fcvqre Fbyvgnver.yax NAME NOT FOUND Length: 144
9:08:21,6314381 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Fcvqre Fbyvgnver.yax NAME NOT FOUND Length: 144
9:08:21,6315300 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\NSC Jbexorapu Ivrjre.yax NAME NOT FOUND Length: 144
9:08:21,6315985 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\NSC Jbexorapu Ivrjre.yax NAME NOT FOUND Length: 144
9:08:21,6316979 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qngn Genafsre Sebz vFrevrf Freire.yax NAME NOT FOUND Length: 144
9:08:21,6317664 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qngn Genafsre Sebz vFrevrf Freire.yax NAME NOT FOUND Length: 144
9:08:21,6318583 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qngn Genafsre Gb vFrevrf Freire.yax NAME NOT FOUND Length: 144
9:08:21,6319273 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qngn Genafsre Gb vFrevrf Freire.yax NAME NOT FOUND Length: 144
9:08:21,6320142 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qverpgbel Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6320820 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qverpgbel Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6321745 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\vFrevrf Anivtngbe.yax NAME NOT FOUND Length: 144
9:08:21,6322480 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\vFrevrf Anivtngbe.yax NAME NOT FOUND Length: 144
9:08:21,6324251 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\BQOP Nqzvavfgengvba.yax NAME NOT FOUND Length: 144
9:08:21,6324972 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\BQOP Nqzvavfgengvba.yax NAME NOT FOUND Length: 144
9:08:21,6325983 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Bcrengvbaf Pbafbyr.yax NAME NOT FOUND Length: 144
9:08:21,6326704 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Bcrengvbaf Pbafbyr.yax NAME NOT FOUND Length: 144
9:08:21,6327704 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Fgneg Qverpgbel Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6328422 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Fgneg Qverpgbel Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6329386 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Jrypbzr Jvmneq.yax NAME NOT FOUND Length: 144
9:08:21,6330109 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Jrypbzr Jvmneq.yax NAME NOT FOUND Length: 144
9:08:21,6331026 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Pbaireg Znpeb.yax NAME NOT FOUND Length: 144
9:08:21,6331710 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Pbaireg Znpeb.yax NAME NOT FOUND Length: 144
9:08:21,6332802 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Zrah-One Phfgbzvmngvba Hgvyvgl.yax NAME NOT FOUND Length: 144
9:08:21,6333490 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Zrah-One Phfgbzvmngvba Hgvyvgl.yax NAME NOT FOUND Length: 144
9:08:21,6334395 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Zhygvcyr Frffvbaf.yax NAME NOT FOUND Length: 144
9:08:21,6335079 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Zhygvcyr Frffvbaf.yax NAME NOT FOUND Length: 144
9:08:21,6336026 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Fgneg be Pbasvther Frffvba.yax NAME NOT FOUND Length: 144
9:08:21,6336719 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Fgneg be Pbasvther Frffvba.yax NAME NOT FOUND Length: 144
9:08:21,6337599 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Genpr Snpvyvgl.yax NAME NOT FOUND Length: 144
9:08:21,6338284 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Genpr Snpvyvgl.yax NAME NOT FOUND Length: 144
9:08:21,6341033 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\THV Ohvyqre.yax NAME NOT FOUND Length: 144
9:08:21,6347014 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\THV Ohvyqre.yax NAME NOT FOUND Length: 144
9:08:21,6348117 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\Cebtenzzre'f Gbbyxvg.yax NAME NOT FOUND Length: 144
9:08:21,6348807 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\Cebtenzzre'f Gbbyxvg.yax NAME NOT FOUND Length: 144
9:08:21,6349816 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\Erfbhepr Fpevcg Pbairegre.yax NAME NOT FOUND Length: 144
9:08:21,6350511 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\Erfbhepr Fpevcg Pbairegre.yax NAME NOT FOUND Length: 144
9:08:21,6351467 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Purpx Freivpr Yriry.yax NAME NOT FOUND Length: 144
9:08:21,6352255 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Purpx Freivpr Yriry.yax NAME NOT FOUND Length: 144
9:08:21,6353191 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Uvfgbel Ybt.yax NAME NOT FOUND Length: 144
9:08:21,6353878 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Uvfgbel Ybt.yax NAME NOT FOUND Length: 144
9:08:21,6354830 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Fgneg Qvntabfgvp Gbbyf.yax NAME NOT FOUND Length: 144
9:08:21,6355520 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Fgneg Qvntabfgvp Gbbyf.yax NAME NOT FOUND Length: 144
9:08:21,6356412 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Genpr Svyrf.yax NAME NOT FOUND Length: 144
9:08:21,6357104 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Genpr Svyrf.yax NAME NOT FOUND Length: 144
9:08:21,6358018 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Rkpry 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6358728 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Rkpry 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6359675 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr CbjreCbvag 2003.yax NAME NOT FOUND Length: 144
9:08:21,6360404 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr CbjreCbvag 2003.yax NAME NOT FOUND Length: 144
9:08:21,6361879 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Jbeq 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 20 55 D2 97 3A 93 C9 01
9:08:21,6362625 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Jbeq 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 20 55 D2 97 3A 93 C9 01
9:08:21,6363625 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Qvtvgny Pregvsvpngr sbe ION Cebwrpgf.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6364284 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Qvtvgny Pregvsvpngr sbe ION Cebwrpgf.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6365172 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Pyvc Betnavmre.yax NAME NOT FOUND Length: 144
9:08:21,6365913 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Pyvc Betnavmre.yax NAME NOT FOUND Length: 144
9:08:21,6373132 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Ynathntr Frggvatf.yax NAME NOT FOUND Length: 144
9:08:21,6373942 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Ynathntr Frggvatf.yax NAME NOT FOUND Length: 144
9:08:21,6375003 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Fnir Zl Frggvatf Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6375727 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Fnir Zl Frggvatf Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6376680 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Nccyvpngvba Erpbirel.yax NAME NOT FOUND Length: 144
9:08:21,6377481 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Nccyvpngvba Erpbirel.yax NAME NOT FOUND Length: 144
9:08:21,6379811 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Vzntvat.yax NAME NOT FOUND Length: 144
9:08:21,6380557 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Vzntvat.yax NAME NOT FOUND Length: 144
9:08:21,6381733 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Fpnaavat.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6382490 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Fpnaavat.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6383474 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Cvpgher Znantre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6384231 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Cvpgher Znantre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6385267 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Flznagrp Pyvrag Frphevgl\Flznagrp NagvIvehf.yax NAME NOT FOUND Length: 144
9:08:21,6385980 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Flznagrp Pyvrag Frphevgl\Flznagrp NagvIvehf.yax NAME NOT FOUND Length: 144
9:08:21,6386966 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Gur Qhqr\Gur Qhqr.yax NAME NOT FOUND Length: 144
9:08:21,6387664 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Gur Qhqr\Gur Qhqr.yax NAME NOT FOUND Length: 144
9:08:21,6389005 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jverfunex\Jverfunex.yax NAME NOT FOUND Length: 144
9:08:21,6389709 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jverfunex\Jverfunex.yax NAME NOT FOUND Length: 144
9:08:21,6390785 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\pnfgu\Qrfxgbc\Tbbtyr Puebzr.yax NAME NOT FOUND Length: 144
9:08:21,6391567 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\pnfgu\Qrfxgbc\Tbbtyr Puebzr.yax NAME NOT FOUND Length: 144
9:08:21,6392500 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\pnfgu\Qrfxgbc\ZntvpQvfp.yax NAME NOT FOUND Length: 144
9:08:21,6398369 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\pnfgu\Qrfxgbc\ZntvpQvfp.yax NAME NOT FOUND Length: 144
9:08:21,6400032 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\vFrevrf Anivtngbe.yax NAME NOT FOUND Length: 144
9:08:21,6400702 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\vFrevrf Anivtngbe.yax NAME NOT FOUND Length: 144
9:08:21,6401842 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Jverfunex.yax NAME NOT FOUND Length: 144
9:08:21,6402529 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Jverfunex.yax NAME NOT FOUND Length: 144
9:08:21,6403426 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6404021 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6404641 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder SUCCESS Desired Access: Maximum Allowed
9:08:21,6405476 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6406424 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6406963 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\WantsFORDISPLAY NAME NOT FOUND Length: 144
9:08:21,6408217 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS
9:08:21,6408538 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6409234 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6409712 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6410178 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder SUCCESS Desired Access: Maximum Allowed
9:08:21,6410888 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6411715 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6412254 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\Attributes SUCCESS Type: REG_DWORD, Length: 4, Data: 0
9:08:21,6412740 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6413547 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6414087 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\CallForAttributes NAME NOT FOUND Length: 144
9:08:21,6414894 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS
9:08:21,6415232 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum NAME NOT FOUND Desired Access: Query Value
9:08:21,6415760 Explorer.EXE 1760 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum SUCCESS Desired Access: Query Value
9:08:21,6416467 Explorer.EXE 1760 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Length: 144
9:08:21,6417305 Explorer.EXE 1760 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum SUCCESS
9:08:21,6417615 Explorer.EXE 1760 RegOpenKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Query Value
9:08:21,6418299 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Query Value
9:08:21,6418841 Explorer.EXE 1760 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Query Value
9:08:21,6420772 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6421266 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6422090 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} SUCCESS Desired Access: Maximum Allowed
9:08:21,6422730 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Query: Name
9:08:21,6423599 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6424113 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Desired Access: Maximum Allowed
9:08:21,6425007 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS
9:08:21,6425295 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Query: Name
9:08:21,6426096 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6426608 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\LocalizedString SUCCESS Type: REG_SZ, Length: 40, Data: @explorer.exe,-7024
9:08:21,6427239 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache SUCCESS Desired Access: Maximum Allowed
9:08:21,6427806 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\@explorer.exe,-7024 SUCCESS Type: REG_SZ, Length: 18, Data: Internet
9:08:21,6428692 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache SUCCESS
9:08:21,6429267 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS
9:08:21,6429561 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6430044 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6430516 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder SUCCESS Desired Access: Maximum Allowed
9:08:21,6431128 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6431935 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6432458 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\WantsFORDISPLAY NAME NOT FOUND Length: 144
9:08:21,6433254 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS
9:08:21,6433544 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6434106 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6434581 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6435039 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder SUCCESS Desired Access: Maximum Allowed
9:08:21,6435598 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6436411 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6436936 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\Attributes SUCCESS Type: REG_DWORD, Length: 4, Data: 0
9:08:21,6437411 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6438212 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6438732 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\CallForAttributes NAME NOT FOUND Length: 144
9:08:21,6439528 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS
9:08:21,6439805 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum NAME NOT FOUND Desired Access: Query Value
9:08:21,6440305 Explorer.EXE 1760 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum SUCCESS Desired Access: Query Value
9:08:21,6440886 Explorer.EXE 1760 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Length: 144
9:08:21,6441691 Explorer.EXE 1760 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum SUCCESS
9:08:21,6460539 Explorer.EXE 1760 RegOpenKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Query Value
9:08:21,6461182 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Query Value
9:08:21,6461707 Explorer.EXE 1760 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Query Value
9:08:21,6462288 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6462774 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6463241 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} SUCCESS Desired Access: Maximum Allowed
9:08:21,6463830 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Query: Name
9:08:21,6464652 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6465163 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Desired Access: Maximum Allowed
9:08:21,6466395 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS
9:08:21,6466674 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Query: Name
9:08:21,6467487 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6468010 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\LocalizedString SUCCESS Type: REG_SZ, Length: 40, Data: @explorer.exe,-7025
9:08:21,6468607 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache SUCCESS Desired Access: Maximum Allowed
9:08:21,6469158 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\@explorer.exe,-7025 SUCCESS Type: REG_SZ, Length: 14, Data: E-mail
9:08:21,6469996 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache SUCCESS
9:08:21,6470588 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS
9:08:21,6471150 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr NAME NOT FOUND Length: 144
9:08:21,6471865 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr NAME NOT FOUND Length: 144
9:08:21,6472647 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 0A 00 00 00 80 8A ED 60 B8 91 C9 01
9:08:21,6473206 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 0A 00 00 00 80 8A ED 60 B8 91 C9 01
9:08:21,6473781 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr NAME NOT FOUND Length: 144
9:08:21,6474457 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr NAME NOT FOUND Length: 144
9:08:21,6475270 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr NAME NOT FOUND Length: 144
9:08:21,6475958 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr NAME NOT FOUND Length: 144
9:08:21,6476768 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr NAME NOT FOUND Length: 144
9:08:21,6478220 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr NAME NOT FOUND Length: 144
9:08:21,6478975 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 09 00 00 00 E0 9A C0 65 BF 92 C9 01
9:08:21,6479561 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 09 00 00 00 E0 9A C0 65 BF 92 C9 01
9:08:21,6480237 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gbhefgneg.rkr NAME NOT FOUND Length: 144
9:08:21,6480911 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gbhefgneg.rkr NAME NOT FOUND Length: 144
9:08:21,6481665 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr NAME NOT FOUND Length: 144
9:08:21,6482341 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr NAME NOT FOUND Length: 144
9:08:21,6483039 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr NAME NOT FOUND Length: 144
9:08:21,6483724 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr NAME NOT FOUND Length: 144
9:08:21,6484445 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr NAME NOT FOUND Length: 144
9:08:21,6485112 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr NAME NOT FOUND Length: 144
9:08:21,6485827 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr NAME NOT FOUND Length: 144
9:08:21,6486490 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr NAME NOT FOUND Length: 144
9:08:21,6487222 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Qbphzragf naq Frggvatf\pnfgu\Ybpny Frggvatf\Nccyvpngvba Qngn\Tbbtyr\Puebzr\Nccyvpngvba\puebzr.rkr NAME NOT FOUND Length: 144
9:08:21,6488032 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Qbphzragf naq Frggvatf\pnfgu\Ybpny Frggvatf\Nccyvpngvba Qngn\Tbbtyr\Puebzr\Nccyvpngvba\puebzr.rkr NAME NOT FOUND Length: 144
9:08:21,6488900 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZntvpQvfp\ZntvpQvfp.rkr NAME NOT FOUND Length: 144
9:08:21,6489591 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZntvpQvfp\ZntvpQvfp.rkr NAME NOT FOUND Length: 144
9:08:21,6491071 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\kyvpbaf.rkr NAME NOT FOUND Length: 144
9:08:21,6491747 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\kyvpbaf.rkr NAME NOT FOUND Length: 144
9:08:21,6492504 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\ccgvpb.rkr NAME NOT FOUND Length: 144
9:08:21,6493172 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\ccgvpb.rkr NAME NOT FOUND Length: 144
9:08:21,6493887 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\jbeqvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6494549 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\jbeqvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6496128 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\zvfp.rkr NAME NOT FOUND Length: 144
9:08:21,6496798 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\zvfp.rkr NAME NOT FOUND Length: 144
9:08:21,6497519 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\pntvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6498276 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\pntvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6498974 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\bcjvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6499636 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\bcjvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6500332 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\zfcvpbaf.rkr NAME NOT FOUND Length: 144
9:08:21,6500997 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\zfcvpbaf.rkr NAME NOT FOUND Length: 144
9:08:21,6501709 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\bvfvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6502374 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\bvfvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6503073 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbageby.rkr NAME NOT FOUND Length: 144
9:08:21,6503740 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbageby.rkr NAME NOT FOUND Length: 144
9:08:21,6504430 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr NAME NOT FOUND Length: 144
9:08:21,6505095 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr NAME NOT FOUND Length: 144
9:08:21,6505797 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Nqbor\Npebong 6.0\Ernqre\NpebEq32.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 06 00 00 00 20 80 4F C9 BB 92 C9 01
9:08:21,6506481 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Nqbor\Npebong 6.0\Ernqre\NpebEq32.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 06 00 00 00 20 80 4F C9 BB 92 C9 01
9:08:21,6512714 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zbivr Znxre\zbivrzx.rkr NAME NOT FOUND Length: 144
9:08:21,6513429 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zbivr Znxre\zbivrzx.rkr NAME NOT FOUND Length: 144
9:08:21,6514191 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr NAME NOT FOUND Length: 144
9:08:21,6514862 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr NAME NOT FOUND Length: 144
9:08:21,6515588 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr NAME NOT FOUND Length: 144
9:08:21,6516262 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr NAME NOT FOUND Length: 144
9:08:21,6516985 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr NAME NOT FOUND Length: 144
9:08:21,6517778 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr NAME NOT FOUND Length: 144
9:08:21,6518907 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr NAME NOT FOUND Length: 144
9:08:21,6519580 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr NAME NOT FOUND Length: 144
9:08:21,6520298 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\ulcregez.rkr NAME NOT FOUND Length: 144
9:08:21,6520980 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\ulcregez.rkr NAME NOT FOUND Length: 144
9:08:21,6521712 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr NAME NOT FOUND Length: 144
9:08:21,6522382 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr NAME NOT FOUND Length: 144
9:08:21,6523084 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr NAME NOT FOUND Length: 144
9:08:21,6523754 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr NAME NOT FOUND Length: 144
9:08:21,6524480 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr NAME NOT FOUND Length: 144
9:08:21,6525157 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr NAME NOT FOUND Length: 144
9:08:21,6525886 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr NAME NOT FOUND Length: 144
9:08:21,6526556 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr NAME NOT FOUND Length: 144
9:08:21,6527269 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr NAME NOT FOUND Length: 144
9:08:21,6528428 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr NAME NOT FOUND Length: 144
9:08:21,6529168 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp NAME NOT FOUND Length: 144
9:08:21,6529841 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp NAME NOT FOUND Length: 144
9:08:21,6530554 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hfzg\zvtjvm.rkr NAME NOT FOUND Length: 144
9:08:21,6531224 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hfzg\zvtjvm.rkr NAME NOT FOUND Length: 144
9:08:21,6532110 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr NAME NOT FOUND Length: 144
9:08:21,6532803 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr NAME NOT FOUND Length: 144
9:08:21,6533540 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\erfgber\efgehv.rkr NAME NOT FOUND Length: 144
9:08:21,6534211 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\erfgber\efgehv.rkr NAME NOT FOUND Length: 144
9:08:21,6534926 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp NAME NOT FOUND Length: 144
9:08:21,6535594 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp NAME NOT FOUND Length: 144
9:08:21,6536323 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp NAME NOT FOUND Length: 144
9:08:21,6536990 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp NAME NOT FOUND Length: 144
9:08:21,6537717 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr NAME NOT FOUND Length: 144
9:08:21,6538384 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr NAME NOT FOUND Length: 144
9:08:21,6539108 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp NAME NOT FOUND Length: 144
9:08:21,6539770 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp NAME NOT FOUND Length: 144
9:08:21,6540485 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp NAME NOT FOUND Length: 144
9:08:21,6541153 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp NAME NOT FOUND Length: 144
9:08:21,6541865 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp NAME NOT FOUND Length: 144
9:08:21,6542530 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp NAME NOT FOUND Length: 144
9:08:21,6543226 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp NAME NOT FOUND Length: 144
9:08:21,6543888 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp NAME NOT FOUND Length: 144
9:08:21,6544606 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\serrpryy.rkr NAME NOT FOUND Length: 144
9:08:21,6545274 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\serrpryy.rkr NAME NOT FOUND Length: 144
9:08:21,6546039 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfurnegf.rkr NAME NOT FOUND Length: 144
9:08:21,6546735 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfurnegf.rkr NAME NOT FOUND Length: 144
9:08:21,6547603 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\opxtmz.rkr NAME NOT FOUND Length: 144
9:08:21,6548302 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\opxtmz.rkr NAME NOT FOUND Length: 144
9:08:21,6549193 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\puxemz.rkr NAME NOT FOUND Length: 144
9:08:21,6549878 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\puxemz.rkr NAME NOT FOUND Length: 144
9:08:21,6550615 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\uegmmz.rkr NAME NOT FOUND Length: 144
9:08:21,6551311 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\uegmmz.rkr NAME NOT FOUND Length: 144
9:08:21,6552051 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\Eifrmz.rkr NAME NOT FOUND Length: 144
9:08:21,6552733 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\Eifrmz.rkr NAME NOT FOUND Length: 144
9:08:21,6553470 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\fuiymz.rkr NAME NOT FOUND Length: 144
9:08:21,6554143 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\fuiymz.rkr NAME NOT FOUND Length: 144
9:08:21,6554931 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jvazvar.rkr NAME NOT FOUND Length: 144
9:08:21,6555616 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jvazvar.rkr NAME NOT FOUND Length: 144
9:08:21,6556322 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Cvaonyy\CVAONYY.RKR NAME NOT FOUND Length: 144
9:08:21,6557141 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Cvaonyy\CVAONYY.RKR NAME NOT FOUND Length: 144
9:08:21,6557862 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\fby.rkr NAME NOT FOUND Length: 144
9:08:21,6560359 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\fby.rkr NAME NOT FOUND Length: 144
9:08:21,6561080 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\fcvqre.rkr NAME NOT FOUND Length: 144
9:08:21,6561751 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\fcvqre.rkr NAME NOT FOUND Length: 144
9:08:21,6562477 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\NSCIvrje\sgqjvaij.rkr NAME NOT FOUND Length: 144
9:08:21,6563159 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\NSCIvrje\sgqjvaij.rkr NAME NOT FOUND Length: 144
9:08:21,6563896 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjogs.rkr NAME NOT FOUND Length: 144
9:08:21,6564575 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjogs.rkr NAME NOT FOUND Length: 144
9:08:21,6565318 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pnhcqg.rkr NAME NOT FOUND Length: 144
9:08:21,6565994 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pnhcqg.rkr NAME NOT FOUND Length: 144
9:08:21,6566762 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjohaani.rkr NAME NOT FOUND Length: 144
9:08:21,6567441 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjohaani.rkr NAME NOT FOUND Length: 144
9:08:21,6568165 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjobcnbp.rkr NAME NOT FOUND Length: 144
9:08:21,6568846 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjobcnbp.rkr NAME NOT FOUND Length: 144
9:08:21,6569584 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjovajj.rkr NAME NOT FOUND Length: 144
9:08:21,6570263 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjovajj.rkr NAME NOT FOUND Length: 144
9:08:21,6571023 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfzp2io.rkr NAME NOT FOUND Length: 144
9:08:21,6571875 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfzp2io.rkr NAME NOT FOUND Length: 144
9:08:21,6572604 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfpzrah.rkr NAME NOT FOUND Length: 144
9:08:21,6573283 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfpzrah.rkr NAME NOT FOUND Length: 144
9:08:21,6573992 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfong.rkr NAME NOT FOUND Length: 144
9:08:21,6574674 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfong.rkr NAME NOT FOUND Length: 144
9:08:21,6575378 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfsr.rkr NAME NOT FOUND Length: 144
9:08:21,6576054 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfsr.rkr NAME NOT FOUND Length: 144
9:08:21,6576786 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\gepthv.rkr NAME NOT FOUND Length: 144
9:08:21,6577465 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\gepthv.rkr NAME NOT FOUND Length: 144
9:08:21,6578188 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Gbbyxvg\Ova\pjohwoyq.rkr NAME NOT FOUND Length: 144
9:08:21,6578867 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Gbbyxvg\Ova\pjohwoyq.rkr NAME NOT FOUND Length: 144
9:08:21,6579602 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Gbbyxvg\Ova\pjohwpai.rkr NAME NOT FOUND Length: 144
9:08:21,6580314 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Gbbyxvg\Ova\pjohwpai.rkr NAME NOT FOUND Length: 144
9:08:21,6581052 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjopxire.rkr NAME NOT FOUND Length: 144
9:08:21,6581725 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjopxire.rkr NAME NOT FOUND Length: 144
9:08:21,6582457 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjofiq.rkr NAME NOT FOUND Length: 144
9:08:21,6583133 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjofiq.rkr NAME NOT FOUND Length: 144
9:08:21,6583857 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\RKPRY.RKR SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 07 00 00 00 C0 C4 B4 C3 3A 93 C9 01
9:08:21,6584575 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\RKPRY.RKR SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 07 00 00 00 C0 C4 B4 C3 3A 93 C9 01
9:08:21,6585399 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\CBJRECAG.RKR NAME NOT FOUND Length: 144
9:08:21,6586086 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\CBJRECAG.RKR NAME NOT FOUND Length: 144
9:08:21,6587969 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\JVAJBEQ.RKR SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 A0 AE 0E 80 37 93 C9 01
9:08:21,6588592 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\JVAJBEQ.RKR SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 A0 AE 0E 80 37 93 C9 01
9:08:21,6589329 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:']tNIa-}s(MKsrNE6.wvBssvprQvtvgnyFSvyrf>q'lLU-!$WNf]ap!%7QL1 NAME NOT FOUND Length: 144
9:08:21,6589983 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:']tNIa-}s(MKsrNE6.wvBssvprQvtvgnyFSvyrf>q'lLU-!$WNf]ap!%7QL1 NAME NOT FOUND Length: 144
9:08:21,6591835 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\ZFGBER.RKR NAME NOT FOUND Length: 144
9:08:21,6592525 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\ZFGBER.RKR NAME NOT FOUND Length: 144
9:08:21,6593350 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:']tNIa-}s(MKsrNE6.wvFrgYnathntrSvyrf>YBS0V8R(u9OJ,8JFQ58_ NAME NOT FOUND Length: 144
9:08:21,6594000 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:']tNIa-}s(MKsrNE6.wvFrgYnathntrSvyrf>YBS0V8R(u9OJ,8JFQ58_ NAME NOT FOUND Length: 144
9:08:21,6625166 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\CEBSYJVM.RKR NAME NOT FOUND Length: 144
9:08:21,6625996 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\CEBSYJVM.RKR NAME NOT FOUND Length: 144
9:08:21,6626982 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\QJ\QJ20.RKR NAME NOT FOUND Length: 144
9:08:21,6627720 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\QJ\QJ20.RKR NAME NOT FOUND Length: 144
9:08:21,6628658 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZBQV\11.0\ZFCIVRJ.RKR NAME NOT FOUND Length: 144
9:08:21,6629390 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZBQV\11.0\ZFCIVRJ.RKR NAME NOT FOUND Length: 144
9:08:21,6630220 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:']tNIa-}s(MKsrNE6.wvQbphzragVzntvatHgvyf>Z5e(Qy.GB?{k&&C=P+8Y NAME NOT FOUND Length: 144
9:08:21,6630877 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:']tNIa-}s(MKsrNE6.wvQbphzragVzntvatHgvyf>Z5e(Qy.GB?{k&&C=P+8Y NAME NOT FOUND Length: 144
9:08:21,6631659 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\BVF.RKR NAME NOT FOUND Length: 144
9:08:21,6632357 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\BVF.RKR NAME NOT FOUND Length: 144
9:08:21,6633173 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Flznagrp NagvIvehf\ICP32.rkr NAME NOT FOUND Length: 144
9:08:21,6633855 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Flznagrp NagvIvehf\ICP32.rkr NAME NOT FOUND Length: 144
9:08:21,6634575 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Qhqr\qhqr.rkr NAME NOT FOUND Length: 144
9:08:21,6635260 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Qhqr\qhqr.rkr NAME NOT FOUND Length: 144
9:08:21,6636006 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jverfunex\jverfunex.rkr NAME NOT FOUND Length: 144
9:08:21,6636780 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jverfunex\jverfunex.rkr NAME NOT FOUND Length: 144


Thanks in avance



ORIGINAL: VBScab

Yeh...have a little think about how much time we both might have saved if you'd said that in your original post.

Anyway, did you see my signature? Have you run a file/registry/process monitor as the application starts up? I already know the answer, so do that now and report back.



Added quote tag for log output pasted into post -Bob
Answered 02/20/2009 by: toxicrainpx
Yellow Belt

Please log in to comment
0
Holy cow...

- One, please use the [CODE} tage when posting lengthy text. Doing as you have makes it too hard to read. The CODE tag can be automatically added by clicking the button marked '<%'. You can add the tags now by editing your post and typing a left square bracket '[' followed by the word 'CODE' then a right square bracket ']'. At the end of your text, do '[', then a forward slash '/', the word 'CODE, then ']'. If you know even basic HTML, you'll figure out the format/syntax.

- You need to learn what to exclude (I hope your packages don't include some of this junk!). The first thing I picked up which will SERIOUSLY reduce ProcMon's output is 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\'. Set a filter on that path and edit it so that it's set to 'begins with' rather than 'is'. Another candidate would be 'HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\'.

Set filters on the irrelevant stuff, then re-post with a more sensible log, using the CODE tags.
Answered 02/25/2009 by: VBScab
Red Belt

Please log in to comment
Answer this question or Comment on this question for clarity