Software Deployment

Enter this search term into Google:

site:microsoft.com 2003 "Microsoft Office Word has not been installed for the current user"

Check out the first hit.

Dear Friend
I did that first. It says that you have to go to C:\Documents and Settings\All Users\Application Data\Microsoft\Office\Data\ and change the Permission entries or delete that DAT file that is on that folder. I did that already and the problem still exist. Can you help me with this? Thanks in advance.


ORIGINAL: VBScab

Enter this search term into Google:

site:microsoft.com 2003 "Microsoft Office Word has not been installed for the current user"

Check out the first hit.

Yeh...have a little think about how much time we both might have saved if you'd said that in your original post.

Anyway, did you see my signature? Have you run a file/registry/process monitor as the application starts up? I already know the answer, so do that now and report back.

Ok, I tryed to do what you told me but I cannot identify whats the problem. Can you really help me please? This is part of my procmon :


9:08:20,8440375 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8452868 Explorer.EXE 1760 QueryOpen C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE FAST IO DISALLOWED
9:08:20,8455902 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8458503 Explorer.EXE 1760 QueryBasicInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS CreationTime: 13-08-2003 2:34:38, LastAccessTime: 20-02-2009 9:08:19, LastWriteTime: 13-08-2003 2:34:38, ChangeTime: 20-02-2009 9:07:33, FileAttributes: A
9:08:20,8460679 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8464434 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8467767 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8470962 Explorer.EXE 1760 QueryInformationVolume C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS VolumeCreationTime: 28-10-2008 12:00:35, VolumeSerialNumber: 84CC-1526, SupportsObjects: True, VolumeLabel:
9:08:20,8473608 Explorer.EXE 1760 QueryFileInternalInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS IndexNumber: 0x2000000006a09
9:08:20,8475854 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:20,8478628 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8481701 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:20,8484771 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8491568 Explorer.EXE 1760 QueryOpen C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE FAST IO DISALLOWED
9:08:20,8494538 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8496851 Explorer.EXE 1760 QueryBasicInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS CreationTime: 13-08-2003 2:34:38, LastAccessTime: 20-02-2009 9:08:19, LastWriteTime: 13-08-2003 2:34:38, ChangeTime: 20-02-2009 9:07:33, FileAttributes: A
9:08:20,8500480 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8504020 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8507110 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:20,8509504 Explorer.EXE 1760 QueryInformationVolume C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS VolumeCreationTime: 28-10-2008 12:00:35, VolumeSerialNumber: 84CC-1526, SupportsObjects: True, VolumeLabel:
9:08:20,8512060 Explorer.EXE 1760 QueryFileInternalInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS IndexNumber: 0x2000000006a09
9:08:20,8514367 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:20,8517122 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:20,8520192 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:20,8523251 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,0808380 Explorer.EXE 1760 QueryOpen C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE FAST IO DISALLOWED
9:08:21,0812187 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,0815241 Explorer.EXE 1760 QueryBasicInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS CreationTime: 13-08-2003 2:34:38, LastAccessTime: 20-02-2009 9:08:19, LastWriteTime: 13-08-2003 2:34:38, ChangeTime: 20-02-2009 9:07:33, FileAttributes: A
9:08:21,0817884 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,0821837 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,0825142 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,0827678 Explorer.EXE 1760 QueryInformationVolume C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS VolumeCreationTime: 28-10-2008 12:00:35, VolumeSerialNumber: 84CC-1526, SupportsObjects: True, VolumeLabel:
9:08:21,0829947 Explorer.EXE 1760 QueryFileInternalInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS IndexNumber: 0x2000000006a09
9:08:21,0832240 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:21,0835081 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,0838305 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:21,0841487 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,5803679 VPTray.exe 760 RegQueryValue HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Storages\Filesystem\RealTimeScan\OnOff-L NAME NOT FOUND Length: 144
9:08:21,5804297 VPTray.exe 760 RegQueryValue HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Common\OnOff-L NAME NOT FOUND Length: 144
9:08:21,5804978 VPTray.exe 760 RegQueryValue HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\General\ShowVPIcon SUCCESS Type: REG_DWORD, Length: 4, Data: 1
9:08:21,6104821 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage SUCCESS Desired Access: Query Value
9:08:21,6105748 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\FavoritesChanges SUCCESS Type: REG_DWORD, Length: 4, Data: 1
9:08:21,6106760 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage SUCCESS
9:08:21,6107073 Explorer.EXE 1760 RegOpenKey HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced SUCCESS Desired Access: Query Value
9:08:21,6107690 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_MinMFU NAME NOT FOUND Length: 144
9:08:21,6108707 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced SUCCESS
9:08:21,6129358 Explorer.EXE 1760 QueryOpen C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE FAST IO DISALLOWED
9:08:21,6133246 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,6135839 Explorer.EXE 1760 QueryBasicInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS CreationTime: 13-08-2003 2:34:38, LastAccessTime: 20-02-2009 9:08:20, LastWriteTime: 13-08-2003 2:34:38, ChangeTime: 20-02-2009 9:07:33, FileAttributes: A
9:08:21,6139426 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,6143485 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,6146874 Explorer.EXE 1760 CreateFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
9:08:21,6149380 Explorer.EXE 1760 QueryInformationVolume C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS VolumeCreationTime: 28-10-2008 12:00:35, VolumeSerialNumber: 84CC-1526, SupportsObjects: True, VolumeLabel:
9:08:21,6151668 Explorer.EXE 1760 QueryFileInternalInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS IndexNumber: 0x2000000006a09
9:08:21,6154014 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:21,6156903 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,6160074 Explorer.EXE 1760 QueryStandardInformationFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS AllocationSize: 10.076.160, EndOfFile: 10.073.144, NumberOfLinks: 1, DeletePending: False, Directory: False
9:08:21,6163259 Explorer.EXE 1760 CloseFile C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE SUCCESS
9:08:21,6182518 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage SUCCESS Desired Access: Query Value
9:08:21,6183239 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\FavoritesChanges SUCCESS Type: REG_DWORD, Length: 4, Data: 1
9:08:21,6184189 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage SUCCESS
9:08:21,6184501 Explorer.EXE 1760 RegOpenKey HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced SUCCESS Desired Access: Query Value
9:08:21,6185124 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_MinMFU NAME NOT FOUND Length: 144
9:08:21,6186046 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced SUCCESS
9:08:21,6189862 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 07 00 00 00 C0 97 F0 60 B8 91 C9 01
9:08:21,6190502 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 07 00 00 00 C0 97 F0 60 B8 91 C9 01
9:08:21,6191270 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax NAME NOT FOUND Length: 144
9:08:21,6192380 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax NAME NOT FOUND Length: 144
9:08:21,6193223 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jvaqbjf Zrqvn Cynlre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 13 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6193757 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jvaqbjf Zrqvn Cynlre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 13 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6196422 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax NAME NOT FOUND Length: 144
9:08:21,6198182 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax NAME NOT FOUND Length: 144
9:08:21,6199333 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax NAME NOT FOUND Length: 144
9:08:21,6200079 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax NAME NOT FOUND Length: 144
9:08:21,6201045 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax NAME NOT FOUND Length: 144
9:08:21,6201819 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax NAME NOT FOUND Length: 144
9:08:21,6202778 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Gbhe Jvaqbjf KC.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 12 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6203322 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Gbhe Jvaqbjf KC.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 12 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6204110 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax NAME NOT FOUND Length: 144
9:08:21,6204803 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax NAME NOT FOUND Length: 144
9:08:21,6205666 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax NAME NOT FOUND Length: 144
9:08:21,6206356 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax NAME NOT FOUND Length: 144
9:08:21,6207225 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax NAME NOT FOUND Length: 144
9:08:21,6207929 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax NAME NOT FOUND Length: 144
9:08:21,6208789 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax NAME NOT FOUND Length: 144
9:08:21,6209482 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax NAME NOT FOUND Length: 144
9:08:21,6210401 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax NAME NOT FOUND Length: 144
9:08:21,6211117 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax NAME NOT FOUND Length: 144
9:08:21,6212047 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax NAME NOT FOUND Length: 144
9:08:21,6212787 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax NAME NOT FOUND Length: 144
9:08:21,6213690 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tbbtyr Puebzr\Tbbtyr Puebzr.yax NAME NOT FOUND Length: 144
9:08:21,6214550 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tbbtyr Puebzr\Tbbtyr Puebzr.yax NAME NOT FOUND Length: 144
9:08:21,6215427 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\ZntvpQvfp\ZntvpQvfp.yax NAME NOT FOUND Length: 144
9:08:21,6216120 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\ZntvpQvfp\ZntvpQvfp.yax NAME NOT FOUND Length: 144
9:08:21,6217017 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Rkpry 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6217726 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Rkpry 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6218615 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr CbjreCbvag 2003.yax NAME NOT FOUND Length: 144
9:08:21,6219347 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr CbjreCbvag 2003.yax NAME NOT FOUND Length: 144
9:08:21,6220224 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Jbeq 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 20 55 D2 97 3A 93 C9 01
9:08:21,6220841 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Jbeq 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 20 55 D2 97 3A 93 C9 01
9:08:21,6222501 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Qvtvgny Pregvsvpngr sbe ION Cebwrpgf.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6223154 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Qvtvgny Pregvsvpngr sbe ION Cebwrpgf.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6224222 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Pyvc Betnavmre.yax NAME NOT FOUND Length: 144
9:08:21,6224962 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Pyvc Betnavmre.yax NAME NOT FOUND Length: 144
9:08:21,6225906 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Ynathntr Frggvatf.yax NAME NOT FOUND Length: 144
9:08:21,6226652 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Ynathntr Frggvatf.yax NAME NOT FOUND Length: 144
9:08:21,6229580 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Fnir Zl Frggvatf Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6230250 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Fnir Zl Frggvatf Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6231122 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Nccyvpngvba Erpbirel.yax NAME NOT FOUND Length: 144
9:08:21,6231868 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Nccyvpngvba Erpbirel.yax NAME NOT FOUND Length: 144
9:08:21,6232818 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Vzntvat.yax NAME NOT FOUND Length: 144
9:08:21,6233561 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Vzntvat.yax NAME NOT FOUND Length: 144
9:08:21,6235106 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Fpnaavat.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6235868 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Fpnaavat.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6236908 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Cvpgher Znantre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6237681 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Cvpgher Znantre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6239377 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Frg Cebtenz Npprff naq Qrsnhygf.yax NAME NOT FOUND Length: 144
9:08:21,6240076 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Frg Cebtenz Npprff naq Qrsnhygf.yax NAME NOT FOUND Length: 144
9:08:21,6242174 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6242866 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6243825 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqbor Ernqre 6.0.yax NAME NOT FOUND Length: 144
9:08:21,6244512 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqbor Ernqre 6.0.yax NAME NOT FOUND Length: 144
9:08:21,6245411 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jvaqbjf Zbivr Znxre.yax NAME NOT FOUND Length: 144
9:08:21,6246115 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jvaqbjf Zbivr Znxre.yax NAME NOT FOUND Length: 144
9:08:21,6247026 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax NAME NOT FOUND Length: 144
9:08:21,6247747 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax NAME NOT FOUND Length: 144
9:08:21,6248616 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax NAME NOT FOUND Length: 144
9:08:21,6249331 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax NAME NOT FOUND Length: 144
9:08:21,6251161 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax NAME NOT FOUND Length: 144
9:08:21,6251845 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax NAME NOT FOUND Length: 144
9:08:21,6253809 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax NAME NOT FOUND Length: 144
9:08:21,6254784 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax NAME NOT FOUND Length: 144
9:08:21,6255840 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\UlcreGrezvany.yax NAME NOT FOUND Length: 144
9:08:21,6256580 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\UlcreGrezvany.yax NAME NOT FOUND Length: 144
9:08:21,6257578 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax NAME NOT FOUND Length: 144
9:08:21,6259916 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax NAME NOT FOUND Length: 144
9:08:21,6261045 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax NAME NOT FOUND Length: 144
9:08:21,6261793 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax NAME NOT FOUND Length: 144
9:08:21,6262849 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax NAME NOT FOUND Length: 144
9:08:21,6263651 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax NAME NOT FOUND Length: 144
9:08:21,6264607 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax NAME NOT FOUND Length: 144
9:08:21,6265322 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax NAME NOT FOUND Length: 144
9:08:21,6273345 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax NAME NOT FOUND Length: 144
9:08:21,6274136 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax NAME NOT FOUND Length: 144
9:08:21,6275189 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax NAME NOT FOUND Length: 144
9:08:21,6275938 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax NAME NOT FOUND Length: 144
9:08:21,6277776 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Svyrf naq Frggvatf Genafsre Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 11 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6278404 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Svyrf naq Frggvatf Genafsre Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 11 00 00 00 F0 B6 11 2B AA 91 C9 01
9:08:21,6280477 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax NAME NOT FOUND Length: 144
9:08:21,6281215 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax NAME NOT FOUND Length: 144
9:08:21,6282173 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Erfgber.yax NAME NOT FOUND Length: 144
9:08:21,6283003 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Erfgber.yax NAME NOT FOUND Length: 144
9:08:21,6283964 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax NAME NOT FOUND Length: 144
9:08:21,6284701 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax NAME NOT FOUND Length: 144
9:08:21,6285626 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax NAME NOT FOUND Length: 144
9:08:21,6286319 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax NAME NOT FOUND Length: 144
9:08:21,6287235 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax NAME NOT FOUND Length: 144
9:08:21,6287942 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax NAME NOT FOUND Length: 144
9:08:21,6288853 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax NAME NOT FOUND Length: 144
9:08:21,6289540 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax NAME NOT FOUND Length: 144
9:08:21,6290448 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax NAME NOT FOUND Length: 144
9:08:21,6291152 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax NAME NOT FOUND Length: 144
9:08:21,6292043 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax NAME NOT FOUND Length: 144
9:08:21,6292825 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax NAME NOT FOUND Length: 144
9:08:21,6293719 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax NAME NOT FOUND Length: 144
9:08:21,6294404 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax NAME NOT FOUND Length: 144
9:08:21,6295300 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Serrpryy.yax NAME NOT FOUND Length: 144
9:08:21,6295982 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Serrpryy.yax NAME NOT FOUND Length: 144
9:08:21,6297549 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Urnegf.yax NAME NOT FOUND Length: 144
9:08:21,6298731 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Urnegf.yax NAME NOT FOUND Length: 144
9:08:21,6299656 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Onpxtnzzba.yax NAME NOT FOUND Length: 144
9:08:21,6300337 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Onpxtnzzba.yax NAME NOT FOUND Length: 144
9:08:21,6301234 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Purpxref.yax NAME NOT FOUND Length: 144
9:08:21,6301910 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Purpxref.yax NAME NOT FOUND Length: 144
9:08:21,6303125 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Urnegf.yax NAME NOT FOUND Length: 144
9:08:21,6303804 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Urnegf.yax NAME NOT FOUND Length: 144
9:08:21,6304679 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Erirefv.yax NAME NOT FOUND Length: 144
9:08:21,6305360 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Erirefv.yax NAME NOT FOUND Length: 144
9:08:21,6306240 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Fcnqrf.yax NAME NOT FOUND Length: 144
9:08:21,6306919 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Vagrearg Fcnqrf.yax NAME NOT FOUND Length: 144
9:08:21,6308635 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Zvarfjrrcre.yax NAME NOT FOUND Length: 144
9:08:21,6309353 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Zvarfjrrcre.yax NAME NOT FOUND Length: 144
9:08:21,6310339 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Cvaonyy.yax NAME NOT FOUND Length: 144
9:08:21,6311057 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Cvaonyy.yax NAME NOT FOUND Length: 144
9:08:21,6311956 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Fbyvgnver.yax NAME NOT FOUND Length: 144
9:08:21,6312766 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Fbyvgnver.yax NAME NOT FOUND Length: 144
9:08:21,6313694 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Fcvqre Fbyvgnver.yax NAME NOT FOUND Length: 144
9:08:21,6314381 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Tnzrf\Fcvqre Fbyvgnver.yax NAME NOT FOUND Length: 144
9:08:21,6315300 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\NSC Jbexorapu Ivrjre.yax NAME NOT FOUND Length: 144
9:08:21,6315985 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\NSC Jbexorapu Ivrjre.yax NAME NOT FOUND Length: 144
9:08:21,6316979 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qngn Genafsre Sebz vFrevrf Freire.yax NAME NOT FOUND Length: 144
9:08:21,6317664 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qngn Genafsre Sebz vFrevrf Freire.yax NAME NOT FOUND Length: 144
9:08:21,6318583 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qngn Genafsre Gb vFrevrf Freire.yax NAME NOT FOUND Length: 144
9:08:21,6319273 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qngn Genafsre Gb vFrevrf Freire.yax NAME NOT FOUND Length: 144
9:08:21,6320142 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qverpgbel Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6320820 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Qverpgbel Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6321745 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\vFrevrf Anivtngbe.yax NAME NOT FOUND Length: 144
9:08:21,6322480 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\vFrevrf Anivtngbe.yax NAME NOT FOUND Length: 144
9:08:21,6324251 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\BQOP Nqzvavfgengvba.yax NAME NOT FOUND Length: 144
9:08:21,6324972 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\BQOP Nqzvavfgengvba.yax NAME NOT FOUND Length: 144
9:08:21,6325983 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Bcrengvbaf Pbafbyr.yax NAME NOT FOUND Length: 144
9:08:21,6326704 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Bcrengvbaf Pbafbyr.yax NAME NOT FOUND Length: 144
9:08:21,6327704 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Fgneg Qverpgbel Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6328422 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Fgneg Qverpgbel Hcqngr.yax NAME NOT FOUND Length: 144
9:08:21,6329386 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Jrypbzr Jvmneq.yax NAME NOT FOUND Length: 144
9:08:21,6330109 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Jrypbzr Jvmneq.yax NAME NOT FOUND Length: 144
9:08:21,6331026 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Pbaireg Znpeb.yax NAME NOT FOUND Length: 144
9:08:21,6331710 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Pbaireg Znpeb.yax NAME NOT FOUND Length: 144
9:08:21,6332802 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Zrah-One Phfgbzvmngvba Hgvyvgl.yax NAME NOT FOUND Length: 144
9:08:21,6333490 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Zrah-One Phfgbzvmngvba Hgvyvgl.yax NAME NOT FOUND Length: 144
9:08:21,6334395 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Zhygvcyr Frffvbaf.yax NAME NOT FOUND Length: 144
9:08:21,6335079 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Zhygvcyr Frffvbaf.yax NAME NOT FOUND Length: 144
9:08:21,6336026 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Fgneg be Pbasvther Frffvba.yax NAME NOT FOUND Length: 144
9:08:21,6336719 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Fgneg be Pbasvther Frffvba.yax NAME NOT FOUND Length: 144
9:08:21,6337599 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Genpr Snpvyvgl.yax NAME NOT FOUND Length: 144
9:08:21,6338284 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Rzhyngbe\Genpr Snpvyvgl.yax NAME NOT FOUND Length: 144
9:08:21,6341033 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\THV Ohvyqre.yax NAME NOT FOUND Length: 144
9:08:21,6347014 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\THV Ohvyqre.yax NAME NOT FOUND Length: 144
9:08:21,6348117 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\Cebtenzzre'f Gbbyxvg.yax NAME NOT FOUND Length: 144
9:08:21,6348807 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\Cebtenzzre'f Gbbyxvg.yax NAME NOT FOUND Length: 144
9:08:21,6349816 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\Erfbhepr Fpevcg Pbairegre.yax NAME NOT FOUND Length: 144
9:08:21,6350511 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Cebtenzzre'f Gbbyxvg\Erfbhepr Fpevcg Pbairegre.yax NAME NOT FOUND Length: 144
9:08:21,6351467 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Purpx Freivpr Yriry.yax NAME NOT FOUND Length: 144
9:08:21,6352255 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Purpx Freivpr Yriry.yax NAME NOT FOUND Length: 144
9:08:21,6353191 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Uvfgbel Ybt.yax NAME NOT FOUND Length: 144
9:08:21,6353878 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Uvfgbel Ybt.yax NAME NOT FOUND Length: 144
9:08:21,6354830 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Fgneg Qvntabfgvp Gbbyf.yax NAME NOT FOUND Length: 144
9:08:21,6355520 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Fgneg Qvntabfgvp Gbbyf.yax NAME NOT FOUND Length: 144
9:08:21,6356412 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Genpr Svyrf.yax NAME NOT FOUND Length: 144
9:08:21,6357104 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\VOZ vFrevrf Npprff sbe Jvaqbjf\Freivpr\Genpr Svyrf.yax NAME NOT FOUND Length: 144
9:08:21,6358018 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Rkpry 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6358728 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Rkpry 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6359675 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr CbjreCbvag 2003.yax NAME NOT FOUND Length: 144
9:08:21,6360404 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr CbjreCbvag 2003.yax NAME NOT FOUND Length: 144
9:08:21,6361879 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Jbeq 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 20 55 D2 97 3A 93 C9 01
9:08:21,6362625 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Jbeq 2003.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 20 55 D2 97 3A 93 C9 01
9:08:21,6363625 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Qvtvgny Pregvsvpngr sbe ION Cebwrpgf.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6364284 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Qvtvgny Pregvsvpngr sbe ION Cebwrpgf.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6365172 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Pyvc Betnavmre.yax NAME NOT FOUND Length: 144
9:08:21,6365913 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Pyvc Betnavmre.yax NAME NOT FOUND Length: 144
9:08:21,6373132 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Ynathntr Frggvatf.yax NAME NOT FOUND Length: 144
9:08:21,6373942 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Ynathntr Frggvatf.yax NAME NOT FOUND Length: 144
9:08:21,6375003 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Fnir Zl Frggvatf Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6375727 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr 2003 Fnir Zl Frggvatf Jvmneq.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6376680 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Nccyvpngvba Erpbirel.yax NAME NOT FOUND Length: 144
9:08:21,6377481 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Nccyvpngvba Erpbirel.yax NAME NOT FOUND Length: 144
9:08:21,6379811 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Vzntvat.yax NAME NOT FOUND Length: 144
9:08:21,6380557 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Vzntvat.yax NAME NOT FOUND Length: 144
9:08:21,6381733 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Fpnaavat.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6382490 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Qbphzrag Fpnaavat.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6383474 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Cvpgher Znantre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6384231 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Zvpebfbsg Bssvpr\Zvpebfbsg Bssvpr Gbbyf\Zvpebfbsg Bssvpr Cvpgher Znantre.yax SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
9:08:21,6385267 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Flznagrp Pyvrag Frphevgl\Flznagrp NagvIvehf.yax NAME NOT FOUND Length: 144
9:08:21,6385980 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Flznagrp Pyvrag Frphevgl\Flznagrp NagvIvehf.yax NAME NOT FOUND Length: 144
9:08:21,6386966 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Gur Qhqr\Gur Qhqr.yax NAME NOT FOUND Length: 144
9:08:21,6387664 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Gur Qhqr\Gur Qhqr.yax NAME NOT FOUND Length: 144
9:08:21,6389005 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jverfunex\Jverfunex.yax NAME NOT FOUND Length: 144
9:08:21,6389709 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%pfvqy2%\Jverfunex\Jverfunex.yax NAME NOT FOUND Length: 144
9:08:21,6390785 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\pnfgu\Qrfxgbc\Tbbtyr Puebzr.yax NAME NOT FOUND Length: 144
9:08:21,6391567 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\pnfgu\Qrfxgbc\Tbbtyr Puebzr.yax NAME NOT FOUND Length: 144
9:08:21,6392500 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\pnfgu\Qrfxgbc\ZntvpQvfp.yax NAME NOT FOUND Length: 144
9:08:21,6398369 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\pnfgu\Qrfxgbc\ZntvpQvfp.yax NAME NOT FOUND Length: 144
9:08:21,6400032 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\vFrevrf Anivtngbe.yax NAME NOT FOUND Length: 144
9:08:21,6400702 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\vFrevrf Anivtngbe.yax NAME NOT FOUND Length: 144
9:08:21,6401842 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Jverfunex.yax NAME NOT FOUND Length: 144
9:08:21,6402529 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Jverfunex.yax NAME NOT FOUND Length: 144
9:08:21,6403426 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6404021 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6404641 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder SUCCESS Desired Access: Maximum Allowed
9:08:21,6405476 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6406424 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6406963 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\WantsFORDISPLAY NAME NOT FOUND Length: 144
9:08:21,6408217 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS
9:08:21,6408538 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6409234 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6409712 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6410178 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder SUCCESS Desired Access: Maximum Allowed
9:08:21,6410888 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6411715 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6412254 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\Attributes SUCCESS Type: REG_DWORD, Length: 4, Data: 0
9:08:21,6412740 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6413547 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6414087 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\CallForAttributes NAME NOT FOUND Length: 144
9:08:21,6414894 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS
9:08:21,6415232 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum NAME NOT FOUND Desired Access: Query Value
9:08:21,6415760 Explorer.EXE 1760 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum SUCCESS Desired Access: Query Value
9:08:21,6416467 Explorer.EXE 1760 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Length: 144
9:08:21,6417305 Explorer.EXE 1760 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum SUCCESS
9:08:21,6417615 Explorer.EXE 1760 RegOpenKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Query Value
9:08:21,6418299 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Query Value
9:08:21,6418841 Explorer.EXE 1760 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Query Value
9:08:21,6420772 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6421266 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6422090 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} SUCCESS Desired Access: Maximum Allowed
9:08:21,6422730 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Query: Name
9:08:21,6423599 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6424113 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Desired Access: Maximum Allowed
9:08:21,6425007 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS
9:08:21,6425295 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Query: Name
9:08:21,6426096 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6426608 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}\LocalizedString SUCCESS Type: REG_SZ, Length: 40, Data: @explorer.exe,-7024
9:08:21,6427239 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache SUCCESS Desired Access: Maximum Allowed
9:08:21,6427806 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\@explorer.exe,-7024 SUCCESS Type: REG_SZ, Length: 18, Data: Internet
9:08:21,6428692 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache SUCCESS
9:08:21,6429267 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS
9:08:21,6429561 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6430044 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6430516 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder SUCCESS Desired Access: Maximum Allowed
9:08:21,6431128 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6431935 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6432458 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\WantsFORDISPLAY NAME NOT FOUND Length: 144
9:08:21,6433254 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS
9:08:21,6433544 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6434106 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6434581 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6435039 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder SUCCESS Desired Access: Maximum Allowed
9:08:21,6435598 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6436411 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6436936 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\Attributes SUCCESS Type: REG_DWORD, Length: 4, Data: 0
9:08:21,6437411 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS Query: Name
9:08:21,6438212 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6438732 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder\CallForAttributes NAME NOT FOUND Length: 144
9:08:21,6439528 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\ShellFolder SUCCESS
9:08:21,6439805 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum NAME NOT FOUND Desired Access: Query Value
9:08:21,6440305 Explorer.EXE 1760 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum SUCCESS Desired Access: Query Value
9:08:21,6440886 Explorer.EXE 1760 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Length: 144
9:08:21,6441691 Explorer.EXE 1760 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum SUCCESS
9:08:21,6460539 Explorer.EXE 1760 RegOpenKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Query Value
9:08:21,6461182 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Query Value
9:08:21,6461707 Explorer.EXE 1760 RegOpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}\ShellFolder NAME NOT FOUND Desired Access: Query Value
9:08:21,6462288 Explorer.EXE 1760 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name
9:08:21,6462774 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6463241 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} SUCCESS Desired Access: Maximum Allowed
9:08:21,6463830 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Query: Name
9:08:21,6464652 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6465163 Explorer.EXE 1760 RegOpenKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Desired Access: Maximum Allowed
9:08:21,6466395 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS
9:08:21,6466674 Explorer.EXE 1760 RegQueryKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS Query: Name
9:08:21,6467487 Explorer.EXE 1760 RegOpenKey HKCU\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} NAME NOT FOUND Desired Access: Maximum Allowed
9:08:21,6468010 Explorer.EXE 1760 RegQueryValue HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\LocalizedString SUCCESS Type: REG_SZ, Length: 40, Data: @explorer.exe,-7025
9:08:21,6468607 Explorer.EXE 1760 RegOpenKey HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache SUCCESS Desired Access: Maximum Allowed
9:08:21,6469158 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\@explorer.exe,-7025 SUCCESS Type: REG_SZ, Length: 14, Data: E-mail
9:08:21,6469996 Explorer.EXE 1760 RegCloseKey HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache SUCCESS
9:08:21,6470588 Explorer.EXE 1760 RegCloseKey HKCR\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} SUCCESS
9:08:21,6471150 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr NAME NOT FOUND Length: 144
9:08:21,6471865 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr NAME NOT FOUND Length: 144
9:08:21,6472647 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 0A 00 00 00 80 8A ED 60 B8 91 C9 01
9:08:21,6473206 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 01 00 00 00 0A 00 00 00 80 8A ED 60 B8 91 C9 01
9:08:21,6473781 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr NAME NOT FOUND Length: 144
9:08:21,6474457 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr NAME NOT FOUND Length: 144
9:08:21,6475270 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr NAME NOT FOUND Length: 144
9:08:21,6475958 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr NAME NOT FOUND Length: 144
9:08:21,6476768 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr NAME NOT FOUND Length: 144
9:08:21,6478220 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr NAME NOT FOUND Length: 144
9:08:21,6478975 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 09 00 00 00 E0 9A C0 65 BF 92 C9 01
9:08:21,6479561 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 09 00 00 00 E0 9A C0 65 BF 92 C9 01
9:08:21,6480237 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gbhefgneg.rkr NAME NOT FOUND Length: 144
9:08:21,6480911 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gbhefgneg.rkr NAME NOT FOUND Length: 144
9:08:21,6481665 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr NAME NOT FOUND Length: 144
9:08:21,6482341 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr NAME NOT FOUND Length: 144
9:08:21,6483039 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr NAME NOT FOUND Length: 144
9:08:21,6483724 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr NAME NOT FOUND Length: 144
9:08:21,6484445 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr NAME NOT FOUND Length: 144
9:08:21,6485112 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr NAME NOT FOUND Length: 144
9:08:21,6485827 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr NAME NOT FOUND Length: 144
9:08:21,6486490 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr NAME NOT FOUND Length: 144
9:08:21,6487222 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Qbphzragf naq Frggvatf\pnfgu\Ybpny Frggvatf\Nccyvpngvba Qngn\Tbbtyr\Puebzr\Nccyvpngvba\puebzr.rkr NAME NOT FOUND Length: 144
9:08:21,6488032 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Qbphzragf naq Frggvatf\pnfgu\Ybpny Frggvatf\Nccyvpngvba Qngn\Tbbtyr\Puebzr\Nccyvpngvba\puebzr.rkr NAME NOT FOUND Length: 144
9:08:21,6488900 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZntvpQvfp\ZntvpQvfp.rkr NAME NOT FOUND Length: 144
9:08:21,6489591 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZntvpQvfp\ZntvpQvfp.rkr NAME NOT FOUND Length: 144
9:08:21,6491071 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\kyvpbaf.rkr NAME NOT FOUND Length: 144
9:08:21,6491747 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\kyvpbaf.rkr NAME NOT FOUND Length: 144
9:08:21,6492504 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\ccgvpb.rkr NAME NOT FOUND Length: 144
9:08:21,6493172 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\ccgvpb.rkr NAME NOT FOUND Length: 144
9:08:21,6493887 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\jbeqvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6494549 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\jbeqvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6496128 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\zvfp.rkr NAME NOT FOUND Length: 144
9:08:21,6496798 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\zvfp.rkr NAME NOT FOUND Length: 144
9:08:21,6497519 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\pntvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6498276 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\pntvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6498974 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\bcjvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6499636 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\bcjvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6500332 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\zfcvpbaf.rkr NAME NOT FOUND Length: 144
9:08:21,6500997 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\zfcvpbaf.rkr NAME NOT FOUND Length: 144
9:08:21,6501709 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\bvfvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6502374 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\Vafgnyyre\{90110409-6000-11Q3-8PSR-0150048383P9}\bvfvpba.rkr NAME NOT FOUND Length: 144
9:08:21,6503073 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbageby.rkr NAME NOT FOUND Length: 144
9:08:21,6503740 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbageby.rkr NAME NOT FOUND Length: 144
9:08:21,6504430 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr NAME NOT FOUND Length: 144
9:08:21,6505095 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr NAME NOT FOUND Length: 144
9:08:21,6505797 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Nqbor\Npebong 6.0\Ernqre\NpebEq32.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 06 00 00 00 20 80 4F C9 BB 92 C9 01
9:08:21,6506481 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Nqbor\Npebong 6.0\Ernqre\NpebEq32.rkr SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 06 00 00 00 20 80 4F C9 BB 92 C9 01
9:08:21,6512714 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zbivr Znxre\zbivrzx.rkr NAME NOT FOUND Length: 144
9:08:21,6513429 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zbivr Znxre\zbivrzx.rkr NAME NOT FOUND Length: 144
9:08:21,6514191 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr NAME NOT FOUND Length: 144
9:08:21,6514862 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr NAME NOT FOUND Length: 144
9:08:21,6515588 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr NAME NOT FOUND Length: 144
9:08:21,6516262 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr NAME NOT FOUND Length: 144
9:08:21,6516985 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr NAME NOT FOUND Length: 144
9:08:21,6517778 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr NAME NOT FOUND Length: 144
9:08:21,6518907 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr NAME NOT FOUND Length: 144
9:08:21,6519580 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr NAME NOT FOUND Length: 144
9:08:21,6520298 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\ulcregez.rkr NAME NOT FOUND Length: 144
9:08:21,6520980 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\ulcregez.rkr NAME NOT FOUND Length: 144
9:08:21,6521712 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr NAME NOT FOUND Length: 144
9:08:21,6522382 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr NAME NOT FOUND Length: 144
9:08:21,6523084 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr NAME NOT FOUND Length: 144
9:08:21,6523754 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr NAME NOT FOUND Length: 144
9:08:21,6524480 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr NAME NOT FOUND Length: 144
9:08:21,6525157 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr NAME NOT FOUND Length: 144
9:08:21,6525886 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr NAME NOT FOUND Length: 144
9:08:21,6526556 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr NAME NOT FOUND Length: 144
9:08:21,6527269 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr NAME NOT FOUND Length: 144
9:08:21,6528428 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr NAME NOT FOUND Length: 144
9:08:21,6529168 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp NAME NOT FOUND Length: 144
9:08:21,6529841 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp NAME NOT FOUND Length: 144
9:08:21,6530554 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hfzg\zvtjvm.rkr NAME NOT FOUND Length: 144
9:08:21,6531224 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hfzg\zvtjvm.rkr NAME NOT FOUND Length: 144
9:08:21,6532110 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr NAME NOT FOUND Length: 144
9:08:21,6532803 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr NAME NOT FOUND Length: 144
9:08:21,6533540 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\erfgber\efgehv.rkr NAME NOT FOUND Length: 144
9:08:21,6534211 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\erfgber\efgehv.rkr NAME NOT FOUND Length: 144
9:08:21,6534926 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp NAME NOT FOUND Length: 144
9:08:21,6535594 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp NAME NOT FOUND Length: 144
9:08:21,6536323 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp NAME NOT FOUND Length: 144
9:08:21,6536990 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp NAME NOT FOUND Length: 144
9:08:21,6537717 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr NAME NOT FOUND Length: 144
9:08:21,6538384 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr NAME NOT FOUND Length: 144
9:08:21,6539108 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp NAME NOT FOUND Length: 144
9:08:21,6539770 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp NAME NOT FOUND Length: 144
9:08:21,6540485 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp NAME NOT FOUND Length: 144
9:08:21,6541153 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp NAME NOT FOUND Length: 144
9:08:21,6541865 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp NAME NOT FOUND Length: 144
9:08:21,6542530 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp NAME NOT FOUND Length: 144
9:08:21,6543226 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp NAME NOT FOUND Length: 144
9:08:21,6543888 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp NAME NOT FOUND Length: 144
9:08:21,6544606 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\serrpryy.rkr NAME NOT FOUND Length: 144
9:08:21,6545274 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\serrpryy.rkr NAME NOT FOUND Length: 144
9:08:21,6546039 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfurnegf.rkr NAME NOT FOUND Length: 144
9:08:21,6546735 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfurnegf.rkr NAME NOT FOUND Length: 144
9:08:21,6547603 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\opxtmz.rkr NAME NOT FOUND Length: 144
9:08:21,6548302 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\opxtmz.rkr NAME NOT FOUND Length: 144
9:08:21,6549193 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\puxemz.rkr NAME NOT FOUND Length: 144
9:08:21,6549878 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\puxemz.rkr NAME NOT FOUND Length: 144
9:08:21,6550615 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\uegmmz.rkr NAME NOT FOUND Length: 144
9:08:21,6551311 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\uegmmz.rkr NAME NOT FOUND Length: 144
9:08:21,6552051 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\Eifrmz.rkr NAME NOT FOUND Length: 144
9:08:21,6552733 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\Eifrmz.rkr NAME NOT FOUND Length: 144
9:08:21,6553470 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\fuiymz.rkr NAME NOT FOUND Length: 144
9:08:21,6554143 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\ZFA Tnzvat Mbar\Jvaqbjf\fuiymz.rkr NAME NOT FOUND Length: 144
9:08:21,6554931 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jvazvar.rkr NAME NOT FOUND Length: 144
9:08:21,6555616 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jvazvar.rkr NAME NOT FOUND Length: 144
9:08:21,6556322 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Cvaonyy\CVAONYY.RKR NAME NOT FOUND Length: 144
9:08:21,6557141 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Cvaonyy\CVAONYY.RKR NAME NOT FOUND Length: 144
9:08:21,6557862 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\fby.rkr NAME NOT FOUND Length: 144
9:08:21,6560359 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\fby.rkr NAME NOT FOUND Length: 144
9:08:21,6561080 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\fcvqre.rkr NAME NOT FOUND Length: 144
9:08:21,6561751 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\fcvqre.rkr NAME NOT FOUND Length: 144
9:08:21,6562477 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\NSCIvrje\sgqjvaij.rkr NAME NOT FOUND Length: 144
9:08:21,6563159 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\NSCIvrje\sgqjvaij.rkr NAME NOT FOUND Length: 144
9:08:21,6563896 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjogs.rkr NAME NOT FOUND Length: 144
9:08:21,6564575 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjogs.rkr NAME NOT FOUND Length: 144
9:08:21,6565318 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pnhcqg.rkr NAME NOT FOUND Length: 144
9:08:21,6565994 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pnhcqg.rkr NAME NOT FOUND Length: 144
9:08:21,6566762 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjohaani.rkr NAME NOT FOUND Length: 144
9:08:21,6567441 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjohaani.rkr NAME NOT FOUND Length: 144
9:08:21,6568165 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjobcnbp.rkr NAME NOT FOUND Length: 144
9:08:21,6568846 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjobcnbp.rkr NAME NOT FOUND Length: 144
9:08:21,6569584 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjovajj.rkr NAME NOT FOUND Length: 144
9:08:21,6570263 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjovajj.rkr NAME NOT FOUND Length: 144
9:08:21,6571023 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfzp2io.rkr NAME NOT FOUND Length: 144
9:08:21,6571875 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfzp2io.rkr NAME NOT FOUND Length: 144
9:08:21,6572604 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfpzrah.rkr NAME NOT FOUND Length: 144
9:08:21,6573283 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfpzrah.rkr NAME NOT FOUND Length: 144
9:08:21,6573992 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfong.rkr NAME NOT FOUND Length: 144
9:08:21,6574674 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfong.rkr NAME NOT FOUND Length: 144
9:08:21,6575378 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfsr.rkr NAME NOT FOUND Length: 144
9:08:21,6576054 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\cpfsr.rkr NAME NOT FOUND Length: 144
9:08:21,6576786 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\gepthv.rkr NAME NOT FOUND Length: 144
9:08:21,6577465 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Rzhyngbe\gepthv.rkr NAME NOT FOUND Length: 144
9:08:21,6578188 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Gbbyxvg\Ova\pjohwoyq.rkr NAME NOT FOUND Length: 144
9:08:21,6578867 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Gbbyxvg\Ova\pjohwoyq.rkr NAME NOT FOUND Length: 144
9:08:21,6579602 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Gbbyxvg\Ova\pjohwpai.rkr NAME NOT FOUND Length: 144
9:08:21,6580314 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\Gbbyxvg\Ova\pjohwpai.rkr NAME NOT FOUND Length: 144
9:08:21,6581052 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjopxire.rkr NAME NOT FOUND Length: 144
9:08:21,6581725 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjopxire.rkr NAME NOT FOUND Length: 144
9:08:21,6582457 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjofiq.rkr NAME NOT FOUND Length: 144
9:08:21,6583133 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\VOZ\Pyvrag Npprff\pjofiq.rkr NAME NOT FOUND Length: 144
9:08:21,6583857 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\RKPRY.RKR SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 07 00 00 00 C0 C4 B4 C3 3A 93 C9 01
9:08:21,6584575 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\RKPRY.RKR SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 07 00 00 00 C0 C4 B4 C3 3A 93 C9 01
9:08:21,6585399 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\CBJRECAG.RKR NAME NOT FOUND Length: 144
9:08:21,6586086 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\CBJRECAG.RKR NAME NOT FOUND Length: 144
9:08:21,6587969 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\JVAJBEQ.RKR SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 A0 AE 0E 80 37 93 C9 01
9:08:21,6588592 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\JVAJBEQ.RKR SUCCESS Type: REG_BINARY, Length: 16, Data: 02 00 00 00 16 00 00 00 A0 AE 0E 80 37 93 C9 01
9:08:21,6589329 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:
']tNIa-}s(MKsrNE6.wvBssvprQvtvgnyFSvyrf>q'lLU-!$WNf]ap!%7QL1 NAME NOT FOUND Length: 144
9:08:21,6589983 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:
']tNIa-}s(MKsrNE6.wvBssvprQvtvgnyFSvyrf>q'lLU-!$WNf]ap!%7QL1 NAME NOT FOUND Length: 144
9:08:21,6591835 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\ZFGBER.RKR NAME NOT FOUND Length: 144
9:08:21,6592525 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\ZFGBER.RKR NAME NOT FOUND Length: 144
9:08:21,6593350 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:
']tNIa-}s(MKsrNE6.wvFrgYnathntrSvyrf>YBS0V8R(u9OJ,8JFQ58_ NAME NOT FOUND Length: 144
9:08:21,6594000 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:
']tNIa-}s(MKsrNE6.wvFrgYnathntrSvyrf>YBS0V8R(u9OJ,8JFQ58_ NAME NOT FOUND Length: 144
9:08:21,6625166 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\CEBSYJVM.RKR NAME NOT FOUND Length: 144
9:08:21,6625996 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\CEBSYJVM.RKR NAME NOT FOUND Length: 144
9:08:21,6626982 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\QJ\QJ20.RKR NAME NOT FOUND Length: 144
9:08:21,6627720 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\QJ\QJ20.RKR NAME NOT FOUND Length: 144
9:08:21,6628658 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZBQV\11.0\ZFCIVRJ.RKR NAME NOT FOUND Length: 144
9:08:21,6629390 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZBQV\11.0\ZFCIVRJ.RKR NAME NOT FOUND Length: 144
9:08:21,6630220 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:
']tNIa-}s(MKsrNE6.wvQbphzragVzntvatHgvyf>Z5e(Qy.GB?{k&&C=P+8Y NAME NOT FOUND Length: 144
9:08:21,6630877 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:
']tNIa-}s(MKsrNE6.wvQbphzragVzntvatHgvyf>Z5e(Qy.GB?{k&&C=P+8Y NAME NOT FOUND Length: 144
9:08:21,6631659 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\BVF.RKR NAME NOT FOUND Length: 144
9:08:21,6632357 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Zvpebfbsg Bssvpr\BSSVPR11\BVF.RKR NAME NOT FOUND Length: 144
9:08:21,6633173 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Flznagrp NagvIvehf\ICP32.rkr NAME NOT FOUND Length: 144
9:08:21,6633855 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Flznagrp NagvIvehf\ICP32.rkr NAME NOT FOUND Length: 144
9:08:21,6634575 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Qhqr\qhqr.rkr NAME NOT FOUND Length: 144
9:08:21,6635260 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Qhqr\qhqr.rkr NAME NOT FOUND Length: 144
9:08:21,6636006 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jverfunex\jverfunex.rkr NAME NOT FOUND Length: 144
9:08:21,6636780 Explorer.EXE 1760 RegQueryValue HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACNGU:P:\Cebtenz Svyrf\Jverfunex\jverfunex.rkr NAME NOT FOUND Length: 144


Thanks in avance



ORIGINAL: VBScab

Yeh...have a little think about how much time we both might have saved if you'd said that in your original post.

Anyway, did you see my signature? Have you run a file/registry/process monitor as the application starts up? I already know the answer, so do that now and report back.



Added quote tag for log output pasted into post -Bob

Holy cow...

- One, please use the [CODE} tage when posting lengthy text. Doing as you have makes it too hard to read. The CODE tag can be automatically added by clicking the button marked '<%'. You can add the tags now by editing your post and typing a left square bracket '[' followed by the word 'CODE' then a right square bracket ']'. At the end of your text, do '[', then a forward slash '/', the word 'CODE, then ']'. If you know even basic HTML, you'll figure out the format/syntax.

- You need to learn what to exclude (I hope your packages don't include some of this junk!). The first thing I picked up which will SERIOUSLY reduce ProcMon's output is 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\'. Set a filter on that path and edit it so that it's set to 'begins with' rather than 'is'. Another candidate would be 'HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\'.

Set filters on the irrelevant stuff, then re-post with a more sensible log, using the CODE tags.