....1 13:10:52 (0) ** LOG file "C:\USERS\KAMYK\APPDATA\LOCAL\TEMP\WMIDIAG-V2.2_WIN8.1_.CLI.RTM.64_LENOVO-PC_2016.08.19_13.10.36.LOG" created. ....2 13:10:52 (0) ** CSV file "C:\USERS\KAMYK\APPDATA\LOCAL\TEMP\WMIDIAG-V2.2_WIN8.1_.CLI.RTM.64_LENOVO-PC_2016.08.19_13.10.36-STATISTICS.CSV" created. ....3 13:10:52 (0) ** TXT file "C:\USERS\KAMYK\APPDATA\LOCAL\TEMP\WMIDIAG-V2.2_WIN8.1_.CLI.RTM.64_LENOVO-PC_2016.08.19_13.10.36-REPORT.TXT" created. ....4 13:10:52 (0) ** WMIDiag v2.2 started on 19 sierpnia 2016 at 13:10. ....5 13:10:52 (0) ** ....6 13:10:52 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - July 2007. ....7 13:10:52 (0) ** ....8 13:10:52 (0) ** This script is not supported under any Microsoft standard support program or service. ....9 13:10:52 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all ...10 13:10:52 (0) ** implied warranties including, without limitation, any implied warranties of merchantability ...11 13:10:52 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance ...12 13:10:52 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors, ...13 13:10:52 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for ...14 13:10:52 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits, ...15 13:10:52 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of ...16 13:10:52 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised ...17 13:10:52 (0) ** of the possibility of such damages. ...18 13:10:52 (0) ** ...19 13:10:52 (3) NOECHO=Prawda ...20 13:10:52 (3) SILENT=Fa³sz ...21 13:10:52 (3) SMS=Fa³sz ...22 13:10:52 (3) FORCE=Fa³sz ...23 13:10:52 (3) NOWINZIP=Fa³sz ...24 13:10:52 (3) DEBUG=Fa³sz ...25 13:10:52 (3) STATISTICS=Fa³sz ...26 13:10:52 (3) RUNONCE=Fa³sz ...27 13:10:52 (3) DEPTH LEVEL=1 ...28 13:10:52 (3) LOGGINGLEVEL=0 ...29 13:10:52 (3) EVENTLOG=Fa³sz ...30 13:10:52 (3) EVENTLOGERRORS=Fa³sz ...31 13:10:52 (3) LOGWMISTATE=Fa³sz ...32 13:10:52 (3) ERRORPOPUP=Fa³sz ...33 13:10:52 (3) REQUESTALLINSTANCES=1 ...34 13:10:52 (3) WRITEINREPOSITORY=Fa³sz ...35 13:10:52 (3) CHECKCONSISTENCY=Fa³sz ...36 13:10:52 (3) SHOWMOFERRORS=Fa³sz ...37 13:10:52 (3) SHOWHIGHPRIVPROVIDERS=Fa³sz ...38 13:10:52 (3) CORRELATECLASSANDPROVIDER=Fa³sz ...39 13:10:52 (3) STRICT=Fa³sz ...40 13:10:52 (3) OLDESTLOGHISTORY=0 ...41 13:10:52 (3) OLDESTEVENTLOGHISTORY=20 ...42 13:10:52 (3) BASENAMESPACE=Root ...43 13:10:52 (0) ** Verifying last run of WMIDiag. ...44 13:10:52 (4) Reading registry (REG_SZ) 'HKLM\Software\Microsoft\WMIDiag\LastRun'. ...45 13:10:52 (1) !! ERROR: (WriteRegistry) : 0x80070005 - Nieprawid³owy poziom g³ówny w kluczu rejestru "HKLM\Software\Microsoft\WMIDiag\LastRun". ...46 13:10:52 (0) ** Logging Run-time environment information. ...47 13:10:52 (3) StartMenu=C:\USERS\KAMYK\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\ ...48 13:10:52 (3) Desktop=C:\USERS\KAMYK\DESKTOP\ ...49 13:10:52 (3) Programs=C:\USERS\KAMYK\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\ ...50 13:10:52 (3) SystemDrive=C:\ ...51 13:10:52 (3) SystemRoot=C:\WINDOWS\ ...52 13:10:52 (3) Path=C:\PROGRAM FILES (X86)\INTEL\TXE COMPONENTS\TCS\;C:\PROGRAM FILES\INTEL\TXE COMPONENTS\TCS\;C:\WINDOWS\SYSTEM32;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM;C:\WINDOWS\SYSTEM32\WINDOWSPOWERSHELL\V1.0\;C:\PROGRAM FILES (X86)\SKYPE\PHONE\\ ...53 13:10:52 (3) UserTemp=C:\USERS\KAMYK\APPDATA\LOCAL\TEMP\ ...54 13:10:52 (3) SystemTemp=C:\WINDOWS\TEMP\ ...55 13:10:52 (3) System32=C:\WINDOWS\SYSTEM32\ ...56 13:10:52 (3) System=C:\WINDOWS\SYSTEM\ ...57 13:10:52 (3) Wbem=C:\WINDOWS\SYSTEM32\WBEM\ ...58 13:10:52 (3) WbemLogs=C:\WINDOWS\SYSTEM32\WBEM\LOGS\ ...59 13:10:52 (3) CurrentDirectory=C:\WMI ...60 13:10:52 (3) AllUsersStartMenu=C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\ ...61 13:10:52 (3) AllUsersDesktop=C:\USERS\PUBLIC\DESKTOP\ ...62 13:10:52 (3) AllUsersPrograms=C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\ ...63 13:10:52 (3) ScriptName=WMIDIAG.VBS ...64 13:10:52 (3) ScriptFullName=C:\WMI\WMIDIAG.VBS ...65 13:10:52 (3) ScriptingName=WINDOWS SCRIPT HOST ...66 13:10:52 (3) EngineFullName=C:\WINDOWS\SYSTEM32\WSCRIPT.EXE ...67 13:10:52 (3) CommandLine=C:\WMI\WMIDIAG.VBS ...68 13:10:52 (3) EnginePath=C:\WINDOWS\SYSTEM32 ...69 13:10:52 (3) EngineVersion=5.8 ...70 13:10:52 (3) DomainName=LENOVO-PC ...71 13:10:52 (3) UserName=KAMYK ...72 13:10:52 (3) UserDNSDomain= ...73 13:10:52 (3) LogonServerName=LENOVO-PC ...74 13:10:52 (3) LocalComputerName=LENOVO-PC ...75 13:10:52 (3) ProductName=Windows 8.1 Connected ...76 13:10:52 (3) Locale=00000415 ...77 13:10:52 (3) IsServerOS=Fa³sz ...78 13:10:52 (3) Is64=Prawda ...79 13:10:52 (3) IsWow64=Fa³sz ...80 13:10:52 (3) ProcessorArchitecture=64-bit ...81 13:10:52 (3) ProcessorIdentifier=Intel64 Family 6 Model 55 Stepping 8, GenuineIntel ...82 13:10:52 (3) NTVersion=6.3 ...83 13:10:52 (3) NTBuild=9600 ...84 13:10:52 (3) NTServicePack= ...85 13:10:52 (3) FullName=Windows 8.1 - No Service Pack - 64-bit ...86 13:10:52 (3) ShortName=WIN8.1_.CLI.RTM.64 ...87 13:10:52 (3) SMSAgent= ...88 13:10:52 (3) WinZIP= ...89 13:10:52 (0) ** Initializing WMI System Information. ...90 13:10:52 (0) ** Windows 8.1 - No Service Pack - 64-bit (WIN8.1_.CLI.RTM.64). ...91 13:10:52 (0) ** INFO: Windows Vista or newer - Clean installation detected (9600) ...92 13:10:53 (3) ...93 13:10:53 (3) 11 privilege(s): ...94 13:10:53 (3) PRIVILEGES INFORMATION ...95 13:10:53 (3) ---------------------- ...96 13:10:53 (3) Privilege Name Description State ...97 13:10:53 (3) ============================= ===================================== ======== ...98 13:10:53 (3) SeShutdownPrivilege Zamknij system Disabled ...99 13:10:53 (3) SeChangeNotifyPrivilege Obejd« sprawdzanie przy przechodzeniu Enabled ..100 13:10:53 (3) SeUndockPrivilege Usuä komputer ze stacji dokuj¥cej Disabled ..101 13:10:53 (3) SeIncreaseWorkingSetPrivilege Zwi©ksz zestaw roboczy procesu Disabled ..102 13:10:53 (3) SeTimeZonePrivilege Zmieä stref© czasow¥ Disabled ..103 13:10:53 (0) ** Verifying computer environment. ..104 13:10:53 (3) PATH = C:\PROGRAM FILES (X86)\INTEL\TXE COMPONENTS\TCS\;C:\PROGRAM FILES\INTEL\TXE COMPONENTS\TCS\;C:\WINDOWS\SYSTEM32;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM;C:\WINDOWS\SYSTEM32\WINDOWSPOWERSHELL\V1.0\;C:\PROGRAM FILES (X86)\SKYPE\PHONE\. ..105 13:10:53 (3) The SYSTEM32 folder IS in the PATH. ..106 13:10:53 (3) The WBEM folder IS in the PATH. ..107 13:10:53 (3) The PATH environment variable has a maximum length of 2047 characters. Current PATH length is 228 characters. ..108 13:10:53 (4) Reading registry (REG_DWORD) 'HKCU\Software\Microsoft\Windows Script Host\Settings\Timeout'. ..109 13:10:53 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Microsoft\Windows Script Host\Settings\Timeout'. ..110 13:10:53 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA'. ..111 13:10:53 (2) !! WARNING: User Account Control (UAC) is ENABLED. ..112 13:10:53 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\LocalAccountTokenFilterPolicy'. ..113 13:10:53 (2) !! WARNING: Local account token filtering policy is ENABLED. ..114 13:10:53 (0) ** Verifying Auto-Recovery MOF files presence. ..115 13:10:53 (0) ** Verifying MOF files in WBEM folder. ..116 13:10:54 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\APPBACKGROUNDTASK_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..117 13:10:57 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\DNSCLIENTPSPROVIDER_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..118 13:11:03 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\ISCSIREM.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..119 13:11:04 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\ISCSIWMIV2_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..120 13:11:06 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\MDMAPPPROV_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..121 13:11:06 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\MDMSETTINGSPROV_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..122 13:11:07 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\MISPACE_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..123 13:11:12 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\NDISTRACE.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..124 13:11:13 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\NETADAPTERCIMTRACEUNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..125 13:11:13 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\NETADAPTERCIM_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..126 13:11:13 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\NETDACIM_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..127 13:11:14 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\NETNCCIM_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..128 13:11:15 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\NETTCPIP_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..129 13:11:15 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\NETTTCIM_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..130 13:11:16 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\NLMCIM_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..131 13:11:19 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\PCSVDEVICE_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..132 13:11:21 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\POWERWMIPROVIDER_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..133 13:11:23 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\QOSWMITRC_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..134 13:11:23 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\QOSWMI_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..135 13:11:31 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI_PASSTHRU_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..136 13:11:31 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..137 13:11:34 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\VPNCLIENTPSPROVIDER_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..138 13:11:36 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WDACWMIPROV_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..139 13:11:36 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WDF01000UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..140 13:11:37 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WFASCIM_UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..141 13:11:38 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WIN32_ENCRYPTABLEVOLUMEUNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..142 13:11:40 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WINSATUNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..143 13:11:44 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WPCUNINST.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..144 13:11:46 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WSMAGENTUNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..145 13:11:47 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WUDFX02000UNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..146 13:11:47 (2) !! WARNING: 'C:\WINDOWS\SYSTEM32\WBEM\WUDFXUNINSTALL.MOF' does exist but it is NOT LISTED in the 'Autorecover MOFs' registry key. ..147 13:11:48 (1) !! ERROR: Unable to access or find file '' listed in 'Autorecover MOFs'. ..148 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\CIMWIN32.MOF'. ..149 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NCPROV.MOF'. ..150 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPCIMA.MOF'. ..151 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SECRCW32.MOF'. ..152 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SUBSCRPT.MOF'. ..153 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SYSTEM.MOF'. ..154 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\INTEROP.MOF'. ..155 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SCRCONS.MOF'. ..156 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SMTPCONS.MOF'. ..157 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCONS.MOF'. ..158 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMI.MOF'. ..159 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMI_TRACING.MOF'. ..160 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WIN32_PRINTER.MOF'. ..161 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\TCPIP.MOF'. ..162 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\QMGR.MOF'. ..163 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MMC.MOF'. ..164 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NCSI.MOF'. ..165 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NLASVC.MOF'. ..166 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\TSPKG.MOF'. ..167 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SSDPSRV.MOF'. ..168 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\HNETCFG.MOF'. ..169 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SERVICES.MOF'. ..170 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SCM.MOF'. ..171 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DRVINST.MOF'. ..172 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\UMPNPMGR.MOF'. ..173 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMP.MOF'. ..174 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MOUNTMGR.MOF'. ..175 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WFS.MOF'. ..176 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\CLI.MOF'. ..177 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\CLIEGALIASES.MOF'. ..178 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\KRNLPROV.MOF'. ..179 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMITIMEP.MOF'. ..180 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\REGEVENT.MOF'. ..181 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DSPROV.MOF'. ..182 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPIPRT.MOF'. ..183 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPJOBJ.MOF'. ..184 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NTEVT.MOF'. ..185 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSI.MOF'. ..186 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPICMP.MOF'. ..187 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPDFS.MOF'. ..188 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPDSKQ.MOF'. ..189 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPSESS.MOF'. ..190 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\RSOP.MOF'. ..191 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PPCRSOPCOMPSCHEMA.MOF'. ..192 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PPCRSOPUSERSCHEMA.MOF'. ..193 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PRINTFILTERPIPELINESVC.MOF'. ..194 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WGXINSTALLEDGAME.MOF'. ..195 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPCSPROV.MOF'. ..196 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPC.MOF'. ..197 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSTSCAX.MOF'. ..198 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSTSC.MOF'. ..199 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IRMON.MOF'. ..200 13:11:48 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETTTCIM.MOF'. ..201 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETDACIM.MOF'. ..202 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETNCCIM.MOF'. ..203 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\VSS.MOF'. ..204 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\VDS.MOF'. ..205 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WSCENTER.MOF'. ..206 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NEWDEV.MOF'. ..207 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\RESTARTMANAGER.MOF'. ..208 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPD_CI.MOF'. ..209 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WINSAT.MOF'. ..210 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NAPCLIENTPROV.MOF'. ..211 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NAPCLIENTSCHEMA.MOF'. ..212 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FUNDISC.MOF'. ..213 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WSDAPI.MOF'. ..214 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FDWSD.MOF'. ..215 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FDSSDP.MOF'. ..216 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\UMB.MOF'. ..217 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\UMBUS.MOF'. ..218 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\UMPASS.MOF'. ..219 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WIN32_TPM.MOF'. ..220 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SPPWMI.MOF'. ..221 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SCHANNEL.MOF'. ..222 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\RDPENCOM.MOF'. ..223 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\P2P-MESH.MOF'. ..224 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\P2P-PNRP.MOF'. ..225 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IPSECSVC.MOF'. ..226 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\POLSTORE.MOF'. ..227 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WINIPSEC.MOF'. ..228 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SCHEDSVC.MOF'. ..229 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\L2SECHC.MOF'. ..230 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NCI.MOF'. ..231 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SSTPSVC.MOF'. ..232 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WININIT.MOF'. ..233 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\CIMDMTF.MOF'. ..234 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\POWERMETERPROVIDER.MOF'. ..235 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PROFILEASSOCIATIONPROVIDER.MOF'. ..236 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETPROFM.MOF'. ..237 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NLMCIM.MOF'. ..238 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\LLTDIO.MOF'. ..239 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\RSPNDR.MOF'. ..240 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\LLTDSVC.MOF'. ..241 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETWORKITEMFACTORY.MOF'. ..242 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSV1_0.MOF'. ..243 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\KERBEROS.MOF'. ..244 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WDIGEST.MOF'. ..245 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\BCD.MOF'. ..246 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NTFS.MOF'. ..247 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SETUPAPI.MOF'. ..248 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DIMSJOB.MOF'. ..249 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WSMAUTO.MOF'. ..250 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WSMAGENT.MOF'. ..251 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\XWIZARDS.MOF'. ..252 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IPMIPRV.MOF'. ..253 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IPMIDTRC.MOF'. ..254 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IPMIPTRC.MOF'. ..255 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MICROSOFT-WINDOWS-REMOTE-FILESYSTEM.MOF'. ..256 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WHQLPROV.MOF'. ..257 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPERFCLASS.MOF'. ..258 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMIPERFINST.MOF'. ..259 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SCERSOP.MOF'. ..260 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WINLOGON.MOF'. ..261 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WDACETWPROV.MOF'. ..262 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\AUDITRSOP.MOF'. ..263 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SDBUS.MOF'. ..264 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\RACWMIPROV.MOF'. ..265 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSISCSI.MOF'. ..266 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\ISCSIHBA.MOF'. ..267 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\ISCSIDSC.MOF'. ..268 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\ISCSIPRF.MOF'. ..269 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\ISCSIWMIV2.MOF'. ..270 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\HBAAPI.MOF'. ..271 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DIMSROAM.MOF'. ..272 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\RDPCORE.MOF'. ..273 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IMAPIV2-BASE.MOF'. ..274 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IMAPIV2-FILESYSTEMSUPPORT.MOF'. ..275 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IMAPIV2-LEGACYSHIM.MOF'. ..276 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\USERSTATEWMIPROVIDER.MOF'. ..277 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FOLDERREDIRECTIONWMIPROVIDER.MOF'. ..278 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EAIMEAPI.MOF'. ..279 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FILETRACE.MOF'. ..280 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FDPHOST.MOF'. ..281 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FDWNET.MOF'. ..282 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FDRESPUB.MOF'. ..283 13:11:49 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PNPXASSOC.MOF'. ..284 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NSHIPSEC.MOF'. ..285 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORTRACE.MOF'. ..286 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SERVICEMODEL.MOF'. ..287 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SERVICEMODEL35.MOF'. ..288 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\IRDA.MOF'. ..289 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPDSP.MOF'. ..290 13:11:50 (3) Found 'C:\PROGRAM FILES\WINDOWS DEFENDER\PROTECTIONMANAGEMENT.MOF'. ..291 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SMBWITNESSWMIV2PROVIDER.MOF'. ..292 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPDSHEXT.MOF'. ..293 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPDSHSERVICEOBJ.MOF'. ..294 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\REFS.MOF'. ..295 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WLANHC.MOF'. ..296 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\BTHMTPENUM.MOF'. ..297 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSFEEDSBS.MOF'. ..298 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPDMTP.MOF'. ..299 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETTCPIP.MOF'. ..300 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MDMAPPPROV.MOF'. ..301 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PARTMGR.MOF'. ..302 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DSCCORECONFPROV.MOF'. ..303 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NPIVWMI.MOF'. ..304 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WUDFX.MOF'. ..305 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPCSYNC.MOF'. ..306 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETADAPTERCIM.MOF'. ..307 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETADAPTERCIMTRACE.MOF'. ..308 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PRINTMANAGEMENTPROVIDER.MOF'. ..309 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WDF01000.MOF'. ..310 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SCHEDPROV.MOF'. ..311 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICEWIACOMPAT.MOF'. ..312 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FWCFG.MOF'. ..313 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\AUTHFWCFG.MOF'. ..314 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WFP.MOF'. ..315 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPDCOMP.MOF'. ..316 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSFEEDS.MOF'. ..317 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETEVENTPACKETCAPTURE.MOF'. ..318 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PCSVDEVICE.MOF'. ..319 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSNETIMPLATFORM.MOF'. ..320 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETSWITCHTEAM.MOF'. ..321 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WIN32_ENCRYPTABLEVOLUME.MOF'. ..322 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPDBUSENUM.MOF'. ..323 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPDFS.MOF'. ..324 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WLAN.MOF'. ..325 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\USERPROFILEWMIPROVIDER.MOF'. ..326 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\USERPROFILECONFIGURATIONWMIPROVIDER.MOF'. ..327 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\APPBACKGROUNDTASK.MOF'. ..328 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\LSASRV.MOF'. ..329 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SMBWMIV2.MOF'. ..330 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WFASCIM.MOF'. ..331 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\TSMF.MOF'. ..332 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NLSVC.MOF'. ..333 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SAMSRV.MOF'. ..334 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WDACWMIPROV.MOF'. ..335 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DSCCORE.MOF'. ..336 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MISPACE.MOF'. ..337 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MPSSVC.MOF'. ..338 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MPSDRV.MOF'. ..339 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\FIREWALLAPI.MOF'. ..340 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WFAPIGP.MOF'. ..341 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSDTCWMI.MOF'. ..342 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WUDFX02000.MOF'. ..343 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WMPNETWK.MOF'. ..344 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICEAPI.MOF'. ..345 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICETYPES.MOF'. ..346 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICECLASSEXTENSION.MOF'. ..347 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICECONNECTAPI.MOF'. ..348 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DNSCLIENTPSPROVIDER.MOF'. ..349 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WCNCSVC.MOF'. ..350 13:11:50 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI.MOF'. ..351 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI_PASSTHRU.MOF'. ..352 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'. ..353 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MDMSETTINGSPROV.MOF'. ..354 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICEWMDRM.MOF'. ..355 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\POWERWMIPROVIDER.MOF'. ..356 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PS_MMAGENT.MOF'. ..357 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MSWMDM.MOF'. ..358 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\PSMODULEDISCOVERYPROVIDER.MOF'. ..359 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\VPNCLIENTPSPROVIDER.MOF'. ..360 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\QOSWMI.MOF'. ..361 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\QOSWMITRC.MOF'. ..362 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DNSCLIENTCIM.MOF'. ..363 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\CIMWIN32.MFL'. ..364 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPCIMA.MFL'. ..365 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SECRCW32.MFL'. ..366 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SUBSCRPT.MFL'. ..367 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NCPROV.MFL'. ..368 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SYSTEM.MFL'. ..369 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\INTEROP.MFL'. ..370 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SCRCONS.MFL'. ..371 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SMTPCONS.MFL'. ..372 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WBEMCONS.MFL'. ..373 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMI.MFL'. ..374 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WIN32_PRINTER.MFL'. ..375 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WFS.MFL'. ..376 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\CLI.MFL'. ..377 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\CLIEGALIASES.MFL'. ..378 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\KRNLPROV.MFL'. ..379 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMITIMEP.MFL'. ..380 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\REGEVENT.MFL'. ..381 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DSPROV.MFL'. ..382 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPIPRT.MFL'. ..383 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPJOBJ.MFL'. ..384 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NTEVT.MFL'. ..385 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSI.MFL'. ..386 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPICMP.MFL'. ..387 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPDFS.MFL'. ..388 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPDSKQ.MFL'. ..389 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPSESS.MFL'. ..390 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RSOP.MFL'. ..391 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WGXINSTALLEDGAME.MFL'. ..392 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSTSCAX.MFL'. ..393 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSTSC.MFL'. ..394 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\IRMON.MFL'. ..395 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETTTCIM.MFL'. ..396 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETDACIM.MFL'. ..397 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETNCCIM.MFL'. ..398 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\VSS.MFL'. ..399 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\VDS.MFL'. ..400 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WSCENTER.MFL'. ..401 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\IPMIPRV.MFL'. ..402 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\ISCSIPRF.MFL'. ..403 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\ISCSIDSC.MFL'. ..404 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\ISCSIWMIV2.MFL'. ..405 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WHQLPROV.MFL'. ..406 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\EN-US\PSMODULEDISCOVERYPROVIDER.MFL'. ..407 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSDTCWMI.MFL'. ..408 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WDACWMIPROV.MFL'. ..409 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETEVENTPACKETCAPTURE.MFL'. ..410 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WININIT.MFL'. ..411 13:11:51 (3) Found 'C:\PROGRAM FILES\WINDOWS DEFENDER\EN-US\PROTECTIONMANAGEMENT.MFL'. ..412 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMPNETWK.MFL'. ..413 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\PRINTMANAGEMENTPROVIDER.MFL'. ..414 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WFASCIM.MFL'. ..415 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SCHEDPROV.MFL'. ..416 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SMBWITNESSWMIV2PROVIDER.MFL'. ..417 13:11:51 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NLMCIM.MFL'. ..418 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\XWIZARDS.MFL'. ..419 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DNSCLIENTPSPROVIDER.MFL'. ..420 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RACWMIPROV.MFL'. ..421 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SPPWMI.MFL'. ..422 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\EN-US\RESTARTMANAGER.MFL'. ..423 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\L2GPSTORE.MFL'. ..424 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\VPNCLIENTPSPROVIDER.MFL'. ..425 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WINLOGON.MFL'. ..426 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NPIVWMI.MFL'. ..427 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WUDFX.MFL'. ..428 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\HBAAPI.MFL'. ..429 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RDPENCOM.MFL'. ..430 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WCNCSVC.MFL'. ..431 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MISPACE.MFL'. ..432 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\PS_MMAGENT.MFL'. ..433 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSNETIMPLATFORM.MFL'. ..434 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETSWITCHTEAM.MFL'. ..435 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETADAPTERCIM.MFL'. ..436 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETADAPTERCIMTRACE.MFL'. ..437 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\FOLDERREDIRECTIONWMIPROVIDER.MFL'. ..438 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\USERSTATEWMIPROVIDER.MFL'. ..439 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\PCSVDEVICE.MFL'. ..440 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETTCPIP.MFL'. ..441 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SMBWMIV2.MFL'. ..442 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SR.MFL'. ..443 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSFEEDSBS.MFL'. ..444 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\POWERWMIPROVIDER.MFL'. ..445 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MDMSETTINGSPROV.MFL'. ..446 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RDPCORE.MFL'. ..447 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\QOSWMI.MFL'. ..448 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\QOSWMITRC.MFL'. ..449 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WUDFX02000.MFL'. ..450 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\USERPROFILEWMIPROVIDER.MFL'. ..451 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\USERPROFILECONFIGURATIONWMIPROVIDER.MFL'. ..452 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\APPBACKGROUNDTASK.MFL'. ..453 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSFEEDS.MFL'. ..454 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DSCCORECONFPROV.MFL'. ..455 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MDMAPPPROV.MFL'. ..456 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\FILETRACE.MFL'. ..457 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI.MFL'. ..458 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI_PASSTHRU.MFL'. ..459 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DSCCORE.MFL'. ..460 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\CIMDMTF.MFL'. ..461 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\POWERMETERPROVIDER.MFL'. ..462 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\PROFILEASSOCIATIONPROVIDER.MFL'. ..463 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\CIMWIN32.MFL'. ..464 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPCIMA.MFL'. ..465 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SECRCW32.MFL'. ..466 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SUBSCRPT.MFL'. ..467 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NCPROV.MFL'. ..468 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SYSTEM.MFL'. ..469 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\INTEROP.MFL'. ..470 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SCRCONS.MFL'. ..471 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SMTPCONS.MFL'. ..472 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WBEMCONS.MFL'. ..473 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMI.MFL'. ..474 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WIN32_PRINTER.MFL'. ..475 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WFS.MFL'. ..476 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\CLI.MFL'. ..477 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\CLIEGALIASES.MFL'. ..478 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\KRNLPROV.MFL'. ..479 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMITIMEP.MFL'. ..480 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\REGEVENT.MFL'. ..481 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DSPROV.MFL'. ..482 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPIPRT.MFL'. ..483 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPJOBJ.MFL'. ..484 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NTEVT.MFL'. ..485 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSI.MFL'. ..486 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPICMP.MFL'. ..487 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPDFS.MFL'. ..488 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPDSKQ.MFL'. ..489 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMIPSESS.MFL'. ..490 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RSOP.MFL'. ..491 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WGXINSTALLEDGAME.MFL'. ..492 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSTSCAX.MFL'. ..493 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSTSC.MFL'. ..494 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\IRMON.MFL'. ..495 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETTTCIM.MFL'. ..496 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETDACIM.MFL'. ..497 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETNCCIM.MFL'. ..498 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\VSS.MFL'. ..499 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\VDS.MFL'. ..500 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WSCENTER.MFL'. ..501 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\IPMIPRV.MFL'. ..502 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\ISCSIPRF.MFL'. ..503 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\ISCSIDSC.MFL'. ..504 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\ISCSIWMIV2.MFL'. ..505 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WHQLPROV.MFL'. ..506 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\EN-US\PSMODULEDISCOVERYPROVIDER.MFL'. ..507 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSDTCWMI.MFL'. ..508 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WDACWMIPROV.MFL'. ..509 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETEVENTPACKETCAPTURE.MFL'. ..510 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WININIT.MFL'. ..511 13:11:52 (3) Found 'C:\PROGRAM FILES\WINDOWS DEFENDER\EN-US\PROTECTIONMANAGEMENT.MFL'. ..512 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WMPNETWK.MFL'. ..513 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\PRINTMANAGEMENTPROVIDER.MFL'. ..514 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WFASCIM.MFL'. ..515 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SCHEDPROV.MFL'. ..516 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SMBWITNESSWMIV2PROVIDER.MFL'. ..517 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NLMCIM.MFL'. ..518 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\XWIZARDS.MFL'. ..519 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DNSCLIENTPSPROVIDER.MFL'. ..520 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RACWMIPROV.MFL'. ..521 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SPPWMI.MFL'. ..522 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\EN-US\RESTARTMANAGER.MFL'. ..523 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\L2GPSTORE.MFL'. ..524 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\VPNCLIENTPSPROVIDER.MFL'. ..525 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WINLOGON.MFL'. ..526 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NPIVWMI.MFL'. ..527 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WUDFX.MFL'. ..528 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\HBAAPI.MFL'. ..529 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RDPENCOM.MFL'. ..530 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WCNCSVC.MFL'. ..531 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MISPACE.MFL'. ..532 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\PS_MMAGENT.MFL'. ..533 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSNETIMPLATFORM.MFL'. ..534 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETSWITCHTEAM.MFL'. ..535 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETADAPTERCIM.MFL'. ..536 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETADAPTERCIMTRACE.MFL'. ..537 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\FOLDERREDIRECTIONWMIPROVIDER.MFL'. ..538 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\USERSTATEWMIPROVIDER.MFL'. ..539 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\PCSVDEVICE.MFL'. ..540 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETTCPIP.MFL'. ..541 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SMBWMIV2.MFL'. ..542 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SR.MFL'. ..543 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSFEEDSBS.MFL'. ..544 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\POWERWMIPROVIDER.MFL'. ..545 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MDMSETTINGSPROV.MFL'. ..546 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RDPCORE.MFL'. ..547 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\QOSWMI.MFL'. ..548 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\QOSWMITRC.MFL'. ..549 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WUDFX02000.MFL'. ..550 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\USERPROFILEWMIPROVIDER.MFL'. ..551 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\USERPROFILECONFIGURATIONWMIPROVIDER.MFL'. ..552 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\APPBACKGROUNDTASK.MFL'. ..553 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSFEEDS.MFL'. ..554 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DSCCORECONFPROV.MFL'. ..555 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MDMAPPPROV.MFL'. ..556 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\FILETRACE.MFL'. ..557 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI.MFL'. ..558 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI_PASSTHRU.MFL'. ..559 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DSCCORE.MFL'. ..560 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\CIMDMTF.MFL'. ..561 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\POWERMETERPROVIDER.MFL'. ..562 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\PROFILEASSOCIATIONPROVIDER.MFL'. ..563 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\RDPENDP.MOF'. ..564 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MBLCTR.MOF'. ..565 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SENSORSCPL.MOF'. ..566 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\SENSORSCLASSEXTENSION.MOF'. ..567 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MDMAPPPROV.MFL'. ..568 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MDMSETTINGSPROV.MFL'. ..569 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI.MFL'. ..570 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI_PASSTHRU.MFL'. ..571 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MISPACE.MOF'. ..572 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MDMAPPPROV.MOF'. ..573 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MDMSETTINGSPROV.MOF'. ..574 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI.MOF'. ..575 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI_PASSTHRU.MOF'. ..576 13:11:52 (3) Found 'C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.0.50727\CLR.MOF'. ..577 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\WPCSYNC.MOF'. ..578 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\CIMWIN32.MFL'. ..579 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMIPCIMA.MFL'. ..580 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SECRCW32.MFL'. ..581 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SUBSCRPT.MFL'. ..582 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NCPROV.MFL'. ..583 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SYSTEM.MFL'. ..584 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\INTEROP.MFL'. ..585 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SCRCONS.MFL'. ..586 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SMTPCONS.MFL'. ..587 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WBEMCONS.MFL'. ..588 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMI.MFL'. ..589 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WIN32_PRINTER.MFL'. ..590 13:11:52 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WFS.MFL'. ..591 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\CLI.MFL'. ..592 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\CLIEGALIASES.MFL'. ..593 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\KRNLPROV.MFL'. ..594 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMITIMEP.MFL'. ..595 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\REGEVENT.MFL'. ..596 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\DSPROV.MFL'. ..597 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMIPIPRT.MFL'. ..598 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMIPJOBJ.MFL'. ..599 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NTEVT.MFL'. ..600 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSI.MFL'. ..601 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMIPICMP.MFL'. ..602 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMIPDFS.MFL'. ..603 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMIPDSKQ.MFL'. ..604 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMIPSESS.MFL'. ..605 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\RSOP.MFL'. ..606 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WGXINSTALLEDGAME.MFL'. ..607 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSTSCAX.MFL'. ..608 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSTSC.MFL'. ..609 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\IRMON.MFL'. ..610 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETTTCIM.MFL'. ..611 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETDACIM.MFL'. ..612 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETNCCIM.MFL'. ..613 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\VSS.MFL'. ..614 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\VDS.MFL'. ..615 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WSCENTER.MFL'. ..616 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\IPMIPRV.MFL'. ..617 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\ISCSIPRF.MFL'. ..618 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\ISCSIDSC.MFL'. ..619 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\ISCSIWMIV2.MFL'. ..620 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WHQLPROV.MFL'. ..621 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WFASCIM.MFL'. ..622 13:11:53 (3) Found 'C:\PROGRAM FILES\WINDOWS DEFENDER\PL-PL\PROTECTIONMANAGEMENT.MFL'. ..623 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WDACWMIPROV.MFL'. ..624 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\PL-PL\PSMODULEDISCOVERYPROVIDER.MFL'. ..625 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSDTCWMI.MFL'. ..626 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SMBWITNESSWMIV2PROVIDER.MFL'. ..627 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETEVENTPACKETCAPTURE.MFL'. ..628 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WININIT.MFL'. ..629 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WMPNETWK.MFL'. ..630 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\PRINTMANAGEMENTPROVIDER.MFL'. ..631 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SCHEDPROV.MFL'. ..632 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NLMCIM.MFL'. ..633 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\XWIZARDS.MFL'. ..634 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\RACWMIPROV.MFL'. ..635 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\PL-PL\RESTARTMANAGER.MFL'. ..636 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\L2GPSTORE.MFL'. ..637 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WINLOGON.MFL'. ..638 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WCNCSVC.MFL'. ..639 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\PS_MMAGENT.MFL'. ..640 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSNETIMPLATFORM.MFL'. ..641 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETSWITCHTEAM.MFL'. ..642 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETADAPTERCIM.MFL'. ..643 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETADAPTERCIMTRACE.MFL'. ..644 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\FOLDERREDIRECTIONWMIPROVIDER.MFL'. ..645 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\USERSTATEWMIPROVIDER.MFL'. ..646 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\PCSVDEVICE.MFL'. ..647 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SMBWMIV2.MFL'. ..648 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SR.MFL'. ..649 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MDMSETTINGSPROV.MFL'. ..650 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\RDPCORE.MFL'. ..651 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WUDFX02000.MFL'. ..652 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDS.MFL'. ..653 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\DSCCORECONFPROV.MFL'. ..654 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MDMAPPPROV.MFL'. ..655 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\FILETRACE.MFL'. ..656 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\CIMDMTF.MFL'. ..657 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\POWERMETERPROVIDER.MFL'. ..658 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\PROFILEASSOCIATIONPROVIDER.MFL'. ..659 13:11:53 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\DSCCORE.MFL'. ..660 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\STORAGEWMI.MFL'. ..661 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\STORAGEWMI_PASSTHRU.MFL'. ..662 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\APPBACKGROUNDTASK.MFL'. ..663 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\USERPROFILEWMIPROVIDER.MFL'. ..664 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\USERPROFILECONFIGURATIONWMIPROVIDER.MFL'. ..665 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\QOSWMI.MFL'. ..666 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\QOSWMITRC.MFL'. ..667 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\POWERWMIPROVIDER.MFL'. ..668 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDSBS.MFL'. ..669 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETTCPIP.MFL'. ..670 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MISPACE.MFL'. ..671 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\RDPENCOM.MFL'. ..672 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\DNSCLIENTPSPROVIDER.MFL'. ..673 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\HBAAPI.MFL'. ..674 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WUDFX.MFL'. ..675 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NPIVWMI.MFL'. ..676 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\VPNCLIENTPSPROVIDER.MFL'. ..677 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SPPWMI.MFL'. ..678 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MDMSETTINGSPROV.MFL'. ..679 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\STORAGEWMI.MFL'. ..680 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\STORAGEWMI_PASSTHRU.MFL'. ..681 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MDMAPPPROV.MFL'. ..682 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MDMAPPPROV.MOF'. ..683 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\STORAGEWMI.MFL'. ..684 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\STORAGEWMI_PASSTHRU.MFL'. ..685 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI.MFL'. ..686 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI_PASSTHRU.MFL'. ..687 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI.MOF'. ..688 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI_PASSTHRU.MOF'. ..689 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..690 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DSCCORECONFPROV.MFL'. ..691 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\DSCCORE.MFL'. ..692 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI.MFL'. ..693 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\STORAGEWMI_PASSTHRU.MFL'. ..694 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\DSCCORECONFPROV.MFL'. ..695 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\DSCCORE.MFL'. ..696 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\STORAGEWMI.MFL'. ..697 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\STORAGEWMI_PASSTHRU.MFL'. ..698 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\AEINV.MOF'. ..699 13:11:54 (3) Found 'C:\PROGRAM FILES\WINDOWS DEFENDER\PROTECTIONMANAGEMENT.MOF'. ..700 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DSCCORE.MOF'. ..701 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\MISPACE.MOF'. ..702 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\DSCCORECONFPROV.MOF'. ..703 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI.MOF'. ..704 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI_PASSTHRU.MOF'. ..705 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..706 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..707 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\AEINV.MOF'. ..708 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..709 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..710 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..711 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..712 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..713 13:11:54 (3) Found 'C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPWMI.MOF'. ..714 13:11:54 (3) Found 'C:\PROGRAM FILES\WINDOWS DEFENDER\PROTECTIONMANAGEMENT.MOF'. ..715 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\NETTCPIP.MFL'. ..716 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\NETTCPIP.MFL'. ..717 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\NETTCPIP.MOF'. ..718 13:11:54 (3) Found 'C:\WINDOWS\SYSTEM32\WBEM\AEINV.MOF'. ..719 13:11:54 (0) ** Verifying '#PRAGMA AUTORECOVER' statement in MOF files. ..720 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\APPBACKGROUNDTASK_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..721 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..722 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..723 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\DNSCLIENTPSPROVIDER_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..724 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..725 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..726 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\ISCSIREM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..727 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..728 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..729 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\ISCSIWMIV2_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..730 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..731 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..732 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MISPACE_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..733 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..734 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..735 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NETADAPTERCIMTRACEUNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..736 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..737 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..738 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NETADAPTERCIM_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..739 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..740 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..741 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NETDACIM_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..742 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..743 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..744 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NETNCCIM_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..745 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..746 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..747 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NETTCPIP_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..748 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..749 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..750 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NETTTCIM_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..751 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..752 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..753 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NLMCIM_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..754 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..755 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..756 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PCSVDEVICE_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..757 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..758 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..759 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\POWERWMIPROVIDER_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..760 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..761 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..762 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\QOSWMITRC_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..763 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..764 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..765 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\QOSWMI_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..766 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..767 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..768 13:11:54 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI_PASSTHRU_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..769 13:11:54 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..770 13:11:54 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..771 13:11:55 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\STORAGEWMI_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..772 13:11:55 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..773 13:11:55 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..774 13:11:55 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\VPNCLIENTPSPROVIDER_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..775 13:11:55 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..776 13:11:55 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..777 13:11:55 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WDACWMIPROV_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..778 13:11:55 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..779 13:11:55 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..780 13:11:55 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WFASCIM_UNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..781 13:11:55 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..782 13:11:55 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..783 13:11:55 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WIN32_ENCRYPTABLEVOLUMEUNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..784 13:11:55 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..785 13:11:55 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..786 13:11:55 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WINSATUNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..787 13:11:55 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..788 13:11:55 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..789 13:11:55 (2) !! WARNING: MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WSMAGENTUNINSTALL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it contains DELETE MOF statements while NOT included in the AUTORECOVERY LIST, which could be FINE! ..790 13:11:55 (3) => Only the MOF statements and logic will determine if the MOF is a true UNINSTALL MOF. ..791 13:11:55 (3) A true UNINSTALL MOF should NOT contain the '#PRAGMA AUTORECOVER' statement and should NOT be included in the AUTORECOVER LIST. ..792 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\TCPIP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..793 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\QMGR.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..794 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MMC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..795 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NCSI.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..796 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NLASVC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..797 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\TSPKG.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..798 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\SERVICES.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..799 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\DRVINST.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..800 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\UMPNPMGR.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..801 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WMP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..802 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MOUNTMGR.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..803 13:11:58 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WFS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..804 13:12:01 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PRINTFILTERPIPELINESVC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..805 13:12:01 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..806 13:12:01 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\IRMON.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..807 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NEWDEV.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..808 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\RESTARTMANAGER.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..809 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPD_CI.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..810 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WINSAT.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..811 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FUNDISC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..812 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FDWSD.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..813 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FDSSDP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..814 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\UMB.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..815 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\UMBUS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..816 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\UMPASS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..817 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\SCHANNEL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..818 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\RDPENCOM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..819 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\P2P-MESH.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..820 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\P2P-PNRP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..821 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\IPSECSVC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..822 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\POLSTORE.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..823 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WINIPSEC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..824 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\SSTPSVC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..825 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WININIT.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..826 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NETPROFM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..827 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\LLTDIO.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..828 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\RSPNDR.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..829 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\LLTDSVC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..830 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NETWORKITEMFACTORY.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..831 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WDIGEST.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..832 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\BCD.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..833 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NTFS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..834 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\SETUPAPI.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..835 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\DIMSJOB.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..836 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WSMAUTO.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..837 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\XWIZARDS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..838 13:12:02 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\IPMIDTRC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..839 13:12:03 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\IPMIPTRC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..840 13:12:03 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MICROSOFT-WINDOWS-REMOTE-FILESYSTEM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..841 13:12:03 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WHQLPROV.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..842 13:12:03 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WINLOGON.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..843 13:12:03 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\SDBUS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..844 13:12:03 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MSISCSI.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..845 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\DIMSROAM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..846 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\RDPCORE.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..847 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\IMAPIV2-BASE.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..848 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\IMAPIV2-FILESYSTEMSUPPORT.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..849 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\IMAPIV2-LEGACYSHIM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..850 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EAIMEAPI.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..851 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FILETRACE.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..852 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FDPHOST.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..853 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FDWNET.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..854 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FDRESPUB.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..855 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PNPXASSOC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..856 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\NSHIPSEC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..857 13:12:04 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\STORTRACE.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..858 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\IRDA.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..859 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPDSP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..860 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPDSHEXT.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..861 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPDSHSERVICEOBJ.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..862 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\REFS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..863 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\BTHMTPENUM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..864 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MSFEEDSBS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..865 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPDMTP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..866 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PARTMGR.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..867 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICEWIACOMPAT.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..868 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FWCFG.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..869 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\AUTHFWCFG.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..870 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WFP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..871 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPDCOMP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..872 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MSFEEDS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..873 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPDBUSENUM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..874 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WPDFS.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..875 13:12:05 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WLAN.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..876 13:12:06 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\LSASRV.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..877 13:12:06 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\TSMF.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..878 13:12:06 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\SAMSRV.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..879 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MPSSVC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..880 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MPSDRV.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..881 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\FIREWALLAPI.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..882 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WFAPIGP.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..883 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICEAPI.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..884 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICETYPES.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..885 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICECLASSEXTENSION.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..886 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICECONNECTAPI.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..887 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\WCNCSVC.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..888 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PORTABLEDEVICEWMDRM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..889 13:12:08 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MSWMDM.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..890 13:12:11 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SCRCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..891 13:12:11 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SMTPCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..892 13:12:11 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WBEMCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..893 13:12:11 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WFS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..894 13:12:11 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\IRMON.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..895 13:12:12 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WHQLPROV.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..896 13:12:12 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WININIT.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..897 13:12:13 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\XWIZARDS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..898 13:12:13 (3) MOF file 'C:\WINDOWS\SYSTEM32\EN-US\RESTARTMANAGER.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..899 13:12:13 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\L2GPSTORE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..900 13:12:13 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WINLOGON.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..901 13:12:14 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RDPENCOM.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..902 13:12:14 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WCNCSVC.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..903 13:12:15 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSFEEDSBS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..904 13:12:15 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RDPCORE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..905 13:12:15 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSFEEDS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..906 13:12:15 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\FILETRACE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..907 13:12:19 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SCRCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..908 13:12:19 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\SMTPCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..909 13:12:19 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WBEMCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..910 13:12:19 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WFS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..911 13:12:19 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\IRMON.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..912 13:12:20 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WHQLPROV.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..913 13:12:20 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WININIT.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..914 13:12:21 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\XWIZARDS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..915 13:12:21 (3) MOF file 'C:\WINDOWS\SYSTEM32\EN-US\RESTARTMANAGER.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..916 13:12:21 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\L2GPSTORE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..917 13:12:21 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WINLOGON.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..918 13:12:22 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RDPENCOM.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..919 13:12:22 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\WCNCSVC.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..920 13:12:23 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSFEEDSBS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..921 13:12:23 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\RDPCORE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..922 13:12:23 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\MSFEEDS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..923 13:12:23 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\EN-US\FILETRACE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..924 13:12:24 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\MBLCTR.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..925 13:12:24 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\SENSORSCPL.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..926 13:12:24 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\SENSORSCLASSEXTENSION.MOF' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..927 13:12:29 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SCRCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..928 13:12:29 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\SMTPCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..929 13:12:29 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WBEMCONS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..930 13:12:29 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WFS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..931 13:12:30 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\IRMON.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..932 13:12:31 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WHQLPROV.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..933 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WININIT.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..934 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\XWIZARDS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..935 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\PL-PL\RESTARTMANAGER.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..936 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\L2GPSTORE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..937 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WINLOGON.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..938 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\WCNCSVC.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..939 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\RDPCORE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..940 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..941 13:12:32 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\FILETRACE.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..942 13:12:34 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDSBS.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..943 13:12:34 (3) MOF file 'C:\WINDOWS\SYSTEM32\WBEM\PL-PL\RDPENCOM.MFL' does NOT contain the '#PRAGMA AUTORECOVER' statement but it is included in the AUTORECOVERY LIST, which is FINE! ..944 13:12:42 (0) ** Verifying DCOM configuration. ..945 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\Ole\EnableDCOM'. ..946 13:12:42 (3) DCOM is ENABLED. ..947 13:12:42 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Microsoft\Ole\LegacyAuthenticationLevel'. ..948 13:12:42 (3) DCOM IS set at the CONNECT authentication level. ..949 13:12:42 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Microsoft\Ole\LegacyImpersonationLevel'. ..950 13:12:42 (3) DCOM IS set at the IDENTIFY impersonation level. ..951 13:12:42 (0) ** Verifying WMI DCOM component registrations. ..952 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\'. ..953 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..954 13:12:42 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\AuthenticationLevel'. ..955 13:12:42 (3) WMI registry key (REG_DWORD) 'AuthenticationLevel' is missing, which is FINE. ..956 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LocalService'. ..957 13:12:42 (3) WMI registry key (REG_SZ) 'LocalService' is correct. ..958 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\'. ..959 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..960 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\AppID'. ..961 13:12:42 (3) WMI registry key (REG_SZ) 'AppID' is correct. ..962 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LocalService'. ..963 13:12:42 (3) WMI registry key (REG_SZ) 'LocalService' is correct. ..964 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\AppID\winmgmt\AppID'. ..965 13:12:42 (3) WMI registry key (REG_SZ) 'AppID' is correct. ..966 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\AppID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\'. ..967 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..968 13:12:42 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Classes\AppID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\AuthenticationLevel'. ..969 13:12:42 (3) WMI registry key (REG_DWORD) 'AuthenticationLevel' is missing, which is FINE. ..970 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\'. ..971 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..972 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\AppID'. ..973 13:12:42 (3) WMI registry key (REG_SZ) 'AppID' is correct. ..974 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\AppID\{49BD2028-1523-11D1-AD79-00C04FD8FDFF}\'. ..975 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..976 13:12:42 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Classes\AppID\{49BD2028-1523-11D1-AD79-00C04FD8FDFF}\AuthenticationLevel'. ..977 13:12:42 (3) WMI registry key (REG_DWORD) 'AuthenticationLevel' is missing, which is FINE. ..978 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{49BD2028-1523-11D1-AD79-00C04FD8FDFF}\'. ..979 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..980 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{49BD2028-1523-11D1-AD79-00C04FD8FDFF}\AppID'. ..981 13:12:42 (3) WMI registry key (REG_SZ) 'AppID' is correct. ..982 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\AppID\{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}\'. ..983 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..984 13:12:42 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Classes\AppID\{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}\AuthenticationLevel'. ..985 13:12:42 (3) WMI registry key (REG_DWORD) 'AuthenticationLevel' is missing, which is FINE. ..986 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}\'. ..987 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..988 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}\AppID'. ..989 13:12:42 (3) WMI registry key (REG_SZ) 'AppID' is correct. ..990 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\'. ..991 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..992 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\AppID'. ..993 13:12:42 (3) WMI registry key (REG_SZ) 'AppID' is correct. ..994 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\LocalService'. ..995 13:12:42 (3) WMI registry key (REG_SZ) 'LocalService' is correct. ..996 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\WINMGMTS\'. ..997 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. ..998 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\WINMGMTS\CLSID\'. ..999 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. .1000 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\WINMGMTS\CurVer\'. .1001 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. .1002 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\WINMGMTS.1\'. .1003 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. .1004 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\WINMGMTS.1\CLSID\'. .1005 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. .1006 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{172BDDF8-CEEA-11D1-8B05-00600806D9B6}\ProgID\'. .1007 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. .1008 13:12:42 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Classes\CLSID\{172BDDF8-CEEA-11D1-8B05-00600806D9B6}\VersionIndependentProgID\'. .1009 13:12:42 (3) WMI registry key (REG_SZ) '(Default)' is correct. .1010 13:12:42 (3) 'Windows Management Instrumentation' DCOM application registered correctly ({8BC3F05E-D86B-11D0-A075-00C04FB68820}). .1011 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32\'. .1012 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSE.EXE' registered correctly (\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32). .1013 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{49BD2028-1523-11D1-AD79-00C04FD8FDFF}\LocalServer32\'. .1014 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\UNSECAPP.EXE' registered correctly (\CLSID\{49BD2028-1523-11D1-AD79-00C04FD8FDFF}\LocalServer32). .1015 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{FD209E2E-813B-41C0-8646-4C3E9C917511}\InProcServer32\'. .1016 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\IPMIPRV.DLL' registered correctly (\CLSID\{FD209E2E-813B-41C0-8646-4C3E9C917511}\InProcServer32). .1017 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{3DD82D10-E6F1-11D2-B139-00105A1F77A1}\InProcServer32\'. .1018 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\CIMWIN32.DLL' registered correctly (\CLSID\{3DD82D10-E6F1-11D2-B139-00105A1F77A1}\InProcServer32). .1019 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{D31B6A3F-9350-40DE-A3FC-A7EDEB9B7C63}\InProcServer32\'. .1020 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\CIMWIN32.DLL' registered correctly (\CLSID\{D31B6A3F-9350-40DE-A3FC-A7EDEB9B7C63}\InProcServer32). .1021 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InProcServer32\'. .1022 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\CIMWIN32.DLL' registered correctly (\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InProcServer32). .1023 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{ED4B1828-CD88-460F-AEFF-3D63FC8BBF68}\InProcServer32\'. .1024 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\DNSCLIENTPSPROVIDER.DLL' registered correctly (\CLSID\{ED4B1828-CD88-460F-AEFF-3D63FC8BBF68}\InProcServer32). .1025 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{4BCCBCE4-20E8-44A1-A170-C9A4D941CBA4}\InProcServer32\'. .1026 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\DNSCLIENTCIM.DLL' registered correctly (\CLSID\{4BCCBCE4-20E8-44A1-A170-C9A4D941CBA4}\InProcServer32). .1027 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{1EF94880-01A8-11D2-A90B-00AA00BF3363}\InProcServer32\'. .1028 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\DSPROV.DLL' registered correctly (\CLSID\{1EF94880-01A8-11D2-A90B-00AA00BF3363}\InProcServer32). .1029 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{33831ED4-42B8-11D2-93AD-00805F853771}\InProcServer32\'. .1030 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\DSPROV.DLL' registered correctly (\CLSID\{33831ED4-42B8-11D2-93AD-00805F853771}\InProcServer32). .1031 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{AA527A40-4D9A-11D2-93AD-00805F853771}\InProcServer32\'. .1032 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\DSPROV.DLL' registered correctly (\CLSID\{AA527A40-4D9A-11D2-93AD-00805F853771}\InProcServer32). .1033 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{6C19BE35-7500-11D1-AD94-00C04FD8FDFF}\InProcServer32\'. .1034 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\ESSCLI.DLL' registered correctly (\CLSID\{6C19BE35-7500-11D1-AD94-00C04FD8FDFF}\InProcServer32). .1035 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{DC923725-0FDD-45E1-AE74-EA09182E739B}\InProcServer32\'. .1036 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\ESSCLI.DLL' registered correctly (\CLSID\{DC923725-0FDD-45E1-AE74-EA09182E739B}\InProcServer32). .1037 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{1108BE51-F58A-4CDA-BB99-7A0227D11D5E}\InProcServer32\'. .1038 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{1108BE51-F58A-4CDA-BB99-7A0227D11D5E}\InProcServer32). .1039 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InProcServer32\'. .1040 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InProcServer32). .1041 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{29B5828C-CAB9-11D2-B35C-00105A1F8177}\InProcServer32\'. .1042 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{29B5828C-CAB9-11D2-B35C-00105A1F8177}\InProcServer32). .1043 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{4590F812-1D3A-11D0-891F-00AA004B2E24}\InProcServer32\'. .1044 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{4590F812-1D3A-11D0-891F-00AA004B2E24}\InProcServer32). .1045 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32\'. .1046 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32). .1047 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{674B6698-EE92-11D0-AD71-00C04FD8FDFF}\InProcServer32\'. .1048 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{674B6698-EE92-11D0-AD71-00C04FD8FDFF}\InProcServer32). .1049 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{7016F8FA-CCDA-11D2-B35C-00105A1F8177}\InProcServer32\'. .1050 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{7016F8FA-CCDA-11D2-B35C-00105A1F8177}\InProcServer32). .1051 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InProcServer32\'. .1052 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InProcServer32). .1053 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{78103FB7-AED7-4066-8BCD-30BB27B02331}\InProcServer32\'. .1054 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{78103FB7-AED7-4066-8BCD-30BB27B02331}\InProcServer32). .1055 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{8D1C559D-84F0-4BB3-A7D5-56A7435A9BA6}\InProcServer32\'. .1056 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{8D1C559D-84F0-4BB3-A7D5-56A7435A9BA6}\InProcServer32). .1057 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{9A653086-174F-11D2-B5F9-00104B703EFD}\InProcServer32\'. .1058 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{9A653086-174F-11D2-B5F9-00104B703EFD}\InProcServer32). .1059 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{C71566F2-561E-11D1-AD87-00C04FD8FDFF}\InProcServer32\'. .1060 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{C71566F2-561E-11D1-AD87-00C04FD8FDFF}\InProcServer32). .1061 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{CC9072AB-C000-49D8-A5AA-00266C8DBB9B}\InProcServer32\'. .1062 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{CC9072AB-C000-49D8-A5AA-00266C8DBB9B}\InProcServer32). .1063 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{CD1ABFC8-6C5E-4A8D-B90B-2A3B153B886D}\InProcServer32\'. .1064 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{CD1ABFC8-6C5E-4A8D-B90B-2A3B153B886D}\InProcServer32). .1065 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InProcServer32\'. .1066 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InProcServer32). .1067 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{DCF33DF4-B510-439F-832A-16B6B514F2A7}\InProcServer32\'. .1068 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\FASTPROX.DLL' registered correctly (\CLSID\{DCF33DF4-B510-439F-832A-16B6B514F2A7}\InProcServer32). .1069 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{9877D8A7-FDA1-43F9-AEEA-F90747EA66B0}\InProcServer32\'. .1070 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\KRNLPROV.DLL' registered correctly (\CLSID\{9877D8A7-FDA1-43F9-AEEA-F90747EA66B0}\InProcServer32). .1071 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\TYPELIB\{6B100E1A-1385-4D1F-A02E-6E705A76BB6C}\1.0\'. .1072 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\KRNLPROV.DLL' registered correctly (\TYPELIB\{6B100E1A-1385-4D1F-A02E-6E705A76BB6C}\1.0). .1073 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{288A2D5F-253C-46B4-B58C-2CED3180B993}\InProcServer32\'. .1074 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\MOFD.DLL' registered correctly (\CLSID\{288A2D5F-253C-46B4-B58C-2CED3180B993}\InProcServer32). .1075 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{6DAF9757-2E37-11D2-AEC9-00C04FB68820}\InProcServer32\'. .1076 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\MOFD.DLL' registered correctly (\CLSID\{6DAF9757-2E37-11D2-AEC9-00C04FB68820}\InProcServer32). .1077 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{C10B4771-4DA0-11D2-A2F5-00C04F86FB7D}\InProcServer32\'. .1078 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\MOFD.DLL' registered correctly (\CLSID\{C10B4771-4DA0-11D2-A2F5-00C04F86FB7D}\InProcServer32). .1079 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{D215781D-019E-4FA0-903D-0CDCDE13A4F5}\InProcServer32\'. .1080 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\MOFD.DLL' registered correctly (\CLSID\{D215781D-019E-4FA0-903D-0CDCDE13A4F5}\InProcServer32). .1081 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{8856918E-74C7-431C-B63D-3A5FDCC6AC08}\InProcServer32\'. .1082 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\MSDTCWMI.DLL' registered correctly (\CLSID\{8856918E-74C7-431C-B63D-3A5FDCC6AC08}\InProcServer32). .1083 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{BE0A9830-2B8B-11D1-A949-0060181EBBAD}\InProcServer32\'. .1084 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\MSIPROV.DLL' registered correctly (\CLSID\{BE0A9830-2B8B-11D1-A949-0060181EBBAD}\InProcServer32). .1085 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{29F06F0C-FB7F-44A5-83CD-D41705D5C525}\InProcServer32\'. .1086 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NCPROV.DLL' registered correctly (\CLSID\{29F06F0C-FB7F-44A5-83CD-D41705D5C525}\InProcServer32). .1087 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\TYPELIB\{5F099F16-6A6E-4BBC-8BD8-98F3221D58C4}\1.0\'. .1088 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NCPROV.DLL' registered correctly (\TYPELIB\{5F099F16-6A6E-4BBC-8BD8-98F3221D58C4}\1.0). .1089 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{2AFCECBA-ABA5-404B-8F4F-15BECC9FEE20}\InProcServer32\'. .1090 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NDISIMPLATCIM.DLL' registered correctly (\CLSID\{2AFCECBA-ABA5-404B-8F4F-15BECC9FEE20}\InProcServer32). .1091 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{B65449EC-4319-4C96-9ABD-E9257D00DB84}\InProcServer32\'. .1092 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NETADAPTERCIM.DLL' registered correctly (\CLSID\{B65449EC-4319-4C96-9ABD-E9257D00DB84}\InProcServer32). .1093 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{E5B5B938-52A0-4B37-8659-24EB5165B9A0}\InProcServer32\'. .1094 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NETDACIM.DLL' registered correctly (\CLSID\{E5B5B938-52A0-4B37-8659-24EB5165B9A0}\InProcServer32). .1095 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{C5E2E36E-0D2D-4FAC-A9F4-DDAD14633222}\InProcServer32\'. .1096 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NETEVENTPACKETCAPTURE.DLL' registered correctly (\CLSID\{C5E2E36E-0D2D-4FAC-A9F4-DDAD14633222}\InProcServer32). .1097 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{47B706B0-B103-4AFD-8ECF-16C2DDF81C15}\InProcServer32\'. .1098 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NETNCCIM.DLL' registered correctly (\CLSID\{47B706B0-B103-4AFD-8ECF-16C2DDF81C15}\InProcServer32). .1099 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{3292A418-BAC2-4BBF-BB07-66A1CB3B8B7D}\InProcServer32\'. .1100 13:12:42 (1) !! ERROR: (ReadRegistry) : 0x80070002 - Nieprawid³owy poziom g³ówny w kluczu rejestru "HKCR\CLSID\{3292A418-BAC2-4BBF-BB07-66A1CB3B8B7D}\InProcServer32\". .1101 13:12:42 (1) !! ERROR: (CheckWMIDCOMComponentRegistrations) : 'C:\WINDOWS\SYSTEM32\WBEM\NETPEERDISTCIM.DLL' is not registered correctly, missing '\CLSID\{3292A418-BAC2-4BBF-BB07-66A1CB3B8B7D}\InProcServer32'. .1102 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{F43E8166-162C-4B12-8C2B-510D21516082}\InProcServer32\'. .1103 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NETSWITCHTEAMCIM.DLL' registered correctly (\CLSID\{F43E8166-162C-4B12-8C2B-510D21516082}\InProcServer32). .1104 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{59D95679-9799-458F-8B5B-FE00D8DA0AE4}\InProcServer32\'. .1105 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NETTCPIP.DLL' registered correctly (\CLSID\{59D95679-9799-458F-8B5B-FE00D8DA0AE4}\InProcServer32). .1106 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{43D7FDB4-B94D-4415-8792-54AF9FBEBB82}\InProcServer32\'. .1107 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NETTTCIM.DLL' registered correctly (\CLSID\{43D7FDB4-B94D-4415-8792-54AF9FBEBB82}\InProcServer32). .1108 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{7924BBA8-1913-4B0E-8E6F-6F45CE499731}\InProcServer32\'. .1109 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NLMCIM.DLL' registered correctly (\CLSID\{7924BBA8-1913-4B0E-8E6F-6F45CE499731}\InProcServer32). .1110 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{F55C5B4C-517D-11D1-AB57-00C04FD9159E}\InProcServer32\'. .1111 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NTEVT.DLL' registered correctly (\CLSID\{F55C5B4C-517D-11D1-AB57-00C04FD9159E}\InProcServer32). .1112 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{FD4F53E0-65DC-11D1-AB64-00C04FD9159E}\InProcServer32\'. .1113 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\NTEVT.DLL' registered correctly (\CLSID\{FD4F53E0-65DC-11D1-AB64-00C04FD9159E}\InProcServer32). .1114 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{2F86B8BD-EFF5-4C07-8FA5-60788517EF95}\InProcServer32\'. .1115 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\PRINTMANAGEMENTPROVIDER.DLL' registered correctly (\CLSID\{2F86B8BD-EFF5-4C07-8FA5-60788517EF95}\InProcServer32). .1116 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{69D76D1B-B12E-4913-8F48-671B90195A2B}\InProcServer32\'. .1117 13:12:42 (1) !! ERROR: (ReadRegistry) : 0x80070002 - Nieprawid³owy poziom g³ówny w kluczu rejestru "HKCR\CLSID\{69D76D1B-B12E-4913-8F48-671B90195A2B}\InProcServer32\". .1118 13:12:42 (1) !! ERROR: (CheckWMIDCOMComponentRegistrations) : 'C:\WINDOWS\SYSTEM32\WBEM\POLICMAN.DLL' is not registered correctly, missing '\CLSID\{69D76D1B-B12E-4913-8F48-671B90195A2B}\InProcServer32'. .1119 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{AAEAE72F-0328-4763-8ECB-23422EDE2DB5}\InProcServer32\'. .1120 13:12:42 (1) !! ERROR: (ReadRegistry) : 0x80070002 - Nieprawid³owy poziom g³ówny w kluczu rejestru "HKCR\CLSID\{AAEAE72F-0328-4763-8ECB-23422EDE2DB5}\InProcServer32\". .1121 13:12:42 (1) !! ERROR: (CheckWMIDCOMComponentRegistrations) : 'C:\WINDOWS\SYSTEM32\WBEM\POLICMAN.DLL' is not registered correctly, missing '\CLSID\{AAEAE72F-0328-4763-8ECB-23422EDE2DB5}\InProcServer32'. .1122 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{124E2045-8D63-4C23-B420-BBCD6A0ED61A}\InProcServer32\'. .1123 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\QOSWMI.DLL' registered correctly (\CLSID\{124E2045-8D63-4C23-B420-BBCD6A0ED61A}\InProcServer32). .1124 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{D7C3453E-1F1C-48CD-AFE6-CFF2A937D337}\InProcServer32\'. .1125 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\RACWMIPROV.DLL' registered correctly (\CLSID\{D7C3453E-1F1C-48CD-AFE6-CFF2A937D337}\InProcServer32). .1126 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{7998DC37-D3FE-487C-A60A-7701FCC70CC6}\InProcServer32\'. .1127 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\REPDRVFS.DLL' registered correctly (\CLSID\{7998DC37-D3FE-487C-A60A-7701FCC70CC6}\InProcServer32). .1128 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{E23A07D1-1E89-4B22-8411-051B40A0A357}\InProcServer32\'. .1129 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\SCHEDPROV.DLL' registered correctly (\CLSID\{E23A07D1-1E89-4B22-8411-051B40A0A357}\InProcServer32). .1130 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{A1B9E04A-3226-11D2-883E-00104B2AFB46}\InProcServer32\'. .1131 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\SERVDEPS.DLL' registered correctly (\CLSID\{A1B9E04A-3226-11D2-883E-00104B2AFB46}\InProcServer32). .1132 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}\InProcServer32\'. .1133 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\SERVDEPS.DLL' registered correctly (\CLSID\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}\InProcServer32). .1134 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{C7A3A54B-0250-11D3-9CD1-00105A1F4801}\InProcServer32\'. .1135 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\SMTPCONS.DLL' registered correctly (\CLSID\{C7A3A54B-0250-11D3-9CD1-00105A1F4801}\InProcServer32). .1136 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{72967901-68EC-11D0-B729-00AA0062CBB7}\InProcServer32\'. .1137 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\STDPROV.DLL' registered correctly (\CLSID\{72967901-68EC-11D0-B729-00AA0062CBB7}\InProcServer32). .1138 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{72967903-68EC-11D0-B729-00AA0062CBB7}\InProcServer32\'. .1139 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\STDPROV.DLL' registered correctly (\CLSID\{72967903-68EC-11D0-B729-00AA0062CBB7}\InProcServer32). .1140 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{F00B4404-F8F1-11CE-A5B6-00AA00680C3F}\InProcServer32\'. .1141 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\STDPROV.DLL' registered correctly (\CLSID\{F00B4404-F8F1-11CE-A5B6-00AA00680C3F}\InProcServer32). .1142 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{FA77A74E-E109-11D0-AD6E-00C04FD8FDFF}\InProcServer32\'. .1143 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\STDPROV.DLL' registered correctly (\CLSID\{FA77A74E-E109-11D0-AD6E-00C04FD8FDFF}\InProcServer32). .1144 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{FE9AF5C0-D3B6-11CE-A5B6-00AA00680C3F}\InProcServer32\'. .1145 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\STDPROV.DLL' registered correctly (\CLSID\{FE9AF5C0-D3B6-11CE-A5B6-00AA00680C3F}\InProcServer32). .1146 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{890CB943-D715-401B-98B1-CF82DCF36D7C}\InProcServer32\'. .1147 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\VDSWMI.DLL' registered correctly (\CLSID\{890CB943-D715-401B-98B1-CF82DCF36D7C}\InProcServer32). .1148 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{AA70DDF4-E11C-11D1-ABB0-00C04FD9159E}\InProcServer32\'. .1149 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\VIEWPROV.DLL' registered correctly (\CLSID\{AA70DDF4-E11C-11D1-ABB0-00C04FD9159E}\InProcServer32). .1150 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{0B4CD745-723E-4D23-B898-47BECD7F0DEF}\InProcServer32\'. .1151 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\VPNCLIENTPSPROVIDER.DLL' registered correctly (\CLSID\{0B4CD745-723E-4D23-B898-47BECD7F0DEF}\InProcServer32). .1152 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{72970BEB-81F8-46D4-B220-D743F4E49C95}\InProcServer32\'. .1153 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\VSSWMI.DLL' registered correctly (\CLSID\{72970BEB-81F8-46D4-B220-D743F4E49C95}\InProcServer32). .1154 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{5C659257-E236-11D2-8899-00104B2AFB46}\InProcServer32\'. .1155 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCNTL.DLL' registered correctly (\CLSID\{5C659257-E236-11D2-8899-00104B2AFB46}\InProcServer32). .1156 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{5C659258-E236-11D2-8899-00104B2AFB46}\InProcServer32\'. .1157 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCNTL.DLL' registered correctly (\CLSID\{5C659258-E236-11D2-8899-00104B2AFB46}\InProcServer32). .1158 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{266C72D4-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .1159 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEMCOMN.DLL' registered correctly (\CLSID\{266C72D4-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32). .1160 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .1161 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEMCOMN.DLL' registered correctly (\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32). .1162 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{266C72E6-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .1163 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEMCOMN.DLL' registered correctly (\CLSID\{266C72E6-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32). .1164 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{266C72D4-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .1165 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCONS.DLL' registered correctly (\CLSID\{266C72D4-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32). .1166 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .1167 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCONS.DLL' registered correctly (\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32). .1168 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{266C72E6-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .1169 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCONS.DLL' registered correctly (\CLSID\{266C72E6-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32). .1170 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{1860E246-E924-4F73-B2C5-93E0577E3AA1}\InProcServer32\'. .1171 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCORE.DLL' registered correctly (\CLSID\{1860E246-E924-4F73-B2C5-93E0577E3AA1}\InProcServer32). .1172 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{1F0BC6AD-46D4-488B-BE1F-047FC7505E60}\InProcServer32\'. .1173 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCORE.DLL' registered correctly (\CLSID\{1F0BC6AD-46D4-488B-BE1F-047FC7505E60}\InProcServer32). .1174 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\InProcServer32\'. .1175 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCORE.DLL' registered correctly (\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\InProcServer32). .1176 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{6543D242-A80B-44A3-B828-95C1EC452423}\InProcServer32\'. .1177 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCORE.DLL' registered correctly (\CLSID\{6543D242-A80B-44A3-B828-95C1EC452423}\InProcServer32). .1178 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{A83EF168-CA8D-11D2-B33D-00104BCC4B4A}\InProcServer32\'. .1179 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCORE.DLL' registered correctly (\CLSID\{A83EF168-CA8D-11D2-B33D-00104BCC4B4A}\InProcServer32). .1180 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{ED999FF5-223A-4052-8ECE-0B10C8DBAA39}\InProcServer32\'. .1181 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCORE.DLL' registered correctly (\CLSID\{ED999FF5-223A-4052-8ECE-0B10C8DBAA39}\InProcServer32). .1182 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{172BDDF8-CEEA-11D1-8B05-00600806D9B6}\InProcServer32\'. .1183 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\CLSID\{172BDDF8-CEEA-11D1-8B05-00600806D9B6}\InProcServer32). .1184 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{47DFBE54-CF76-11D3-B38F-00105A1F473A}\InProcServer32\'. .1185 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\CLSID\{47DFBE54-CF76-11D3-B38F-00105A1F473A}\InProcServer32). .1186 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{5791BC26-CE9C-11D1-97BF-0000F81E849C}\InProcServer32\'. .1187 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\CLSID\{5791BC26-CE9C-11D1-97BF-0000F81E849C}\InProcServer32). .1188 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{75718C9A-F029-11D1-A1AC-00C04FB6C223}\InProcServer32\'. .1189 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\CLSID\{75718C9A-F029-11D1-A1AC-00C04FB6C223}\InProcServer32). .1190 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{76A64158-CB41-11D1-8B02-00600806D9B6}\InProcServer32\'. .1191 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\CLSID\{76A64158-CB41-11D1-8B02-00600806D9B6}\InProcServer32). .1192 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{9AED384E-CE8B-11D1-8B05-00600806D9B6}\InProcServer32\'. .1193 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\CLSID\{9AED384E-CE8B-11D1-8B05-00600806D9B6}\InProcServer32). .1194 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{C2FEEEAC-CFCD-11D1-8B05-00600806D9B6}\InProcServer32\'. .1195 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\CLSID\{C2FEEEAC-CFCD-11D1-8B05-00600806D9B6}\InProcServer32). .1196 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{D269BF5C-D9C1-11D3-B38F-00105A1F473A}\InProcServer32\'. .1197 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\CLSID\{D269BF5C-D9C1-11D3-B38F-00105A1F473A}\InProcServer32). .1198 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{75718C9F-F029-11D1-A1AC-00C04FB6C223}\'. .1199 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\INTERFACE\{75718C9F-F029-11D1-A1AC-00C04FB6C223}). .1200 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{75718CA0-F029-11D1-A1AC-00C04FB6C223}\'. .1201 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\INTERFACE\{75718CA0-F029-11D1-A1AC-00C04FB6C223}). .1202 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{D962DB84-D4BB-11D1-8B09-00600806D9B6}\'. .1203 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMDISP.DLL' registered correctly (\INTERFACE\{D962DB84-D4BB-11D1-8B09-00600806D9B6}). .1204 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{5D08B586-343A-11D0-AD46-00C04FD8FDFF}\InProcServer32\'. .1205 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMESS.DLL' registered correctly (\CLSID\{5D08B586-343A-11D0-AD46-00C04FD8FDFF}\InProcServer32). .1206 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32\'. .1207 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMESS.DLL' registered correctly (\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32). .1208 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{443E7B79-DE31-11D2-B340-00104BCC4B4A}\InProcServer32\'. .1209 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMPROX.DLL' registered correctly (\CLSID\{443E7B79-DE31-11D2-B340-00104BCC4B4A}\InProcServer32). .1210 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InProcServer32\'. .1211 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMPROX.DLL' registered correctly (\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InProcServer32). .1212 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{CB8555CC-9128-11D1-AD9B-00C04FD8FDFF}\InProcServer32\'. .1213 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMPROX.DLL' registered correctly (\CLSID\{CB8555CC-9128-11D1-AD9B-00C04FD8FDFF}\InProcServer32). .1214 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{CD184336-9128-11D1-AD9B-00C04FD8FDFF}\InProcServer32\'. .1215 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMPROX.DLL' registered correctly (\CLSID\{CD184336-9128-11D1-AD9B-00C04FD8FDFF}\InProcServer32). .1216 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\'. .1217 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32). .1218 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{11CAA957-4E80-474E-A819-7FD72148ADA9}\'. .1219 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{11CAA957-4E80-474E-A819-7FD72148ADA9}). .1220 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{1BE41571-91DD-11D1-AEB2-00C04FB68820}\'. .1221 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{1BE41571-91DD-11D1-AEB2-00C04FB68820}). .1222 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{1BE41572-91DD-11D1-AEB2-00C04FB68820}\'. .1223 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{1BE41572-91DD-11D1-AEB2-00C04FB68820}). .1224 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\'. .1225 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{1C1C45EE-4395-11D2-B60B-00104B703EFD}). .1226 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{1CFABA8C-1523-11D1-AD79-00C04FD8FDFF}\'. .1227 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{1CFABA8C-1523-11D1-AD79-00C04FD8FDFF}). .1228 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{2B322B6E-A9DF-44E3-97BF-259E3583FDA4}\'. .1229 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{2B322B6E-A9DF-44E3-97BF-259E3583FDA4}). .1230 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{2C9273E0-1DC3-11D3-B364-00105A1F8177}\'. .1231 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{2C9273E0-1DC3-11D3-B364-00105A1F8177}). .1232 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{2DB9FA90-9973-46CF-B310-9865B644699D}\'. .1233 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{2DB9FA90-9973-46CF-B310-9865B644699D}). .1234 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{37196B38-CCCF-11D2-B35C-00105A1F8177}\'. .1235 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{37196B38-CCCF-11D2-B35C-00105A1F8177}). .1236 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{37196B39-CCCF-11D2-B35C-00105A1F8177}\'. .1237 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{37196B39-CCCF-11D2-B35C-00105A1F8177}). .1238 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{41AA40E6-2FBA-4E80-ADE9-34306567206D}\'. .1239 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{41AA40E6-2FBA-4E80-ADE9-34306567206D}). .1240 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{423EC01E-2E35-11D2-B604-00104B703EFD}\'. .1241 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{423EC01E-2E35-11D2-B604-00104B703EFD}). .1242 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{44ACA675-E8FC-11D0-A07C-00C04FB68820}\'. .1243 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{44ACA675-E8FC-11D0-A07C-00C04FB68820}). .1244 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{580ACAF8-FA1C-11D0-AD72-00C04FD8FDFF}\'. .1245 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{580ACAF8-FA1C-11D0-AD72-00C04FD8FDFF}). .1246 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{60E512D4-C47B-11D2-B338-00105A1F4AAF}\'. .1247 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{60E512D4-C47B-11D2-B338-00105A1F4AAF}). .1248 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{631F7D96-D993-11D2-B339-00105A1F4AAF}\'. .1249 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{631F7D96-D993-11D2-B339-00105A1F4AAF}). .1250 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{631F7D97-D993-11D2-B339-00105A1F4AAF}\'. .1251 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{631F7D97-D993-11D2-B339-00105A1F4AAF}). .1252 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{6919DD07-1637-4611-A8A7-C16FAC5B2D53}\'. .1253 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{6919DD07-1637-4611-A8A7-C16FAC5B2D53}). .1254 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{6C19BE32-7500-11D1-AD94-00C04FD8FDFF}\'. .1255 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{6C19BE32-7500-11D1-AD94-00C04FD8FDFF}). .1256 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{6C19BE34-7500-11D1-AD94-00C04FD8FDFF}\'. .1257 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{6C19BE34-7500-11D1-AD94-00C04FD8FDFF}). .1258 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{755F9DA7-7508-11D1-AD94-00C04FD8FDFF}\'. .1259 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{755F9DA7-7508-11D1-AD94-00C04FD8FDFF}). .1260 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{854D745C-6742-42C0-8BB9-01EC466B6E87}\'. .1261 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{854D745C-6742-42C0-8BB9-01EC466B6E87}). .1262 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{88F3781C-6902-4647-9A6B-A74F450AF861}\'. .1263 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{88F3781C-6902-4647-9A6B-A74F450AF861}). .1264 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{8A0DC377-A9D3-41CB-BD69-AE1FDAF2DC68}\'. .1265 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{8A0DC377-A9D3-41CB-BD69-AE1FDAF2DC68}). .1266 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{A210BFE9-C9F7-4919-B114-0D98B3D5341E}\'. .1267 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{A210BFE9-C9F7-4919-B114-0D98B3D5341E}). .1268 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{AC9EA02A-2C8A-4ACD-B562-D7E8EBEE8E8E}\'. .1269 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{AC9EA02A-2C8A-4ACD-B562-D7E8EBEE8E8E}). .1270 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{C49E32C7-BC8B-11D2-85D4-00105A1F8304}\'. .1271 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{C49E32C7-BC8B-11D2-85D4-00105A1F8304}). .1272 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{DF2373F5-EFB2-475C-AD58-3102D61967D4}\'. .1273 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{DF2373F5-EFB2-475C-AD58-3102D61967D4}). .1274 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{E245105B-B06E-11D0-AD61-00C04FD8FDFF}\'. .1275 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{E245105B-B06E-11D0-AD61-00C04FD8FDFF}). .1276 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{E246107A-B06E-11D0-AD61-00C04FD8FDFF}\'. .1277 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{E246107A-B06E-11D0-AD61-00C04FD8FDFF}). .1278 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{F1E9C5B2-F59B-11D2-B362-00105A1F8177}\'. .1279 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{F1E9C5B2-F59B-11D2-B362-00105A1F8177}). .1280 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{F309AD18-D86A-11D0-A075-00C04FB68820}\'. .1281 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{F309AD18-D86A-11D0-A075-00C04FB68820}). .1282 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\'. .1283 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}). .1284 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{FD450835-CF1B-4C87-9FD2-5E0D42FDE081}\'. .1285 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{FD450835-CF1B-4C87-9FD2-5E0D42FDE081}). .1286 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\INTERFACE\{FEC1B0AC-5808-4033-A915-C0185934581E}\'. .1287 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMSVC.DLL' registered correctly (\INTERFACE\{FEC1B0AC-5808-4033-A915-C0185934581E}). .1288 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{9EE72A18-7BD4-44E1-8BA9-1E8E60D8CCA3}\InProcServer32\'. .1289 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WDACWMIPROV.DLL' registered correctly (\CLSID\{9EE72A18-7BD4-44E1-8BA9-1E8E60D8CCA3}\InProcServer32). .1290 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{227C5B36-F148-4B4B-AEC1-943E394D9885}\InProcServer32\'. .1291 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WFASCIM.DLL' registered correctly (\CLSID\{227C5B36-F148-4B4B-AEC1-943E394D9885}\InProcServer32). .1292 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{B0A2AB46-F612-4469-BEC4-7AB038BC476C}\InProcServer32\'. .1293 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMICOOKR.DLL' registered correctly (\CLSID\{B0A2AB46-F612-4469-BEC4-7AB038BC476C}\InProcServer32). .1294 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{4CFC7932-0F9D-4BEF-9C32-8EA2A6B56FCB}\InProcServer32\'. .1295 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIDCPRV.DLL' registered correctly (\CLSID\{4CFC7932-0F9D-4BEF-9C32-8EA2A6B56FCB}\InProcServer32). .1296 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{F5F75737-2843-4F22-933D-C76A97CDA62F}\InProcServer32\'. .1297 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIDCPRV.DLL' registered correctly (\CLSID\{F5F75737-2843-4F22-933D-C76A97CDA62F}\InProcServer32). .1298 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{04788120-12C2-498D-83C1-A7D92E677AC6}\InProcServer32\'. .1299 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPCIMA.DLL' registered correctly (\CLSID\{04788120-12C2-498D-83C1-A7D92E677AC6}\InProcServer32). .1300 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{A3E41207-BE04-492A-AFF0-19E880FF7545}\InProcServer32\'. .1301 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPCIMA.DLL' registered correctly (\CLSID\{A3E41207-BE04-492A-AFF0-19E880FF7545}\InProcServer32). .1302 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{E2CBCB87-9C07-4523-A78F-061499C83987}\InProcServer32\'. .1303 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPCIMA.DLL' registered correctly (\CLSID\{E2CBCB87-9C07-4523-A78F-061499C83987}\InProcServer32). .1304 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{7F72CC7A-74A0-45B4-909C-14FB8186DD7E}\InProcServer32\'. .1305 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPDFS.DLL' registered correctly (\CLSID\{7F72CC7A-74A0-45B4-909C-14FB8186DD7E}\InProcServer32). .1306 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{4AF3F4A4-06C8-4B79-A523-633CC65CE297}\InProcServer32\'. .1307 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPDSKQ.DLL' registered correctly (\CLSID\{4AF3F4A4-06C8-4B79-A523-633CC65CE297}\InProcServer32). .1308 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32\'. .1309 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPERFCLASS.DLL' registered correctly (\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32). .1310 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{CA2AF3B4-C15E-412B-B453-557746675FB7}\InProcServer32\'. .1311 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPERFINST.DLL' registered correctly (\CLSID\{CA2AF3B4-C15E-412B-B453-557746675FB7}\InProcServer32). .1312 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{FCF7A6F2-3300-4386-9A4F-0DD4E3226507}\InProcServer32\'. .1313 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPERFINST.DLL' registered correctly (\CLSID\{FCF7A6F2-3300-4386-9A4F-0DD4E3226507}\InProcServer32). .1314 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{734AC5AE-68E1-4FB5-B8DA-1D92F7FC6661}\InProcServer32\'. .1315 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPICMP.DLL' registered correctly (\CLSID\{734AC5AE-68E1-4FB5-B8DA-1D92F7FC6661}\InProcServer32). .1316 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{23B77E99-5C2D-482D-A795-62CA3AE5B673}\InProcServer32\'. .1317 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPIPRT.DLL' registered correctly (\CLSID\{23B77E99-5C2D-482D-A795-62CA3AE5B673}\InProcServer32). .1318 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{6D7A4B0E-66D5-4AC3-A7ED-0189E8CF5E77}\InProcServer32\'. .1319 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPIPRT.DLL' registered correctly (\CLSID\{6D7A4B0E-66D5-4AC3-A7ED-0189E8CF5E77}\InProcServer32). .1320 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{6515834D-6125-4878-A3A3-6B0A73B809A2}\InProcServer32\'. .1321 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPJOBJ.DLL' registered correctly (\CLSID\{6515834D-6125-4878-A3A3-6B0A73B809A2}\InProcServer32). .1322 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{7FB1D98A-F895-4761-8DC2-774969C84D10}\InProcServer32\'. .1323 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPJOBJ.DLL' registered correctly (\CLSID\{7FB1D98A-F895-4761-8DC2-774969C84D10}\InProcServer32). .1324 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{AB40A5C1-804B-40BD-9DFE-A640691C6956}\InProcServer32\'. .1325 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPJOBJ.DLL' registered correctly (\CLSID\{AB40A5C1-804B-40BD-9DFE-A640691C6956}\InProcServer32). .1326 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{C0AA9D93-2EF5-47FB-960C-F90FC644B48E}\InProcServer32\'. .1327 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPJOBJ.DLL' registered correctly (\CLSID\{C0AA9D93-2EF5-47FB-960C-F90FC644B48E}\InProcServer32). .1328 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{0725C3CB-FEFB-11D0-99F9-00C04FC2F8EC}\InProcServer32\'. .1329 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPROV.DLL' registered correctly (\CLSID\{0725C3CB-FEFB-11D0-99F9-00C04FC2F8EC}\InProcServer32). .1330 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{35B78F79-B973-48C8-A045-CAEC732A35D5}\InProcServer32\'. .1331 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPROV.DLL' registered correctly (\CLSID\{35B78F79-B973-48C8-A045-CAEC732A35D5}\InProcServer32). .1332 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InProcServer32\'. .1333 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPROV.DLL' registered correctly (\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InProcServer32). .1334 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{4DE225BF-CF59-4CFC-85F7-68B90F185355}\InProcServer32\'. .1335 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSD.DLL' registered correctly (\CLSID\{4DE225BF-CF59-4CFC-85F7-68B90F185355}\InProcServer32). .1336 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{7F598975-37E0-4A67-A992-116680F0CEDA}\InProcServer32\'. .1337 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSD.DLL' registered correctly (\CLSID\{7F598975-37E0-4A67-A992-116680F0CEDA}\InProcServer32). .1338 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{8BEBCE8B-1AF0-4323-8B4D-36994567CAE1}\InProcServer32\'. .1339 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSD.DLL' registered correctly (\CLSID\{8BEBCE8B-1AF0-4323-8B4D-36994567CAE1}\InProcServer32). .1340 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{F5A55D36-8750-432C-AB52-AD49A016EABC}\InProcServer32\'. .1341 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSD.DLL' registered correctly (\CLSID\{F5A55D36-8750-432C-AB52-AD49A016EABC}\InProcServer32). .1342 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{6E78DAD9-E187-4D6E-BA63-760256D6F405}\InProcServer32\'. .1343 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIPSESS.DLL' registered correctly (\CLSID\{6E78DAD9-E187-4D6E-BA63-760256D6F405}\InProcServer32). .1344 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{C4819C8D-9AB8-4B2F-B8AE-C77DABF553D5}\InProcServer32\'. .1345 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMITIMEP.DLL' registered correctly (\CLSID\{C4819C8D-9AB8-4B2F-B8AE-C77DABF553D5}\InProcServer32). .1346 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InProcServer32\'. .1347 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIUTILS.DLL' registered correctly (\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InProcServer32). .1348 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{EAC8A024-21E2-4523-AD73-A71A0AA2F56A}\InProcServer32\'. .1349 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIUTILS.DLL' registered correctly (\CLSID\{EAC8A024-21E2-4523-AD73-A71A0AA2F56A}\InProcServer32). .1350 13:12:42 (4) Reading registry (REG_SZ) 'HKCR\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\InProcServer32\'. .1351 13:12:42 (3) 'C:\WINDOWS\SYSTEM32\WBEM\WMIUTILS.DLL' registered correctly (\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\InProcServer32). .1352 13:12:42 (0) ** Verifying WMI DCOM component security. .1353 13:12:42 (3) Deciphering DCOM security for 'My Computer' (Access Permissions/Edit Default) .1354 13:12:42 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Microsoft\Ole\DefaultAccessPermission'. .1355 13:12:42 (4) +- Security Descriptor (DEFAULT) --------------------------------------------------------------------------------- .1356 13:12:42 (4) | Owner: ................................. BUILTIN\Administrators .1357 13:12:42 (4) | Group: ................................. BUILTIN\Administrators .1358 13:12:42 (4) | Revision: .............................. 1 .1359 13:12:42 (4) | Control: ............................... &h8004 .1360 13:12:42 (4) SE_DACL_PRESENT .1361 13:12:42 (4) SE_SELF_RELATIVE .1362 13:12:42 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1363 13:12:42 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1364 13:12:42 (4) ||| Trustee: ............................. NT AUTHORITY\SELF .1365 13:12:42 (4) ||| AceType: ............................. &h0 .1366 13:12:42 (4) ACCESS_ALLOWED_ACE_TYPE .1367 13:12:42 (4) ||| AceFlags: ............................ &h0 .1368 13:12:42 (4) ||| AccessMask: .......................... &h7 .1369 13:12:42 (4) DCOM_RIGHT_EXECUTE .1370 13:12:42 (4) DCOM_RIGHT_ACCESS_LOCAL .1371 13:12:42 (4) DCOM_RIGHT_ACCESS_REMOTE .1372 13:12:42 (4) ||+-------------------------------------------------------------------------------------------------------------- .1373 13:12:42 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1374 13:12:42 (4) ||| Trustee: ............................. NT AUTHORITY\SYSTEM .1375 13:12:42 (4) ||| AceType: ............................. &h0 .1376 13:12:42 (4) ACCESS_ALLOWED_ACE_TYPE .1377 13:12:42 (4) ||| AceFlags: ............................ &h0 .1378 13:12:42 (4) ||| AccessMask: .......................... &h3 .1379 13:12:42 (4) DCOM_RIGHT_EXECUTE .1380 13:12:42 (4) DCOM_RIGHT_ACCESS_LOCAL .1381 13:12:42 (4) ||+-------------------------------------------------------------------------------------------------------------- .1382 13:12:42 (4) |+--------------------------------------------------------------------------------------------------------------- .1383 13:12:42 (4) +----------------------------------------------------------------------------------------------------------------- .1384 13:12:42 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1385 13:12:42 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1386 13:12:42 (3) .1387 13:12:42 (3) Deciphering DCOM security for 'My Computer' (Access Permissions/Edit Limits) .1388 13:12:42 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Microsoft\Ole\MachineAccessRestriction'. .1389 13:12:43 (4) +- Security Descriptor ------------------------------------------------------------------------------------------ .1390 13:12:43 (4) | Owner: ................................. BUILTIN\Administratorzy .1391 13:12:43 (4) | Group: ................................. BUILTIN\Administratorzy .1392 13:12:43 (4) | Revision: .............................. 1 .1393 13:12:43 (4) | Control: ............................... &h8004 .1394 13:12:43 (4) SE_DACL_PRESENT .1395 13:12:43 (4) SE_SELF_RELATIVE .1396 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1397 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1398 13:12:43 (4) ||| Trustee: ............................. Wszyscy .1399 13:12:43 (4) ||| AceType: ............................. &h0 .1400 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1401 13:12:43 (4) ||| AceFlags: ............................ &h0 .1402 13:12:43 (4) ||| AccessMask: .......................... &h7 .1403 13:12:43 (4) DCOM_RIGHT_EXECUTE .1404 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1405 13:12:43 (4) DCOM_RIGHT_ACCESS_REMOTE .1406 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1407 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1408 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE NT\LOGOWANIE ANONIMOWE .1409 13:12:43 (4) ||| AceType: ............................. &h0 .1410 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1411 13:12:43 (4) ||| AceFlags: ............................ &h0 .1412 13:12:43 (4) ||| AccessMask: .......................... &h3 .1413 13:12:43 (4) DCOM_RIGHT_EXECUTE .1414 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1415 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1416 13:12:43 (4) ||+- ACE #03 ---------------------------------------------------------------------------------------------------- .1417 13:12:43 (4) ||| Trustee: ............................. BUILTIN\U¿ytkownicy DCOM .1418 13:12:43 (4) ||| AceType: ............................. &h0 .1419 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1420 13:12:43 (4) ||| AceFlags: ............................ &h0 .1421 13:12:43 (4) ||| AccessMask: .......................... &h7 .1422 13:12:43 (4) DCOM_RIGHT_EXECUTE .1423 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1424 13:12:43 (4) DCOM_RIGHT_ACCESS_REMOTE .1425 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1426 13:12:43 (4) ||+- ACE #04 ---------------------------------------------------------------------------------------------------- .1427 13:12:43 (4) ||| Trustee: ............................. BUILTIN\U¿ytkownicy dzienników wydajnoœci .1428 13:12:43 (4) ||| AceType: ............................. &h0 .1429 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1430 13:12:43 (4) ||| AceFlags: ............................ &h0 .1431 13:12:43 (4) ||| AccessMask: .......................... &h7 .1432 13:12:43 (4) DCOM_RIGHT_EXECUTE .1433 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1434 13:12:43 (4) DCOM_RIGHT_ACCESS_REMOTE .1435 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1436 13:12:43 (4) ||+- ACE #05 ---------------------------------------------------------------------------------------------------- .1437 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE PAKIETEM APLIKACJI\WSZYSTKIE PAKIETY APLIKACJI .1438 13:12:43 (4) ||| AceType: ............................. &h0 .1439 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1440 13:12:43 (4) ||| AceFlags: ............................ &h0 .1441 13:12:43 (4) ||| AccessMask: .......................... &h3 .1442 13:12:43 (4) DCOM_RIGHT_EXECUTE .1443 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1444 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1445 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1446 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1447 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1448 13:12:43 (2) !! WARNING: Actual trustee 'WSZYSCY' has been ADDED for ACE #1. .1449 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE NT\LOGOWANIE ANONIMOWE' has been ADDED for ACE #2. .1450 13:12:43 (2) !! WARNING: Actual trustee 'BUILTIN\U¯YTKOWNICY DCOM' has been ADDED for ACE #3. .1451 13:12:43 (2) !! WARNING: Actual trustee 'BUILTIN\U¯YTKOWNICY DZIENNIKÓW WYDAJNOŒCI' has been ADDED for ACE #4. .1452 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE PAKIETEM APLIKACJI\WSZYSTKIE PAKIETY APLIKACJI' has been ADDED for ACE #5. .1453 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1454 13:12:43 (2) !! WARNING: Default trustee 'NT AUTHORITY\ANONYMOUS LOGON' has been REMOVED! .1455 13:12:43 (2) !! WARNING: Default trustee 'BUILTIN\PERFORMANCE LOG USERS' has been REMOVED! .1456 13:12:43 (2) !! WARNING: Default trustee 'EVERYONE' has been REMOVED! .1457 13:12:43 (3) .1458 13:12:43 (3) Deciphering DCOM security for 'My Computer' (Launch & Activation Permissions/Edit Default) .1459 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Microsoft\Ole\DefaultLaunchPermission'. .1460 13:12:43 (4) +- Security Descriptor ------------------------------------------------------------------------------------------ .1461 13:12:43 (4) | Owner: ................................. BUILTIN\Administratorzy .1462 13:12:43 (4) | Group: ................................. BUILTIN\Administratorzy .1463 13:12:43 (4) | Revision: .............................. 1 .1464 13:12:43 (4) | Control: ............................... &h8004 .1465 13:12:43 (4) SE_DACL_PRESENT .1466 13:12:43 (4) SE_SELF_RELATIVE .1467 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1468 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1469 13:12:43 (4) ||| Trustee: ............................. BUILTIN\Administratorzy .1470 13:12:43 (4) ||| AceType: ............................. &h0 .1471 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1472 13:12:43 (4) ||| AceFlags: ............................ &h0 .1473 13:12:43 (4) ||| AccessMask: .......................... &h1F .1474 13:12:43 (4) DCOM_RIGHT_EXECUTE .1475 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1476 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1477 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1478 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1479 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1480 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1481 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE NT\INTERAKTYWNA .1482 13:12:43 (4) ||| AceType: ............................. &h0 .1483 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1484 13:12:43 (4) ||| AceFlags: ............................ &h0 .1485 13:12:43 (4) ||| AccessMask: .......................... &h1F .1486 13:12:43 (4) DCOM_RIGHT_EXECUTE .1487 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1488 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1489 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1490 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1491 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1492 13:12:43 (4) ||+- ACE #03 ---------------------------------------------------------------------------------------------------- .1493 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE NT\SYSTEM .1494 13:12:43 (4) ||| AceType: ............................. &h0 .1495 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1496 13:12:43 (4) ||| AceFlags: ............................ &h0 .1497 13:12:43 (4) ||| AccessMask: .......................... &h1F .1498 13:12:43 (4) DCOM_RIGHT_EXECUTE .1499 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1500 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1501 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1502 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1503 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1504 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1505 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1506 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1507 13:12:43 (2) !! WARNING: Actual trustee 'BUILTIN\ADMINISTRATORZY' has been ADDED for ACE #1. .1508 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE NT\INTERAKTYWNA' has been ADDED for ACE #2. .1509 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE NT\SYSTEM' has been ADDED for ACE #3. .1510 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1511 13:12:43 (2) !! WARNING: Default trustee 'BUILTIN\ADMINISTRATORS' has been REMOVED! .1512 13:12:43 (2) !! WARNING: Default trustee 'NT AUTHORITY\INTERACTIVE' has been REMOVED! .1513 13:12:43 (2) !! WARNING: Default trustee 'NT AUTHORITY\SYSTEM' has been REMOVED! .1514 13:12:43 (3) .1515 13:12:43 (3) Deciphering DCOM security for 'My Computer' (Launch & Activation Permissions/Edit Limits) .1516 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Microsoft\Ole\MachineLaunchRestriction'. .1517 13:12:43 (4) +- Security Descriptor ------------------------------------------------------------------------------------------ .1518 13:12:43 (4) | Owner: ................................. BUILTIN\Administratorzy .1519 13:12:43 (4) | Group: ................................. BUILTIN\Administratorzy .1520 13:12:43 (4) | Revision: .............................. 1 .1521 13:12:43 (4) | Control: ............................... &h8004 .1522 13:12:43 (4) SE_DACL_PRESENT .1523 13:12:43 (4) SE_SELF_RELATIVE .1524 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1525 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1526 13:12:43 (4) ||| Trustee: ............................. BUILTIN\Administratorzy .1527 13:12:43 (4) ||| AceType: ............................. &h0 .1528 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1529 13:12:43 (4) ||| AceFlags: ............................ &h0 .1530 13:12:43 (4) ||| AccessMask: .......................... &h1F .1531 13:12:43 (4) DCOM_RIGHT_EXECUTE .1532 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1533 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1534 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1535 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1536 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1537 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1538 13:12:43 (4) ||| Trustee: ............................. Wszyscy .1539 13:12:43 (4) ||| AceType: ............................. &h0 .1540 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1541 13:12:43 (4) ||| AceFlags: ............................ &h0 .1542 13:12:43 (4) ||| AccessMask: .......................... &hB .1543 13:12:43 (4) DCOM_RIGHT_EXECUTE .1544 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1545 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1546 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1547 13:12:43 (4) ||+- ACE #03 ---------------------------------------------------------------------------------------------------- .1548 13:12:43 (4) ||| Trustee: ............................. BUILTIN\U¿ytkownicy DCOM .1549 13:12:43 (4) ||| AceType: ............................. &h0 .1550 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1551 13:12:43 (4) ||| AceFlags: ............................ &h0 .1552 13:12:43 (4) ||| AccessMask: .......................... &h1F .1553 13:12:43 (4) DCOM_RIGHT_EXECUTE .1554 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1555 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1556 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1557 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1558 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1559 13:12:43 (4) ||+- ACE #04 ---------------------------------------------------------------------------------------------------- .1560 13:12:43 (4) ||| Trustee: ............................. BUILTIN\U¿ytkownicy dzienników wydajnoœci .1561 13:12:43 (4) ||| AceType: ............................. &h0 .1562 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1563 13:12:43 (4) ||| AceFlags: ............................ &h0 .1564 13:12:43 (4) ||| AccessMask: .......................... &h1F .1565 13:12:43 (4) DCOM_RIGHT_EXECUTE .1566 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1567 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1568 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1569 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1570 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1571 13:12:43 (4) ||+- ACE #05 ---------------------------------------------------------------------------------------------------- .1572 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE PAKIETEM APLIKACJI\WSZYSTKIE PAKIETY APLIKACJI .1573 13:12:43 (4) ||| AceType: ............................. &h0 .1574 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1575 13:12:43 (4) ||| AceFlags: ............................ &h0 .1576 13:12:43 (4) ||| AccessMask: .......................... &hB .1577 13:12:43 (4) DCOM_RIGHT_EXECUTE .1578 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1579 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1580 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1581 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1582 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1583 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1584 13:12:43 (2) !! WARNING: Actual trustee 'BUILTIN\ADMINISTRATORZY' has been ADDED for ACE #1. .1585 13:12:43 (2) !! WARNING: Actual trustee 'WSZYSCY' has been ADDED for ACE #2. .1586 13:12:43 (2) !! WARNING: Actual trustee 'BUILTIN\U¯YTKOWNICY DCOM' has been ADDED for ACE #3. .1587 13:12:43 (2) !! WARNING: Actual trustee 'BUILTIN\U¯YTKOWNICY DZIENNIKÓW WYDAJNOŒCI' has been ADDED for ACE #4. .1588 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE PAKIETEM APLIKACJI\WSZYSTKIE PAKIETY APLIKACJI' has been ADDED for ACE #5. .1589 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1590 13:12:43 (2) !! WARNING: Default trustee 'BUILTIN\ADMINISTRATORS' has been REMOVED! .1591 13:12:43 (2) !! WARNING: Default trustee 'BUILTIN\PERFORMANCE LOG USERS' has been REMOVED! .1592 13:12:43 (2) !! WARNING: Default trustee 'EVERYONE' has been REMOVED! .1593 13:12:43 (3) .1594 13:12:43 (3) Deciphering DCOM security for 'Windows Management Instrumentation' (Access Permissions) .1595 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\AccessPermission'. .1596 13:12:43 (4) +- Security Descriptor (DEFAULT) --------------------------------------------------------------------------------- .1597 13:12:43 (4) | Owner: ................................. BUILTIN\Administrators .1598 13:12:43 (4) | Group: ................................. BUILTIN\Administrators .1599 13:12:43 (4) | Revision: .............................. 1 .1600 13:12:43 (4) | Control: ............................... &h8004 .1601 13:12:43 (4) SE_DACL_PRESENT .1602 13:12:43 (4) SE_SELF_RELATIVE .1603 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1604 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1605 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SELF .1606 13:12:43 (4) ||| AceType: ............................. &h0 .1607 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1608 13:12:43 (4) ||| AceFlags: ............................ &h0 .1609 13:12:43 (4) ||| AccessMask: .......................... &h7 .1610 13:12:43 (4) DCOM_RIGHT_EXECUTE .1611 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1612 13:12:43 (4) DCOM_RIGHT_ACCESS_REMOTE .1613 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1614 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1615 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SYSTEM .1616 13:12:43 (4) ||| AceType: ............................. &h0 .1617 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1618 13:12:43 (4) ||| AceFlags: ............................ &h0 .1619 13:12:43 (4) ||| AccessMask: .......................... &h3 .1620 13:12:43 (4) DCOM_RIGHT_EXECUTE .1621 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1622 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1623 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1624 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1625 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1626 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1627 13:12:43 (3) .1628 13:12:43 (3) Deciphering DCOM security for 'Windows Management Instrumentation' (Launch & Activation Permissions) .1629 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LaunchPermission'. .1630 13:12:43 (4) +- Security Descriptor ------------------------------------------------------------------------------------------ .1631 13:12:43 (4) | Revision: .............................. 1 .1632 13:12:43 (4) | Control: ............................... &h0 .1633 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1634 13:12:43 (3) .1635 13:12:43 (3) Deciphering DCOM security for 'Microsoft WMI Provider Subsystem Host' (Access Permissions) .1636 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Classes\AppID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\AccessPermission'. .1637 13:12:43 (4) +- Security Descriptor (DEFAULT) --------------------------------------------------------------------------------- .1638 13:12:43 (4) | Owner: ................................. BUILTIN\Administrators .1639 13:12:43 (4) | Group: ................................. BUILTIN\Administrators .1640 13:12:43 (4) | Revision: .............................. 1 .1641 13:12:43 (4) | Control: ............................... &h8004 .1642 13:12:43 (4) SE_DACL_PRESENT .1643 13:12:43 (4) SE_SELF_RELATIVE .1644 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1645 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1646 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SELF .1647 13:12:43 (4) ||| AceType: ............................. &h0 .1648 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1649 13:12:43 (4) ||| AceFlags: ............................ &h0 .1650 13:12:43 (4) ||| AccessMask: .......................... &h7 .1651 13:12:43 (4) DCOM_RIGHT_EXECUTE .1652 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1653 13:12:43 (4) DCOM_RIGHT_ACCESS_REMOTE .1654 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1655 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1656 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SYSTEM .1657 13:12:43 (4) ||| AceType: ............................. &h0 .1658 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1659 13:12:43 (4) ||| AceFlags: ............................ &h0 .1660 13:12:43 (4) ||| AccessMask: .......................... &h3 .1661 13:12:43 (4) DCOM_RIGHT_EXECUTE .1662 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1663 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1664 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1665 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1666 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1667 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1668 13:12:43 (3) .1669 13:12:43 (3) Deciphering DCOM security for 'Microsoft WMI Provider Subsystem Host' (Launch & Activation Permissions) .1670 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Classes\AppID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LaunchPermission'. .1671 13:12:43 (4) +- Security Descriptor ------------------------------------------------------------------------------------------ .1672 13:12:43 (4) | Owner: ................................. ZARZ¥DZANIE NT\SYSTEM .1673 13:12:43 (4) | Group: ................................. BUILTIN\Administratorzy .1674 13:12:43 (4) | Revision: .............................. 1 .1675 13:12:43 (4) | Control: ............................... &h8004 .1676 13:12:43 (4) SE_DACL_PRESENT .1677 13:12:43 (4) SE_SELF_RELATIVE .1678 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1679 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1680 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE NT\INTERAKTYWNA .1681 13:12:43 (4) ||| AceType: ............................. &h0 .1682 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1683 13:12:43 (4) ||| AceFlags: ............................ &h3 .1684 13:12:43 (4) OBJECT_INHERIT_ACE .1685 13:12:43 (4) CONTAINER_INHERIT_ACE .1686 13:12:43 (4) ||| AccessMask: .......................... &h1 .1687 13:12:43 (4) DCOM_RIGHT_EXECUTE .1688 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1689 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1690 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE NT\SYSTEM .1691 13:12:43 (4) ||| AceType: ............................. &h0 .1692 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1693 13:12:43 (4) ||| AceFlags: ............................ &h3 .1694 13:12:43 (4) OBJECT_INHERIT_ACE .1695 13:12:43 (4) CONTAINER_INHERIT_ACE .1696 13:12:43 (4) ||| AccessMask: .......................... &h1 .1697 13:12:43 (4) DCOM_RIGHT_EXECUTE .1698 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1699 13:12:43 (4) ||+- ACE #03 ---------------------------------------------------------------------------------------------------- .1700 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE NT\US£UGA LOKALNA .1701 13:12:43 (4) ||| AceType: ............................. &h0 .1702 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1703 13:12:43 (4) ||| AceFlags: ............................ &h3 .1704 13:12:43 (4) OBJECT_INHERIT_ACE .1705 13:12:43 (4) CONTAINER_INHERIT_ACE .1706 13:12:43 (4) ||| AccessMask: .......................... &h1 .1707 13:12:43 (4) DCOM_RIGHT_EXECUTE .1708 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1709 13:12:43 (4) ||+- ACE #04 ---------------------------------------------------------------------------------------------------- .1710 13:12:43 (4) ||| Trustee: ............................. ZARZ¥DZANIE NT\US£UGA SIECIOWA .1711 13:12:43 (4) ||| AceType: ............................. &h0 .1712 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1713 13:12:43 (4) ||| AceFlags: ............................ &h3 .1714 13:12:43 (4) OBJECT_INHERIT_ACE .1715 13:12:43 (4) CONTAINER_INHERIT_ACE .1716 13:12:43 (4) ||| AccessMask: .......................... &h1 .1717 13:12:43 (4) DCOM_RIGHT_EXECUTE .1718 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1719 13:12:43 (4) ||+- ACE #05 ---------------------------------------------------------------------------------------------------- .1720 13:12:43 (4) ||| Trustee: ............................. BUILTIN\Administratorzy .1721 13:12:43 (4) ||| AceType: ............................. &h0 .1722 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1723 13:12:43 (4) ||| AceFlags: ............................ &h3 .1724 13:12:43 (4) OBJECT_INHERIT_ACE .1725 13:12:43 (4) CONTAINER_INHERIT_ACE .1726 13:12:43 (4) ||| AccessMask: .......................... &h1 .1727 13:12:43 (4) DCOM_RIGHT_EXECUTE .1728 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1729 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1730 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1731 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1732 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE NT\INTERAKTYWNA' has been ADDED for ACE #1. .1733 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE NT\SYSTEM' has been ADDED for ACE #2. .1734 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE NT\US£UGA LOKALNA' has been ADDED for ACE #3. .1735 13:12:43 (2) !! WARNING: Actual trustee 'ZARZ¥DZANIE NT\US£UGA SIECIOWA' has been ADDED for ACE #4. .1736 13:12:43 (2) !! WARNING: Actual trustee 'BUILTIN\ADMINISTRATORZY' has been ADDED for ACE #5. .1737 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1738 13:12:43 (2) !! WARNING: Default trustee 'BUILTIN\ADMINISTRATORS' has been REMOVED! .1739 13:12:43 (2) !! WARNING: Default trustee 'NT AUTHORITY\INTERACTIVE' has been REMOVED! .1740 13:12:43 (2) !! WARNING: Default trustee 'NT AUTHORITY\SYSTEM' has been REMOVED! .1741 13:12:43 (2) !! WARNING: Default trustee 'NT AUTHORITY\NETWORK SERVICE' has been REMOVED! .1742 13:12:43 (2) !! WARNING: Default trustee 'NT AUTHORITY\LOCAL SERVICE' has been REMOVED! .1743 13:12:43 (3) .1744 13:12:43 (3) Deciphering DCOM security for 'Microsoft WBEM UnSecured Apartment' (Access Permissions) .1745 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Classes\AppID\{49BD2028-1523-11D1-AD79-00C04FD8FDFF}\AccessPermission'. .1746 13:12:43 (4) +- Security Descriptor (DEFAULT) --------------------------------------------------------------------------------- .1747 13:12:43 (4) | Owner: ................................. BUILTIN\Administrators .1748 13:12:43 (4) | Group: ................................. BUILTIN\Administrators .1749 13:12:43 (4) | Revision: .............................. 1 .1750 13:12:43 (4) | Control: ............................... &h8004 .1751 13:12:43 (4) SE_DACL_PRESENT .1752 13:12:43 (4) SE_SELF_RELATIVE .1753 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1754 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1755 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SELF .1756 13:12:43 (4) ||| AceType: ............................. &h0 .1757 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1758 13:12:43 (4) ||| AceFlags: ............................ &h0 .1759 13:12:43 (4) ||| AccessMask: .......................... &h7 .1760 13:12:43 (4) DCOM_RIGHT_EXECUTE .1761 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1762 13:12:43 (4) DCOM_RIGHT_ACCESS_REMOTE .1763 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1764 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1765 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SYSTEM .1766 13:12:43 (4) ||| AceType: ............................. &h0 .1767 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1768 13:12:43 (4) ||| AceFlags: ............................ &h0 .1769 13:12:43 (4) ||| AccessMask: .......................... &h3 .1770 13:12:43 (4) DCOM_RIGHT_EXECUTE .1771 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1772 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1773 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1774 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1775 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1776 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1777 13:12:43 (3) .1778 13:12:43 (3) Deciphering DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions) .1779 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Classes\AppID\{49BD2028-1523-11D1-AD79-00C04FD8FDFF}\LaunchPermission'. .1780 13:12:43 (4) +- Security Descriptor (DEFAULT) --------------------------------------------------------------------------------- .1781 13:12:43 (4) | Owner: ................................. BUILTIN\Administrators .1782 13:12:43 (4) | Group: ................................. BUILTIN\Administrators .1783 13:12:43 (4) | Revision: .............................. 1 .1784 13:12:43 (4) | Control: ............................... &h8004 .1785 13:12:43 (4) SE_DACL_PRESENT .1786 13:12:43 (4) SE_SELF_RELATIVE .1787 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1788 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1789 13:12:43 (4) ||| Trustee: ............................. BUILTIN\Administrators .1790 13:12:43 (4) ||| AceType: ............................. &h0 .1791 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1792 13:12:43 (4) ||| AceFlags: ............................ &h0 .1793 13:12:43 (4) ||| AccessMask: .......................... &h1F .1794 13:12:43 (4) DCOM_RIGHT_EXECUTE .1795 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1796 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1797 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1798 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1799 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1800 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1801 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\INTERACTIVE .1802 13:12:43 (4) ||| AceType: ............................. &h0 .1803 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1804 13:12:43 (4) ||| AceFlags: ............................ &h0 .1805 13:12:43 (4) ||| AccessMask: .......................... &h1F .1806 13:12:43 (4) DCOM_RIGHT_EXECUTE .1807 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1808 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1809 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1810 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1811 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1812 13:12:43 (4) ||+- ACE #03 ---------------------------------------------------------------------------------------------------- .1813 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SYSTEM .1814 13:12:43 (4) ||| AceType: ............................. &h0 .1815 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1816 13:12:43 (4) ||| AceFlags: ............................ &h0 .1817 13:12:43 (4) ||| AccessMask: .......................... &h1F .1818 13:12:43 (4) DCOM_RIGHT_EXECUTE .1819 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1820 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1821 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1822 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1823 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1824 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1825 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1826 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1827 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1828 13:12:43 (3) .1829 13:12:43 (3) Deciphering DCOM security for 'Microsoft WBEM Active Scripting Event Consumer Provider' (Access Permissions) .1830 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Classes\AppID\{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}\AccessPermission'. .1831 13:12:43 (4) +- Security Descriptor (DEFAULT) --------------------------------------------------------------------------------- .1832 13:12:43 (4) | Owner: ................................. BUILTIN\Administrators .1833 13:12:43 (4) | Group: ................................. BUILTIN\Administrators .1834 13:12:43 (4) | Revision: .............................. 1 .1835 13:12:43 (4) | Control: ............................... &h8004 .1836 13:12:43 (4) SE_DACL_PRESENT .1837 13:12:43 (4) SE_SELF_RELATIVE .1838 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1839 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1840 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SELF .1841 13:12:43 (4) ||| AceType: ............................. &h0 .1842 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1843 13:12:43 (4) ||| AceFlags: ............................ &h0 .1844 13:12:43 (4) ||| AccessMask: .......................... &h7 .1845 13:12:43 (4) DCOM_RIGHT_EXECUTE .1846 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1847 13:12:43 (4) DCOM_RIGHT_ACCESS_REMOTE .1848 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1849 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1850 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SYSTEM .1851 13:12:43 (4) ||| AceType: ............................. &h0 .1852 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1853 13:12:43 (4) ||| AceFlags: ............................ &h0 .1854 13:12:43 (4) ||| AccessMask: .......................... &h3 .1855 13:12:43 (4) DCOM_RIGHT_EXECUTE .1856 13:12:43 (4) DCOM_RIGHT_ACCESS_LOCAL .1857 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1858 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1859 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1860 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1861 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1862 13:12:43 (3) .1863 13:12:43 (3) Deciphering DCOM security for 'Microsoft WBEM Active Scripting Event Consumer Provider' (Launch & Activation Permissions) .1864 13:12:43 (4) Reading registry (REG_BINARY) 'HKLM\SOFTWARE\Classes\AppID\{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}\LaunchPermission'. .1865 13:12:43 (4) +- Security Descriptor (DEFAULT) --------------------------------------------------------------------------------- .1866 13:12:43 (4) | Owner: ................................. BUILTIN\Administrators .1867 13:12:43 (4) | Group: ................................. BUILTIN\Administrators .1868 13:12:43 (4) | Revision: .............................. 1 .1869 13:12:43 (4) | Control: ............................... &h8004 .1870 13:12:43 (4) SE_DACL_PRESENT .1871 13:12:43 (4) SE_SELF_RELATIVE .1872 13:12:43 (4) |+- DiscretionaryAcl -------------------------------------------------------------------------------------------- .1873 13:12:43 (4) ||+- ACE #01 ---------------------------------------------------------------------------------------------------- .1874 13:12:43 (4) ||| Trustee: ............................. BUILTIN\Administrators .1875 13:12:43 (4) ||| AceType: ............................. &h0 .1876 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1877 13:12:43 (4) ||| AceFlags: ............................ &h0 .1878 13:12:43 (4) ||| AccessMask: .......................... &h1F .1879 13:12:43 (4) DCOM_RIGHT_EXECUTE .1880 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1881 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1882 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1883 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1884 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1885 13:12:43 (4) ||+- ACE #02 ---------------------------------------------------------------------------------------------------- .1886 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\INTERACTIVE .1887 13:12:43 (4) ||| AceType: ............................. &h0 .1888 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1889 13:12:43 (4) ||| AceFlags: ............................ &h0 .1890 13:12:43 (4) ||| AccessMask: .......................... &h1F .1891 13:12:43 (4) DCOM_RIGHT_EXECUTE .1892 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1893 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1894 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1895 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1896 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1897 13:12:43 (4) ||+- ACE #03 ---------------------------------------------------------------------------------------------------- .1898 13:12:43 (4) ||| Trustee: ............................. NT AUTHORITY\SYSTEM .1899 13:12:43 (4) ||| AceType: ............................. &h0 .1900 13:12:43 (4) ACCESS_ALLOWED_ACE_TYPE .1901 13:12:43 (4) ||| AceFlags: ............................ &h0 .1902 13:12:43 (4) ||| AccessMask: .......................... &h1F .1903 13:12:43 (4) DCOM_RIGHT_EXECUTE .1904 13:12:43 (4) DCOM_RIGHT_LAUNCH_LOCAL .1905 13:12:43 (4) DCOM_RIGHT_LAUNCH_REMOTE .1906 13:12:43 (4) DCOM_RIGHT_ACTIVATE_LOCAL .1907 13:12:43 (4) DCOM_RIGHT_ACTIVATE_REMOTE .1908 13:12:43 (4) ||+-------------------------------------------------------------------------------------------------------------- .1909 13:12:43 (4) |+--------------------------------------------------------------------------------------------------------------- .1910 13:12:43 (4) +----------------------------------------------------------------------------------------------------------------- .1911 13:12:43 (3) Verifying actual trustees in ACEs against the default trustees in ACEs to locate actual trustee additions. .1912 13:12:43 (3) Verifying default trustee in ACEs against the actual trustees in ACEs to locate default trustee removals. .1913 13:12:43 (3) .1914 13:12:43 (0) ** Verifying WMI ProgID registrations. .1915 13:12:43 (3) WMI object ProgID 'WBemscripting.SWBemlocator' instantiated'. .1916 13:12:43 (3) WMI object ProgID 'WbemScripting.SWbemDateTime' instantiated'. .1917 13:12:43 (3) WMI object ProgID 'WbemScripting.SWbemObjectPath' instantiated'. .1918 13:12:43 (3) WMI object ProgID 'WbemScripting.SWbemSink' instantiated'. .1919 13:12:43 (3) WMI object ProgID 'WbemScripting.SWbemLocator' instantiated'. .1920 13:12:43 (3) WMI object ProgID 'WbemScripting.SWbemNamedValueSet' instantiated'. .1921 13:12:43 (3) WMI object ProgID 'WbemScripting.SWbemRefresher' instantiated'. .1922 13:12:43 (0) ** Verifying Windows Firewall setup. .1923 13:12:43 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\MpsSvc\DisplayName'. .1924 13:12:43 (3) Windows Firewall service is running. .1925 13:12:43 (3) Current firewall profile is PRIVATE. .1926 13:12:43 (3) - Inbound connections that do not match a rule are BLOCKED. .1927 13:12:43 (3) - Outbound connections that do not match a rule are ALLOWED. .1928 13:12:43 (3) .1929 13:12:43 (3) Group rule name: Windows Management Instrumentation (WMI) .1930 13:12:44 (3) Enabled: False .1931 13:12:44 (3) Changing or adding a firewall rule (or group) to the current profile will take effect. .1932 13:12:44 (3) .1933 13:12:44 (0) ** Verifying WMI Core registry settings (WBEM). .1934 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\Scripting\Default Namespace'. .1935 13:12:44 (3) WMI registry key (REG_SZ) 'Default Namespace' is correct. .1936 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Microsoft\WBEM\Scripting\Default Impersonation Level'. .1937 13:12:44 (3) WMI registry key (REG_DWORD) 'Default Impersonation Level' is correct. .1938 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\ADAPDelay'. .1939 13:12:44 (3) WMI registry key (REG_DWORD) 'ADAPDelay' is correct. .1940 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver'. .1941 13:12:44 (3) WMI registry key (REG_SZ) 'Default Repository Driver' is correct. .1942 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents'. .1943 13:12:44 (3) WMI registry key (REG_SZ) 'EnableEvents' is correct. .1944 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory'. .1945 13:12:44 (3) WMI registry key (REG_EXPAND_SZ) 'Logging Directory' is correct. .1946 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory'. .1947 13:12:44 (3) WMI registry key (REG_EXPAND_SZ) 'Repository Directory' is correct. .1948 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\TimeOutMs'. .1949 13:12:44 (3) WMI registry key (REG_SZ) 'TimeOutMs' is correct. .1950 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\UnsecappAccessControlDefault'. .1951 13:12:44 (3) WMI registry key (REG_SZ) 'UnsecappAccessControlDefault' is correct. .1952 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory'. .1953 13:12:44 (3) WMI registry key (REG_EXPAND_SZ) 'Working Directory' is correct. .1954 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Autorecover MOFs'. .1955 13:12:44 (3) WMI registry hive (REG_SZ) 'Autorecover MOFs' is present. .1956 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Log File Max Size'. .1957 13:12:44 (3) WMI registry key (REG_SZ) 'Log File Max Size' is correct. .1958 13:12:44 (0) ** Verifying WMI Service registry settings (SVCHOST, WINMGMT). .1959 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SYSTEM\CurrentControlSet\Services\Winmgmt\Start'. .1960 13:12:44 (4) Reading registry (REG_MULTI_SZ) 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\netsvcs'. .1961 13:12:44 (4) Reading registry (REG_MULTI_SZ) 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\winmgmt'. .1962 13:12:44 (3) 'Windows Management Instrumentation' (WINMGMT) is running as a SHARED HOST SERVICE. .1963 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\Type'. .1964 13:12:44 (3) WMI registry key (REG_DWORD) 'Type' is correct. .1965 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\Start'. .1966 13:12:44 (3) WMI registry key (REG_DWORD) 'Start' is correct. .1967 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\ErrorControl'. .1968 13:12:44 (3) WMI registry key (REG_DWORD) 'ErrorControl' is correct. .1969 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\ImagePath'. .1970 13:12:44 (3) WMI registry key (REG_EXPAND_SZ) 'ImagePath' is correct. .1971 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\DisplayName'. .1972 13:12:44 (3) WMI registry hive (REG_SZ) 'DisplayName' is present. .1973 13:12:44 (4) Reading registry (REG_MULTI_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\DependOnService'. .1974 13:12:44 (3) WMI registry key (REG_MULTI_SZ) 'DependOnService' is correct. .1975 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\ObjectName'. .1976 13:12:44 (3) WMI registry key (REG_SZ) 'ObjectName' is correct. .1977 13:12:44 (4) Reading registry (REG_BINARY) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\FailureActions'. .1978 13:12:44 (3) WMI registry hive (REG_BINARY) 'FailureActions' is present. .1979 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\Description'. .1980 13:12:44 (3) WMI registry hive (REG_SZ) 'Description' is present. .1981 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\Parameters\ServiceDll'. .1982 13:12:44 (3) WMI registry key (REG_EXPAND_SZ) 'ServiceDll' is correct. .1983 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\Parameters\ServiceDllUnloadOnStop'. .1984 13:12:44 (3) WMI registry key (REG_DWORD) 'ServiceDllUnloadOnStop' is correct. .1985 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\Parameters\ServiceMain'. .1986 13:12:44 (3) WMI registry key (REG_SZ) 'ServiceMain' is correct. .1987 13:12:44 (3) 'Windows Management Instrumentation' service registered correctly (WINMGMT). .1988 13:12:44 (0) ** Verifying WMI Service known dependents. .1989 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\wscsvc\DisplayName'. .1990 13:12:44 (4) Reading registry (REG_MULTI_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\wscsvc\DependOnService'. .1991 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SYSTEM\CurrentControlSet\Services\wscsvc\Start'. .1992 13:12:44 (2) !! WARNING: 'Security Center' (WSCSVC, StartMode='Automatic') is installed depends on WMI Service. .1993 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\DisplayName'. .1994 13:12:44 (4) Reading registry (REG_MULTI_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\DependOnService'. .1995 13:12:44 (4) Reading registry (REG_DWORD) 'HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Start'. .1996 13:12:44 (2) !! WARNING: 'Internet Connection Sharing (ICS)' (SHAREDACCESS, StartMode='Manual') is installed depends on WMI Service. .1997 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\CcmExec\DisplayName'. .1998 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\6to4\DisplayName'. .1999 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeMGMT\DisplayName'. .2000 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\IIMFilter\DisplayName'. .2001 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\RtcSrv\DisplayName'. .2002 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\MngAgent\DisplayName'. .2003 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\ADSBuilder\DisplayName'. .2004 13:12:44 (4) Reading registry (REG_SZ) 'HKLM\SYSTEM\CurrentControlSet\Services\ADSPXE\DisplayName'. .2005 13:12:44 (0) ** Verifying 'RPCSS' service status. .2006 13:12:44 (3) Verifying 'RPCSS' service started state. .2007 13:12:44 (3) 'RPCSS' service IS started. .2008 13:12:44 (0) ** Verifying 'WINMGMT' service status. .2009 13:12:44 (3) Verifying 'WINMGMT' service started state. .2010 13:12:44 (3) 'WINMGMT' service IS started. .2011 13:12:44 (0) ** Verifying WMI providers loaded BEFORE WMIDiag execution. .2012 13:12:44 (3) 2 WMI providers are currently loaded: .2013 13:12:45 (4) Provider: 'MSFT_PROVIDERSUBSYSTEM' (PID: 968, SVCHOST.EXE) .2014 13:12:45 (4) Provider Name: 'WMI information not available (This could be the case for an external application or a third party WMI provider)' .2015 13:12:45 (4) Namespace: 'ROOT\CIMV2' (i.e. 'WMI information not available (This could be the case for an external application or a third party WMI provider)') .2016 13:12:45 (4) Hosting Model: 'WMI information not available (This could be the case for an external application or a third party WMI provider)' (HostingSpecification=1) .2017 13:12:45 (4) Hosting Group: '' .2018 13:12:45 (4) User: '' .2019 13:12:45 (4) Provider Binary: 'WMI information not available (This could be the case for an external application or a third party WMI provider)' .2020 13:12:45 (4) MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)' .2021 13:12:45 (4) .2022 13:12:45 (4) Provider: 'SCM EVENT PROVIDER' (PID: 968, SVCHOST.EXE) .2023 13:12:45 (4) Provider Name: 'WMI information not available (This could be the case for an external application or a third party WMI provider)' .2024 13:12:45 (4) Namespace: 'ROOT\CIMV2' (i.e. 'WMI information not available (This could be the case for an external application or a third party WMI provider)') .2025 13:12:45 (4) Hosting Model: 'WMI information not available (This could be the case for an external application or a third party WMI provider)' (HostingSpecification=10) .2026 13:12:45 (4) Hosting Group: '' .2027 13:12:45 (4) User: '' .2028 13:12:45 (4) Provider Binary: 'WMI information not available (This could be the case for an external application or a third party WMI provider)' .2029 13:12:45 (4) MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)' .2030 13:12:45 (4) .2031 13:12:45 (0) ** Verifying WMI namespace 'Root' (L=1). .2032 13:12:45 (3) Retrieving WMI system class(es) static information. .2033 13:12:45 (3) 45/45 system class(es) found. .2034 13:12:45 (3) Verifying Permanent subscription(s) for 'Root'. .2035 13:12:45 (3) 0 permanent subscription(s) in 'Root' namespace. .2036 13:12:45 (3) 0 Timer instruction(s) in 'Root' namespace. .2037 13:12:45 (0) ** Verifying WMI system settings. .2038 13:12:45 (3) - __CIMOMIdentification #1 --------------------------------------------------------------------------------- .2039 13:12:45 (3) SetupDateTime: ........................... .2040 13:12:45 (3) VersionCurrentlyRunning: ................. 6.3.9600.17415 .2041 13:12:45 (3) VersionUsedToCreateDB: ................... 6.3.9600.17415 .2042 13:12:45 (3) WorkingDirectory: ........................ %systemroot%\system32\wbem .2043 13:12:45 (3) - __ArbitratorConfiguration #1 ----------------------------------------------------------------------------- .2044 13:12:45 (3) OutstandingTasksPerUser: ................. 30 .2045 13:12:45 (3) OutstandingTasksTotal: ................... 3000 .2046 13:12:45 (3) PermanentSubscriptionsPerUser: ........... 1000 .2047 13:12:45 (3) PermanentSubscriptionsTotal: ............. 10000 .2048 13:12:45 (3) PollingInstructionsPerUser: .............. 1000 .2049 13:12:45 (3) PollingInstructionsTotal: ................ 10000 .2050 13:12:45 (3) PollingMemoryPerUser: .................... 5000000 .2051 13:12:45 (3) PollingMemoryTotal: ...................... 10000000 .2052 13:12:45 (3) QuotaRetryCount: ......................... 10 .2053 13:12:45 (3) QuotaRetryWaitInterval: .................. 15000 .2054 13:12:45 (3) TaskThreadsPerUser: ...................... 3 .2055 13:12:45 (3) TaskThreadsTotal: ........................ 30 .2056 13:12:45 (3) TemporarySubscriptionsPerUser: ........... 1000 .2057 13:12:45 (3) TemporarySubscriptionsTotal: ............. 10000 .2058 13:12:45 (3) TotalCacheDisk: .......................... 1048576 .2059 13:12:45 (3) TotalCacheDiskPerTask: ................... 51250 .2060 13:12:45 (3) TotalCacheDiskPerUser: ................... 102500 .2061 13:12:45 (3) TotalCacheMemory: ........................ 10240 .2062 13:12:45 (3) TotalCacheMemoryPerTask: ................. 1024 .2063 13:12:45 (3) TotalCacheMemoryPerUser: ................. 2048 .2064 13:12:45 (3) TotalUsers: .............................. 50 .2065 13:12:45 (3) - __ProviderHostQuotaConfiguration #1 ---------------------------------------------------------------------- .2066 13:12:45 (3) HandlesPerHost: .......................... 4096 .2067 13:12:45 (3) MemoryAllHosts: .......................... 1073741824 .2068 13:12:45 (3) MemoryPerHost: ........................... 536870912 .2069 13:12:45 (3) ProcessLimitAllHosts: .................... 32 .2070 13:12:45 (3) ThreadsPerHost: .......................... 256 .2071 13:12:45 (3) - __EventConsumerProviderCacheControl #1 ------------------------------------------------------------------- .2072 13:12:45 (3) ClearAfter: .............................. 00000000000030.000000:000 .2073 13:12:45 (3) - __EventProviderCacheControl #2 --------------------------------------------------------------------------- .2074 13:12:45 (3) ClearAfter: .............................. 00000000000030.000000:000 .2075 13:12:45 (3) - __EventSinkCacheControl #3 ------------------------------------------------------------------------------- .2076 13:12:45 (3) ClearAfter: .............................. 00000000000015.000000:000 .2077 13:12:45 (3) - __PropertyProviderCacheControl #4 ------------------------------------------------------------------------ .2078 13:12:45 (3) ClearAfter: .............................. 00000000000030.000000:000 .2079 13:12:45 (3) - __ObjectProviderCacheControl #5 -------------------------------------------------------------------------- .2080 13:12:45 (3) ClearAfter: .............................. 00000000000030.000000:000 .2081 13:12:45 (1) !! ERROR: (CheckWMIStaticData) : 0x80041003 - (WBEM_E_ACCESS_DENIED) Current user does not have permission to perform the action. .2082 13:12:45 (3) 0 WMI Provider CIM registration(s) found. .2083 13:12:45 (3) 75 class(es) found. (Inheritance level analysis=1). .2084 13:12:45 (3) Retrieving static information (MOF) of 'CIM_Indication' (I=1). .2085 13:12:45 (3) Qualifier information of 'CIM_Indication': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2086 13:12:45 (3) Requesting all static instances of 'CIM_Indication' in 'Root' (2016-08-19 13:12:45) ... .2087 13:12:45 (3) 0 static instance(s) found for 'CIM_Indication' in 'Root'. .2088 13:12:45 (3) Retrieving static information (MOF) of 'CIM_ClassIndication' (I=1). .2089 13:12:45 (3) Qualifier information of 'CIM_ClassIndication': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2090 13:12:45 (3) Requesting all static instances of 'CIM_ClassIndication' in 'Root' (2016-08-19 13:12:45) ... .2091 13:12:45 (3) 0 static instance(s) found for 'CIM_ClassIndication' in 'Root'. .2092 13:12:45 (3) Retrieving static information (MOF) of 'CIM_ClassDeletion' (I=1). .2093 13:12:45 (3) Qualifier information of 'CIM_ClassDeletion': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2094 13:12:45 (3) Requesting all static instances of 'CIM_ClassDeletion' in 'Root' (2016-08-19 13:12:45) ... .2095 13:12:46 (3) 0 static instance(s) found for 'CIM_ClassDeletion' in 'Root'. .2096 13:12:46 (3) Retrieving static information (MOF) of 'CIM_ClassCreation' (I=1). .2097 13:12:46 (3) Qualifier information of 'CIM_ClassCreation': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2098 13:12:46 (3) Requesting all static instances of 'CIM_ClassCreation' in 'Root' (2016-08-19 13:12:46) ... .2099 13:12:46 (3) 0 static instance(s) found for 'CIM_ClassCreation' in 'Root'. .2100 13:12:46 (3) Retrieving static information (MOF) of 'CIM_ClassModification' (I=1). .2101 13:12:46 (3) Qualifier information of 'CIM_ClassModification': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2102 13:12:46 (3) Requesting all static instances of 'CIM_ClassModification' in 'Root' (2016-08-19 13:12:46) ... .2103 13:12:46 (3) 0 static instance(s) found for 'CIM_ClassModification' in 'Root'. .2104 13:12:46 (3) Retrieving static information (MOF) of 'CIM_InstIndication' (I=1). .2105 13:12:46 (3) Qualifier information of 'CIM_InstIndication': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2106 13:12:46 (3) Requesting all static instances of 'CIM_InstIndication' in 'Root' (2016-08-19 13:12:46) ... .2107 13:12:46 (3) 0 static instance(s) found for 'CIM_InstIndication' in 'Root'. .2108 13:12:46 (3) Retrieving static information (MOF) of 'CIM_InstCreation' (I=1). .2109 13:12:46 (3) Qualifier information of 'CIM_InstCreation': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2110 13:12:46 (3) Requesting all static instances of 'CIM_InstCreation' in 'Root' (2016-08-19 13:12:46) ... .2111 13:12:46 (3) 0 static instance(s) found for 'CIM_InstCreation' in 'Root'. .2112 13:12:46 (3) Retrieving static information (MOF) of 'CIM_InstModification' (I=1). .2113 13:12:46 (3) Qualifier information of 'CIM_InstModification': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2114 13:12:46 (3) Requesting all static instances of 'CIM_InstModification' in 'Root' (2016-08-19 13:12:46) ... .2115 13:12:46 (3) 0 static instance(s) found for 'CIM_InstModification' in 'Root'. .2116 13:12:46 (3) Retrieving static information (MOF) of 'CIM_InstDeletion' (I=1). .2117 13:12:46 (3) Qualifier information of 'CIM_InstDeletion': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2118 13:12:46 (3) Requesting all static instances of 'CIM_InstDeletion' in 'Root' (2016-08-19 13:12:46) ... .2119 13:12:46 (3) 0 static instance(s) found for 'CIM_InstDeletion' in 'Root'. .2120 13:12:46 (3) Retrieving static information (MOF) of '__NotifyStatus' (I=1). .2121 13:12:46 (3) Qualifier information of '__NotifyStatus': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2122 13:12:46 (3) Requesting all static instances of '__NotifyStatus' in 'Root' (2016-08-19 13:12:46) ... .2123 13:12:46 (3) 0 static instance(s) found for '__NotifyStatus' in 'Root'. .2124 13:12:46 (3) Retrieving static information (MOF) of '__ExtendedStatus' (I=1). .2125 13:12:46 (3) Qualifier information of '__ExtendedStatus': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2126 13:12:46 (3) Requesting all static instances of '__ExtendedStatus' in 'Root' (2016-08-19 13:12:46) ... .2127 13:12:46 (3) 0 static instance(s) found for '__ExtendedStatus' in 'Root'. .2128 13:12:46 (3) Retrieving static information (MOF) of 'CIM_Error' (I=1). .2129 13:12:46 (3) Qualifier information of 'CIM_Error': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2130 13:12:46 (3) Requesting all static instances of 'CIM_Error' in 'Root' (2016-08-19 13:12:46) ... .2131 13:12:46 (3) 0 static instance(s) found for 'CIM_Error' in 'Root'. .2132 13:12:46 (3) Retrieving static information (MOF) of 'MSFT_WmiError' (I=1). .2133 13:12:46 (3) Qualifier information of 'MSFT_WmiError': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2134 13:12:46 (3) Requesting all static instances of 'MSFT_WmiError' in 'Root' (2016-08-19 13:12:46) ... .2135 13:12:46 (3) 0 static instance(s) found for 'MSFT_WmiError' in 'Root'. .2136 13:12:46 (3) Retrieving static information (MOF) of 'MSFT_ExtendedStatus' (I=1). .2137 13:12:46 (3) Qualifier information of 'MSFT_ExtendedStatus': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2138 13:12:46 (3) Requesting all static instances of 'MSFT_ExtendedStatus' in 'Root' (2016-08-19 13:12:46) ... .2139 13:12:46 (3) 0 static instance(s) found for 'MSFT_ExtendedStatus' in 'Root'. .2140 13:12:46 (3) Retrieving static information (MOF) of '__SecurityRelatedClass' (I=1). .2141 13:12:46 (3) Qualifier information of '__SecurityRelatedClass': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2142 13:12:46 (3) Requesting all static instances of '__SecurityRelatedClass' in 'Root' (2016-08-19 13:12:46) ... .2143 13:12:46 (3) 0 static instance(s) found for '__SecurityRelatedClass' in 'Root'. .2144 13:12:46 (3) Retrieving static information (MOF) of '__Trustee' (I=1). .2145 13:12:46 (3) Qualifier information of '__Trustee': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2146 13:12:46 (3) Requesting all static instances of '__Trustee' in 'Root' (2016-08-19 13:12:46) ... .2147 13:12:46 (3) 0 static instance(s) found for '__Trustee' in 'Root'. .2148 13:12:46 (3) Retrieving static information (MOF) of '__NTLMUser9X' (I=1). .2149 13:12:46 (3) Qualifier information of '__NTLMUser9X': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2150 13:12:46 (3) Requesting all static instances of '__NTLMUser9X' in 'Root' (2016-08-19 13:12:46) ... .2151 13:12:46 (3) 0 static instance(s) found for '__NTLMUser9X' in 'Root'. .2152 13:12:46 (3) Retrieving static information (MOF) of '__ACE' (I=1). .2153 13:12:46 (3) Qualifier information of '__ACE': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2154 13:12:46 (3) Requesting all static instances of '__ACE' in 'Root' (2016-08-19 13:12:46) ... .2155 13:12:46 (3) 0 static instance(s) found for '__ACE' in 'Root'. .2156 13:12:46 (3) Retrieving static information (MOF) of '__SecurityDescriptor' (I=1). .2157 13:12:46 (3) Qualifier information of '__SecurityDescriptor': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2158 13:12:46 (3) Requesting all static instances of '__SecurityDescriptor' in 'Root' (2016-08-19 13:12:46) ... .2159 13:12:46 (3) 0 static instance(s) found for '__SecurityDescriptor' in 'Root'. .2160 13:12:46 (3) Retrieving static information (MOF) of '__PARAMETERS' (I=1). .2161 13:12:46 (3) Qualifier information of '__PARAMETERS': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2162 13:12:46 (3) Requesting all static instances of '__PARAMETERS' in 'Root' (2016-08-19 13:12:46) ... .2163 13:12:46 (3) 0 static instance(s) found for '__PARAMETERS' in 'Root'. .2164 13:12:46 (3) Retrieving static information (MOF) of '__SystemClass' (I=1). .2165 13:12:46 (3) Qualifier information of '__SystemClass': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2166 13:12:46 (3) Requesting all static instances of '__SystemClass' in 'Root' (2016-08-19 13:12:46) ... .2167 13:12:46 (3) 0 static instance(s) found for '__SystemClass' in 'Root'. .2168 13:12:46 (3) Retrieving static information (MOF) of '__ProviderRegistration' (I=1). .2169 13:12:46 (3) Qualifier information of '__ProviderRegistration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2170 13:12:46 (3) Requesting all static instances of '__ProviderRegistration' in 'Root' (2016-08-19 13:12:46) ... .2171 13:12:46 (3) 0 static instance(s) found for '__ProviderRegistration' in 'Root'. .2172 13:12:46 (3) Retrieving static information (MOF) of '__EventProviderRegistration' (I=1). .2173 13:12:46 (3) Qualifier information of '__EventProviderRegistration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2174 13:12:46 (3) Requesting all static instances of '__EventProviderRegistration' in 'Root' (2016-08-19 13:12:46) ... .2175 13:12:46 (3) 0 static instance(s) found for '__EventProviderRegistration' in 'Root'. .2176 13:12:46 (3) Retrieving static information (MOF) of '__ObjectProviderRegistration' (I=1). .2177 13:12:46 (3) Qualifier information of '__ObjectProviderRegistration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2178 13:12:46 (3) Requesting all static instances of '__ObjectProviderRegistration' in 'Root' (2016-08-19 13:12:46) ... .2179 13:12:46 (3) 0 static instance(s) found for '__ObjectProviderRegistration' in 'Root'. .2180 13:12:46 (3) Retrieving static information (MOF) of '__ClassProviderRegistration' (I=1). .2181 13:12:46 (3) Qualifier information of '__ClassProviderRegistration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2182 13:12:46 (3) Requesting all static instances of '__ClassProviderRegistration' in 'Root' (2016-08-19 13:12:46) ... .2183 13:12:46 (3) 0 static instance(s) found for '__ClassProviderRegistration' in 'Root'. .2184 13:12:46 (3) Retrieving static information (MOF) of '__InstanceProviderRegistration' (I=1). .2185 13:12:46 (3) Qualifier information of '__InstanceProviderRegistration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2186 13:12:46 (3) Requesting all static instances of '__InstanceProviderRegistration' in 'Root' (2016-08-19 13:12:46) ... .2187 13:12:46 (3) 0 static instance(s) found for '__InstanceProviderRegistration' in 'Root'. .2188 13:12:46 (3) Retrieving static information (MOF) of '__MethodProviderRegistration' (I=1). .2189 13:12:46 (3) Qualifier information of '__MethodProviderRegistration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2190 13:12:46 (3) Requesting all static instances of '__MethodProviderRegistration' in 'Root' (2016-08-19 13:12:46) ... .2191 13:12:46 (3) 0 static instance(s) found for '__MethodProviderRegistration' in 'Root'. .2192 13:12:46 (3) Retrieving static information (MOF) of '__PropertyProviderRegistration' (I=1). .2193 13:12:46 (3) Qualifier information of '__PropertyProviderRegistration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2194 13:12:46 (3) Requesting all static instances of '__PropertyProviderRegistration' in 'Root' (2016-08-19 13:12:46) ... .2195 13:12:46 (3) 0 static instance(s) found for '__PropertyProviderRegistration' in 'Root'. .2196 13:12:46 (3) Retrieving static information (MOF) of '__EventConsumerProviderRegistration' (I=1). .2197 13:12:46 (3) Qualifier information of '__EventConsumerProviderRegistration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2198 13:12:46 (3) Requesting all static instances of '__EventConsumerProviderRegistration' in 'Root' (2016-08-19 13:12:46) ... .2199 13:12:46 (3) 0 static instance(s) found for '__EventConsumerProviderRegistration' in 'Root'. .2200 13:12:46 (3) Retrieving static information (MOF) of '__thisNAMESPACE' (I=1). .2201 13:12:46 (3) Qualifier information of '__thisNAMESPACE': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2202 13:12:46 (3) Requesting all static instances of '__thisNAMESPACE' in 'Root' (2016-08-19 13:12:46) ... .2203 13:12:46 (3) 0 static instance(s) found for '__thisNAMESPACE' in 'Root'. .2204 13:12:46 (3) Retrieving static information (MOF) of '__NAMESPACE' (I=1). .2205 13:12:46 (3) Qualifier information of '__NAMESPACE': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2206 13:12:46 (3) Requesting all static instances of '__NAMESPACE' in 'Root' (2016-08-19 13:12:46) ... .2207 13:12:46 (3) 17 static instance(s) found for '__NAMESPACE' in 'Root'in 0 second(s). .2208 13:12:46 (3) Retrieving static information (MOF) of '__IndicationRelated' (I=1). .2209 13:12:46 (3) Qualifier information of '__IndicationRelated': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2210 13:12:46 (3) Requesting all static instances of '__IndicationRelated' in 'Root' (2016-08-19 13:12:46) ... .2211 13:12:46 (3) 0 static instance(s) found for '__IndicationRelated' in 'Root'. .2212 13:12:46 (3) Retrieving static information (MOF) of '__FilterToConsumerBinding' (I=1). .2213 13:12:46 (3) Qualifier information of '__FilterToConsumerBinding': Dynamic=Fa³sz, Provider='', Association=Prawda. .2214 13:12:46 (3) Skipping request of static instances of '__FilterToConsumerBinding' in 'Root' because: .2215 13:12:46 (3) - The WMI class is an association class. .2216 13:12:46 (3) Retrieving static information (MOF) of '__EventConsumer' (I=1). .2217 13:12:46 (3) Qualifier information of '__EventConsumer': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2218 13:12:46 (3) Requesting all static instances of '__EventConsumer' in 'Root' (2016-08-19 13:12:46) ... .2219 13:12:46 (3) 0 static instance(s) found for '__EventConsumer' in 'Root'. .2220 13:12:46 (3) Retrieving static information (MOF) of '__AggregateEvent' (I=1). .2221 13:12:46 (3) Qualifier information of '__AggregateEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2222 13:12:46 (3) Requesting all static instances of '__AggregateEvent' in 'Root' (2016-08-19 13:12:46) ... .2223 13:12:46 (3) 0 static instance(s) found for '__AggregateEvent' in 'Root'. .2224 13:12:46 (3) Retrieving static information (MOF) of '__TimerNextFiring' (I=1). .2225 13:12:46 (3) Qualifier information of '__TimerNextFiring': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2226 13:12:46 (3) Requesting all static instances of '__TimerNextFiring' in 'Root' (2016-08-19 13:12:46) ... .2227 13:12:46 (3) 0 static instance(s) found for '__TimerNextFiring' in 'Root'. .2228 13:12:46 (3) Retrieving static information (MOF) of '__EventFilter' (I=1). .2229 13:12:46 (3) Qualifier information of '__EventFilter': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2230 13:12:46 (3) Requesting all static instances of '__EventFilter' in 'Root' (2016-08-19 13:12:46) ... .2231 13:12:46 (3) 0 static instance(s) found for '__EventFilter' in 'Root'. .2232 13:12:46 (3) Retrieving static information (MOF) of '__Event' (I=1). .2233 13:12:46 (3) Qualifier information of '__Event': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2234 13:12:46 (3) Requesting all static instances of '__Event' in 'Root' (2016-08-19 13:12:46) ... .2235 13:12:46 (3) 0 static instance(s) found for '__Event' in 'Root'. .2236 13:12:46 (3) Retrieving static information (MOF) of '__NamespaceOperationEvent' (I=1). .2237 13:12:46 (3) Qualifier information of '__NamespaceOperationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2238 13:12:46 (3) Requesting all static instances of '__NamespaceOperationEvent' in 'Root' (2016-08-19 13:12:46) ... .2239 13:12:47 (3) 0 static instance(s) found for '__NamespaceOperationEvent' in 'Root'. .2240 13:12:47 (3) Retrieving static information (MOF) of '__NamespaceModificationEvent' (I=1). .2241 13:12:47 (3) Qualifier information of '__NamespaceModificationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2242 13:12:47 (3) Requesting all static instances of '__NamespaceModificationEvent' in 'Root' (2016-08-19 13:12:47) ... .2243 13:12:47 (3) 0 static instance(s) found for '__NamespaceModificationEvent' in 'Root'. .2244 13:12:47 (3) Retrieving static information (MOF) of '__NamespaceDeletionEvent' (I=1). .2245 13:12:47 (3) Qualifier information of '__NamespaceDeletionEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2246 13:12:47 (3) Requesting all static instances of '__NamespaceDeletionEvent' in 'Root' (2016-08-19 13:12:47) ... .2247 13:12:47 (3) 0 static instance(s) found for '__NamespaceDeletionEvent' in 'Root'. .2248 13:12:47 (3) Retrieving static information (MOF) of '__NamespaceCreationEvent' (I=1). .2249 13:12:47 (3) Qualifier information of '__NamespaceCreationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2250 13:12:47 (3) Requesting all static instances of '__NamespaceCreationEvent' in 'Root' (2016-08-19 13:12:47) ... .2251 13:12:47 (3) 0 static instance(s) found for '__NamespaceCreationEvent' in 'Root'. .2252 13:12:47 (3) Retrieving static information (MOF) of '__ClassOperationEvent' (I=1). .2253 13:12:47 (3) Qualifier information of '__ClassOperationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2254 13:12:47 (3) Requesting all static instances of '__ClassOperationEvent' in 'Root' (2016-08-19 13:12:47) ... .2255 13:12:47 (3) 0 static instance(s) found for '__ClassOperationEvent' in 'Root'. .2256 13:12:47 (3) Retrieving static information (MOF) of '__ClassDeletionEvent' (I=1). .2257 13:12:47 (3) Qualifier information of '__ClassDeletionEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2258 13:12:47 (3) Requesting all static instances of '__ClassDeletionEvent' in 'Root' (2016-08-19 13:12:47) ... .2259 13:12:47 (3) 0 static instance(s) found for '__ClassDeletionEvent' in 'Root'. .2260 13:12:47 (3) Retrieving static information (MOF) of '__ClassModificationEvent' (I=1). .2261 13:12:47 (3) Qualifier information of '__ClassModificationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2262 13:12:47 (3) Requesting all static instances of '__ClassModificationEvent' in 'Root' (2016-08-19 13:12:47) ... .2263 13:12:47 (3) 0 static instance(s) found for '__ClassModificationEvent' in 'Root'. .2264 13:12:47 (3) Retrieving static information (MOF) of '__ClassCreationEvent' (I=1). .2265 13:12:47 (3) Qualifier information of '__ClassCreationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2266 13:12:47 (3) Requesting all static instances of '__ClassCreationEvent' in 'Root' (2016-08-19 13:12:47) ... .2267 13:12:47 (3) 0 static instance(s) found for '__ClassCreationEvent' in 'Root'. .2268 13:12:47 (3) Retrieving static information (MOF) of '__InstanceOperationEvent' (I=1). .2269 13:12:47 (3) Qualifier information of '__InstanceOperationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2270 13:12:47 (3) Requesting all static instances of '__InstanceOperationEvent' in 'Root' (2016-08-19 13:12:47) ... .2271 13:12:47 (3) 0 static instance(s) found for '__InstanceOperationEvent' in 'Root'. .2272 13:12:47 (3) Retrieving static information (MOF) of '__InstanceCreationEvent' (I=1). .2273 13:12:47 (3) Qualifier information of '__InstanceCreationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2274 13:12:47 (3) Requesting all static instances of '__InstanceCreationEvent' in 'Root' (2016-08-19 13:12:47) ... .2275 13:12:47 (3) 0 static instance(s) found for '__InstanceCreationEvent' in 'Root'. .2276 13:12:47 (3) Retrieving static information (MOF) of '__MethodInvocationEvent' (I=1). .2277 13:12:47 (3) Qualifier information of '__MethodInvocationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2278 13:12:47 (3) Requesting all static instances of '__MethodInvocationEvent' in 'Root' (2016-08-19 13:12:47) ... .2279 13:12:47 (3) 0 static instance(s) found for '__MethodInvocationEvent' in 'Root'. .2280 13:12:47 (3) Retrieving static information (MOF) of '__InstanceModificationEvent' (I=1). .2281 13:12:47 (3) Qualifier information of '__InstanceModificationEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2282 13:12:47 (3) Requesting all static instances of '__InstanceModificationEvent' in 'Root' (2016-08-19 13:12:47) ... .2283 13:12:47 (3) 0 static instance(s) found for '__InstanceModificationEvent' in 'Root'. .2284 13:12:47 (3) Retrieving static information (MOF) of '__InstanceDeletionEvent' (I=1). .2285 13:12:47 (3) Qualifier information of '__InstanceDeletionEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2286 13:12:47 (3) Requesting all static instances of '__InstanceDeletionEvent' in 'Root' (2016-08-19 13:12:47) ... .2287 13:12:47 (3) 0 static instance(s) found for '__InstanceDeletionEvent' in 'Root'. .2288 13:12:47 (3) Retrieving static information (MOF) of '__TimerEvent' (I=1). .2289 13:12:47 (3) Qualifier information of '__TimerEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2290 13:12:47 (3) Requesting all static instances of '__TimerEvent' in 'Root' (2016-08-19 13:12:47) ... .2291 13:12:47 (3) 0 static instance(s) found for '__TimerEvent' in 'Root'. .2292 13:12:47 (3) Retrieving static information (MOF) of '__ExtrinsicEvent' (I=1). .2293 13:12:47 (3) Qualifier information of '__ExtrinsicEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2294 13:12:47 (3) Requesting all static instances of '__ExtrinsicEvent' in 'Root' (2016-08-19 13:12:47) ... .2295 13:12:47 (3) 0 static instance(s) found for '__ExtrinsicEvent' in 'Root'. .2296 13:12:47 (3) Retrieving static information (MOF) of '__SystemEvent' (I=1). .2297 13:12:47 (3) Qualifier information of '__SystemEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2298 13:12:47 (3) Requesting all static instances of '__SystemEvent' in 'Root' (2016-08-19 13:12:47) ... .2299 13:12:47 (3) 0 static instance(s) found for '__SystemEvent' in 'Root'. .2300 13:12:47 (3) Retrieving static information (MOF) of '__EventDroppedEvent' (I=1). .2301 13:12:47 (3) Qualifier information of '__EventDroppedEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2302 13:12:47 (3) Requesting all static instances of '__EventDroppedEvent' in 'Root' (2016-08-19 13:12:47) ... .2303 13:12:47 (3) 0 static instance(s) found for '__EventDroppedEvent' in 'Root'. .2304 13:12:47 (3) Retrieving static information (MOF) of '__EventQueueOverflowEvent' (I=1). .2305 13:12:47 (3) Qualifier information of '__EventQueueOverflowEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2306 13:12:47 (3) Requesting all static instances of '__EventQueueOverflowEvent' in 'Root' (2016-08-19 13:12:47) ... .2307 13:12:47 (3) 0 static instance(s) found for '__EventQueueOverflowEvent' in 'Root'. .2308 13:12:47 (3) Retrieving static information (MOF) of '__QOSFailureEvent' (I=1). .2309 13:12:47 (3) Qualifier information of '__QOSFailureEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2310 13:12:47 (3) Requesting all static instances of '__QOSFailureEvent' in 'Root' (2016-08-19 13:12:47) ... .2311 13:12:47 (3) 0 static instance(s) found for '__QOSFailureEvent' in 'Root'. .2312 13:12:47 (3) Retrieving static information (MOF) of '__ConsumerFailureEvent' (I=1). .2313 13:12:47 (3) Qualifier information of '__ConsumerFailureEvent': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2314 13:12:47 (3) Requesting all static instances of '__ConsumerFailureEvent' in 'Root' (2016-08-19 13:12:47) ... .2315 13:12:47 (3) 0 static instance(s) found for '__ConsumerFailureEvent' in 'Root'. .2316 13:12:47 (3) Retrieving static information (MOF) of '__EventGenerator' (I=1). .2317 13:12:47 (3) Qualifier information of '__EventGenerator': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2318 13:12:47 (3) Requesting all static instances of '__EventGenerator' in 'Root' (2016-08-19 13:12:47) ... .2319 13:12:47 (3) 0 static instance(s) found for '__EventGenerator' in 'Root'. .2320 13:12:47 (3) Retrieving static information (MOF) of '__TimerInstruction' (I=1). .2321 13:12:47 (3) Qualifier information of '__TimerInstruction': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2322 13:12:47 (3) Requesting all static instances of '__TimerInstruction' in 'Root' (2016-08-19 13:12:47) ... .2323 13:12:47 (3) 0 static instance(s) found for '__TimerInstruction' in 'Root'. .2324 13:12:47 (3) Retrieving static information (MOF) of '__AbsoluteTimerInstruction' (I=1). .2325 13:12:47 (3) Qualifier information of '__AbsoluteTimerInstruction': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2326 13:12:47 (3) Requesting all static instances of '__AbsoluteTimerInstruction' in 'Root' (2016-08-19 13:12:47) ... .2327 13:12:47 (3) 0 static instance(s) found for '__AbsoluteTimerInstruction' in 'Root'. .2328 13:12:47 (3) Retrieving static information (MOF) of '__IntervalTimerInstruction' (I=1). .2329 13:12:47 (3) Qualifier information of '__IntervalTimerInstruction': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2330 13:12:47 (3) Requesting all static instances of '__IntervalTimerInstruction' in 'Root' (2016-08-19 13:12:47) ... .2331 13:12:47 (3) 0 static instance(s) found for '__IntervalTimerInstruction' in 'Root'. .2332 13:12:47 (3) Retrieving static information (MOF) of '__Provider' (I=1). .2333 13:12:47 (3) Qualifier information of '__Provider': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2334 13:12:47 (3) Requesting all static instances of '__Provider' in 'Root' (2016-08-19 13:12:47) ... .2335 13:12:47 (3) 0 static instance(s) found for '__Provider' in 'Root'. .2336 13:12:47 (3) Retrieving static information (MOF) of '__Win32Provider' (I=1). .2337 13:12:47 (3) Qualifier information of '__Win32Provider': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2338 13:12:47 (3) Requesting all static instances of '__Win32Provider' in 'Root' (2016-08-19 13:12:47) ... .2339 13:12:47 (3) 0 static instance(s) found for '__Win32Provider' in 'Root'. .2340 13:12:47 (3) Retrieving static information (MOF) of '__CIMOMIdentification' (I=1). .2341 13:12:47 (3) Qualifier information of '__CIMOMIdentification': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2342 13:12:47 (3) Requesting all static instances of '__CIMOMIdentification' in 'Root' (2016-08-19 13:12:47) ... .2343 13:12:47 (3) 1 static instance(s) found for '__CIMOMIdentification' in 'Root'in 0 second(s). .2344 13:12:47 (3) Retrieving static information (MOF) of '__CacheControl' (I=1). .2345 13:12:47 (3) Qualifier information of '__CacheControl': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2346 13:12:47 (3) Requesting all static instances of '__CacheControl' in 'Root' (2016-08-19 13:12:47) ... .2347 13:12:47 (3) 0 static instance(s) found for '__CacheControl' in 'Root'. .2348 13:12:47 (3) Retrieving static information (MOF) of '__EventConsumerProviderCacheControl' (I=1). .2349 13:12:47 (3) Qualifier information of '__EventConsumerProviderCacheControl': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2350 13:12:47 (3) Requesting all static instances of '__EventConsumerProviderCacheControl' in 'Root' (2016-08-19 13:12:47) ... .2351 13:12:47 (3) 1 static instance(s) found for '__EventConsumerProviderCacheControl' in 'Root'in 0 second(s). .2352 13:12:47 (3) Retrieving static information (MOF) of '__EventSinkCacheControl' (I=1). .2353 13:12:47 (3) Qualifier information of '__EventSinkCacheControl': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2354 13:12:47 (3) Requesting all static instances of '__EventSinkCacheControl' in 'Root' (2016-08-19 13:12:47) ... .2355 13:12:47 (3) 1 static instance(s) found for '__EventSinkCacheControl' in 'Root'in 0 second(s). .2356 13:12:47 (3) Retrieving static information (MOF) of '__ObjectProviderCacheControl' (I=1). .2357 13:12:47 (3) Qualifier information of '__ObjectProviderCacheControl': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2358 13:12:47 (3) Requesting all static instances of '__ObjectProviderCacheControl' in 'Root' (2016-08-19 13:12:47) ... .2359 13:12:47 (3) 1 static instance(s) found for '__ObjectProviderCacheControl' in 'Root'in 0 second(s). .2360 13:12:47 (3) Retrieving static information (MOF) of '__PropertyProviderCacheControl' (I=1). .2361 13:12:47 (3) Qualifier information of '__PropertyProviderCacheControl': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2362 13:12:47 (3) Requesting all static instances of '__PropertyProviderCacheControl' in 'Root' (2016-08-19 13:12:47) ... .2363 13:12:47 (3) 1 static instance(s) found for '__PropertyProviderCacheControl' in 'Root'in 0 second(s). .2364 13:12:47 (3) Retrieving static information (MOF) of '__EventProviderCacheControl' (I=1). .2365 13:12:47 (3) Qualifier information of '__EventProviderCacheControl': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2366 13:12:47 (3) Requesting all static instances of '__EventProviderCacheControl' in 'Root' (2016-08-19 13:12:47) ... .2367 13:12:47 (3) 1 static instance(s) found for '__EventProviderCacheControl' in 'Root'in 0 second(s). .2368 13:12:47 (3) Retrieving static information (MOF) of '__ArbitratorConfiguration' (I=1). .2369 13:12:47 (3) Qualifier information of '__ArbitratorConfiguration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2370 13:12:47 (3) Requesting all static instances of '__ArbitratorConfiguration' in 'Root' (2016-08-19 13:12:47) ... .2371 13:12:47 (3) 1 static instance(s) found for '__ArbitratorConfiguration' in 'Root'in 0 second(s). .2372 13:12:47 (3) Retrieving static information (MOF) of '__ListOfEventActiveNamespaces' (I=1). .2373 13:12:47 (3) Qualifier information of '__ListOfEventActiveNamespaces': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2374 13:12:47 (3) Requesting all static instances of '__ListOfEventActiveNamespaces' in 'Root' (2016-08-19 13:12:47) ... .2375 13:12:47 (3) 0 static instance(s) found for '__ListOfEventActiveNamespaces' in 'Root'. .2376 13:12:47 (3) Retrieving static information (MOF) of '__ProviderHostQuotaConfiguration' (I=1). .2377 13:12:47 (3) Qualifier information of '__ProviderHostQuotaConfiguration': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2378 13:12:47 (3) Requesting all static instances of '__ProviderHostQuotaConfiguration' in 'Root' (2016-08-19 13:12:47) ... .2379 13:12:47 (3) 1 static instance(s) found for '__ProviderHostQuotaConfiguration' in 'Root'in 0 second(s). .2380 13:12:47 (3) Retrieving static information (MOF) of '__SystemSecurity' (I=1). .2381 13:12:47 (3) Qualifier information of '__SystemSecurity': Dynamic=Fa³sz, Provider='', Association=Fa³sz. .2382 13:12:47 (3) Requesting all static instances of '__SystemSecurity' in 'Root' (2016-08-19 13:12:47) ... .2383 13:12:47 (3) 1 static instance(s) found for '__SystemSecurity' in 'Root'in 0 second(s). .2384 13:12:47 (0) ** Verifying WMI namespace 'ROOT/SUBSCRIPTION' (L=2). .2385 13:12:47 (3) Retrieving WMI system class(es) static information. .2386 13:12:47 (3) 45/45 system class(es) found. .2387 13:12:47 (3) Verifying Permanent subscription(s) for 'ROOT/SUBSCRIPTION'. .2388 13:12:47 (3) 1 permanent subscription(s) in 'ROOT/SUBSCRIPTION' namespace. .2389 13:12:47 (4) .2390 13:12:47 (4) #1 'NTEventLogEventConsumer.Name="SCM Event Log Consumer"' permanent subscription. .2391 13:12:47 (4) - NTEventLogEventConsumer #1 ------------------------------------------------------------------------------- .2392 13:12:47 (4) Category: .............................. 0 .2393 13:12:47 (4) CreatorSID: ............................ 1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0 .2394 13:12:47 (4) EventID: ............................... 0 .2395 13:12:47 (4) EventType: ............................. 1 .2396 13:12:47 (4) InsertionStringTemplates: .............. .2397 13:12:47 (4) *Name: ................................. SCM Event Log Consumer .2398 13:12:47 (4) NameOfUserSIDProperty: ................. sid .2399 13:12:47 (4) NumberOfInsertionStrings: .............. 0 .2400 13:12:47 (4) SourceName: ............................ Service Control Manager .2401 13:12:48 (4) - __FilterToConsumerBinding #1 ----------------------------------------------------------------------------- .2402 13:12:48 (4) *Consumer: ........................... NTEventLogEventConsumer.Name="SCM Event Log Consumer" .2403 13:12:48 (4) CreatorSID: .......................... 1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0 .2404 13:12:48 (4) DeliverSynchronously: ................ FA£SZ .2405 13:12:48 (4) *Filter: ............................. __EventFilter.Name="SCM Event Log Filter" .2406 13:12:48 (4) MaintainSecurityContext: ............. FA£SZ .2407 13:12:48 (4) SlowDownProviders: ................... FA£SZ .2408 13:12:48 (4) - __EventFilter #1 ----------------------------------------------------------------------------------------- .2409 13:12:48 (4) CreatorSID: .......................... 1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0 .2410 13:12:48 (4) EventNamespace: ...................... root\cimv2 .2411 13:12:48 (4) *Name: ............................... SCM Event Log Filter .2412 13:12:48 (4) Query: ............................... select * from MSFT_SCMEventLogEvent .2413 13:12:48 (4) QueryLanguage: ....................... WQL .2414 13:12:48 (4) .2415 13:12:48 (3) 0 Timer instruction(s) in 'ROOT/SUBSCRIPTION' namespace. .2416 13:12:48 (1) !! ERROR: (CheckWMIStaticData) : 0x80041003 - (WBEM_E_ACCESS_DENIED) Current user does not have permission to perform the action. .2417 13:12:48 (3) 5 WMI Provider CIM registration(s) found. .2418 13:12:48 (3) (#1) Found WMI Provider 'LOGFILEEVENTCONSUMER' CIM registration. .2419 13:12:48 (3) WMI Provider hosting model is 'LOCALSYSTEMHOST'. .2420 13:12:48 (3) WMI Provider is 'LOGFILEEVENTCONSUMER' IS a trusted WMI providers. .2421 13:12:48 (3) WMI Provider 'LOGFILEEVENTCONSUMER' is a PERMANENT EVENT CONSUMER provider. .2422 13:12:48 (3) Verifying if WMI Provider 'LOGFILEEVENTCONSUMER' has an In-Proc registration. .2423 13:12:48 (4) Reading registry (REG_EXPAND_SZ) 'HKCR\CLSID\{266C72D4-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .2424 13:12:48 (3) Found WMI Provider In-Proc registration 'LOGFILEEVENTCONSUMER' ({266C72D4-62E8-11D1-AD89-00C04FD8FDFF}). .2425 13:12:48 (3) WMI Provider DLL 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCONS.DLL' is available on the system (LOGFILEEVENTCONSUMER). .2426 13:12:53 (3) MOF file(s) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCONS.MOF' contain(s) registration data for WMI Provider 'LOGFILEEVENTCONSUMER' ({266C72D4-62E8-11D1-AD89-00C04FD8FDFF}) of namespace 'ROOT/SUBSCRIPTION'. .2427 13:12:53 (3) (#2) Found WMI Provider 'ACTIVESCRIPTEVENTCONSUMER' CIM registration. .2428 13:12:53 (3) WMI Provider hosting model is 'SELFHOST'. .2429 13:12:53 (3) WMI Provider 'ACTIVESCRIPTEVENTCONSUMER' is a PERMANENT EVENT CONSUMER provider. .2430 13:12:53 (3) Verifying if WMI Provider 'ACTIVESCRIPTEVENTCONSUMER' has an In-Proc registration. .2431 13:12:53 (4) Reading registry (REG_EXPAND_SZ) 'HKCR\CLSID\{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .2432 13:12:53 (3) Verifying if WMI Provider 'ACTIVESCRIPTEVENTCONSUMER' has an Out-of-Proc registration. .2433 13:12:53 (4) Reading registry (REG_EXPAND_SZ) 'HKCR\CLSID\{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}\LocalServer32\'. .2434 13:12:53 (3) Found WMI Provider Out-of-Proc registration 'ACTIVESCRIPTEVENTCONSUMER' ({266C72E7-62E8-11D1-AD89-00C04FD8FDFF}). .2435 13:12:53 (3) WMI Provider DLL 'C:\WINDOWS\SYSTEM32\WBEM\SCRCONS.EXE' is available on the system (ACTIVESCRIPTEVENTCONSUMER). .2436 13:12:59 (3) MOF file(s) 'C:\WINDOWS\SYSTEM32\WBEM\SCRCONS.MOF' contain(s) registration data for WMI Provider 'ACTIVESCRIPTEVENTCONSUMER' ({266C72E7-62E8-11D1-AD89-00C04FD8FDFF}) of namespace 'ROOT/SUBSCRIPTION'. .2437 13:12:59 (3) (#3) Found WMI Provider 'NTEVENTLOGEVENTCONSUMER' CIM registration. .2438 13:12:59 (3) WMI Provider hosting model is 'WMICORE'. .2439 13:12:59 (3) WMI Provider is 'NTEVENTLOGEVENTCONSUMER' IS a trusted WMI providers. .2440 13:12:59 (3) WMI Provider 'NTEVENTLOGEVENTCONSUMER' is a PERMANENT EVENT CONSUMER provider. .2441 13:12:59 (3) Verifying if WMI Provider 'NTEVENTLOGEVENTCONSUMER' has an In-Proc registration. .2442 13:12:59 (4) Reading registry (REG_EXPAND_SZ) 'HKCR\CLSID\{266C72E6-62E8-11D1-AD89-00C04FD8FDFF}\InProcServer32\'. .2443 13:12:59 (3) Found WMI Provider In-Proc registration 'NTEVENTLOGEVENTCONSUMER' ({266C72E6-62E8-11D1-AD89-00C04FD8FDFF}). .2444 13:12:59 (3) WMI Provider DLL 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCONS.DLL' is available on the system (NTEVENTLOGEVENTCONSUMER). .2445 13:13:04 (3) MOF file(s) 'C:\WINDOWS\SYSTEM32\WBEM\WBEMCONS.MOF' contain(s) registration data for WMI Provider 'NTEVENTLOGEVENTCONSUMER' ({266C72E6-62E8-11D1-AD89-00C04FD8FDFF}) of namespace 'ROOT/SUBSCRIPTION'. .2446 13:13:04 (3) (#4) Found WMI Provider 'SMTPEVENTCONSUMER' CIM registration. .2447 13:13:04 (3) WMI Provider hosting model is 'NETWORKSERVICEHOST'. .2448 13:13:04 (3) WMI Provider 'SMTPEVENTCONSUMER' is a PERMANENT EVENT CONSUMER provider. .2449 13:13:04 (3) Verifying if WMI Provider 'SMTPEVENTCONSUMER' has an In-Proc registration. .2450 13:13:04 (4) Reading registry (REG_EXPAND_SZ) 'HKCR\CLSID\{C7A3A54B-0250-11D3-9CD1-00105A1F4801}\InProcServer32\'. .2451 13:13:04 (3) Found WMI Provider In-Proc registration 'SMTPEVENTCONSUMER' ({C7A3A54B-0250-11D3-9CD1-00105A1F4801}). .2452 13:13:04 (3) WMI Provider DLL 'C:\WINDOWS\SYSTEM32\WBEM\SMTPCONS.DLL' is available on the system (SMTPEVENTCONSUMER).