10:10:21 9783474 SamExpertAtnaujinimas.exe 5112 CreateFile C:\SamExpert\baz2003\techsalygos SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:21 9783698 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\SamExpert\baz2003\techsalygos\R9.pdf SUCCESS Filter: R9.pdf, 1: R9.pdf 10:10:21 9783884 SamExpertAtnaujinimas.exe 5112 CloseFile C:\SamExpert\baz2003\techsalygos SUCCESS 10:10:21 9784879 SamExpertAtnaujinimas.exe 5112 CreateFile C:\SamExpert\baz2003\techsalygos\R9.pdf SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:21 9785959 SamExpertAtnaujinimas.exe 5112 QueryBasicInformationFile C:\SamExpert\baz2003\techsalygos\R9.pdf SUCCESS CreationTime: 2012-11-30 14:57:27, LastAccessTime: 2012-11-30 14:57:27, LastWriteTime: 2012-11-30 14:57:27, ChangeTime: 2013-11-26 11:38:50, FileAttributes: A 10:10:21 9786046 SamExpertAtnaujinimas.exe 5112 CloseFile C:\SamExpert\baz2003\techsalygos\R9.pdf SUCCESS 10:10:21 9786662 SamExpertAtnaujinimas.exe 5112 CreateFile C:\SamExpert\baz2003\techsalygos\R9.pdf NAME COLLISION Desired Access: Generic Write, Read Attributes, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: A, ShareMode: Read, AllocationSize: 0 10:10:21 9886890 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\Desktop\imageres.dll NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 10:10:21 9888170 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Windows\SysWOW64\imageres.dll SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:21 9889039 SamExpertAtnaujinimas.exe 5112 QueryBasicInformationFile C:\Windows\SysWOW64\imageres.dll SUCCESS CreationTime: 2009-07-14 01:42:24, LastAccessTime: 2009-07-14 01:42:24, LastWriteTime: 2009-07-14 03:06:03, ChangeTime: 2013-11-06 18:07:26, FileAttributes: A 10:10:21 9889180 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\SysWOW64\imageres.dll SUCCESS 10:10:21 9890001 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Windows\SysWOW64\imageres.dll SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:21 9896755 SamExpertAtnaujinimas.exe 5112 CreateFileMapping C:\Windows\SysWOW64\imageres.dll FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: 10:10:21 9896887 SamExpertAtnaujinimas.exe 5112 QueryStandardInformationFile C:\Windows\SysWOW64\imageres.dll SUCCESS AllocationSize: 20 271 104, EndOfFile: 20 268 032, NumberOfLinks: 2, DeletePending: False, Directory: False 10:10:21 9897127 SamExpertAtnaujinimas.exe 5112 CreateFileMapping C:\Windows\SysWOW64\imageres.dll SUCCESS SyncType: SyncTypeOther 10:10:21 9897487 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\SysWOW64\imageres.dll SUCCESS 10:10:21 9910087 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:21 9910318 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:21 9910536 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:21 9910745 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:21 9910889 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:21 9911059 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:21 9913240 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:21 9913445 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:21 9913596 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:21 9913743 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:21 9913868 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:21 9913987 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:21 9914112 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:21 9914234 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:21 9914407 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:21 9916816 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:21 9917056 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:21 9917310 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:21 9917467 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:21 9917592 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:21 9917727 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:21 9917849 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:23 956710 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 957214 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 975453 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 975937 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 1065640 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 1066159 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:23 1066868 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:23 1067378 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 1067776 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:23 1068157 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:23 1072692 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 1073157 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 1073500 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:23 1073811 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 1074212 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 1074498 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:23 1074806 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:23 1075059 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:23 1075408 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:23 1077554 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 1077981 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 1078295 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:23 1078593 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 1078853 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 1079122 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:23 1079395 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:23 2828682 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 2829166 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 2846853 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 2847306 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 2937768 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 2938275 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:23 2938711 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:23 2939119 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 2939411 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:23 2939744 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:23 2944609 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 2945065 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 2945392 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:23 2945738 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 2946027 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 2946287 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:23 2946524 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:23 2946748 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:23 2947095 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:23 2951373 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 2951784 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 2952085 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:23 2952380 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 2952630 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 2952893 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:23 2953150 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:23 4689541 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 4690029 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 4707462 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 4707969 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 4803958 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 4804439 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:23 4804869 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:23 4805253 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 4805532 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:23 4805844 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:23 4812880 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 4813300 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 4813614 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:23 4813919 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 4814291 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 4814788 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:23 4815118 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:23 4815625 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:23 4815991 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:23 4818441 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 4818842 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 4819150 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:23 4819451 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 4819705 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 4819987 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:23 4820250 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:23 6558158 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 6558668 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 6576028 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 6576525 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 6666263 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 6666751 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:23 6667184 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:23 6667585 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 6667937 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:23 6668268 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:23 6672389 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 6672783 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 6673094 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:23 6673396 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 6673662 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 6673909 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:23 6674137 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:23 6674355 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:23 6674656 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:23 6676622 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 6676975 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 6677270 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:23 6677562 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 6677831 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 6678091 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:23 6678344 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:23 8306618 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 8306987 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 8321021 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 8321380 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:23 8381847 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 8382180 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:23 8382475 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:23 8382758 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 8382960 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:23 8383181 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:23 8386510 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 8386786 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 8387001 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:23 8387209 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 8387389 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 8387559 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:23 8387716 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:23 8387883 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:23 8388091 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:23 8389685 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:23 8390099 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:23 8390317 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:23 8390541 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:23 8390714 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:23 8390907 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:23 8391086 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:24 7372 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 7882 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 26313 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 26797 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 117645 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 118180 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:24 118636 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:24 119043 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 119335 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:24 119707 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:24 123944 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 124351 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 124672 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:24 124976 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 125249 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 125499 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:24 125730 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:24 125948 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:24 126249 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:24 128052 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 128417 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 128716 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:24 129011 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 129261 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 129514 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:24 129768 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:24 1758804 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 1759305 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 1778413 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 1778845 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 1871377 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 1871855 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:24 1872294 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:24 1872708 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 1873000 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:24 1873333 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:24 1877506 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 1878048 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 1878381 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:24 1878696 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 1878968 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 1879215 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:24 1879446 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:24 1879667 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:24 1879972 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:24 1881925 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 1882300 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 1882599 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:24 1882897 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 1883150 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 1883407 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:24 1883692 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:24 3487579 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 3488098 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 3505676 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 3506138 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 3601636 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 3602120 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:24 3602589 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:24 3603022 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 3603320 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:24 3603653 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:24 3611787 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 3612210 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 3612762 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:24 3613137 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 3613426 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 3613698 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:24 3613948 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:24 3614182 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:24 3614574 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:24 3618140 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 3618663 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 3619064 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:24 3619465 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 3619779 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 3620058 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:24 3620321 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:24 5355439 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 5355955 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 5372469 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 5372943 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 5471302 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 5471748 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:24 5472161 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:24 5472559 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 5472848 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:24 5473162 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:24 5477505 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 5477931 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 5478245 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:24 5478550 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 5478816 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 5479063 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:24 5479288 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:24 5479503 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:24 5479801 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:24 5481651 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 5482001 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 5482293 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:24 5482585 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 5482832 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 5483091 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:24 5483345 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:24 7067928 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 7068418 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 7085512 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 7085990 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 7162143 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 7162486 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:24 7162800 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:24 7163092 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 7163297 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:24 7163519 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:24 7166517 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 7166796 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 7167014 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:24 7167229 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 7167412 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 7167585 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:24 7167742 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:24 7167922 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:24 7168137 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:24 7169416 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 7169663 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 7169872 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:24 7170080 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 7170254 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 7170436 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:24 7170613 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:24 9039207 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 9039730 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 9058402 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 9058886 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:24 9166273 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 9166776 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:24 9167225 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:24 9167639 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 9167953 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:24 9168277 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:24 9172860 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 9173268 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 9173572 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:24 9173883 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 9174146 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 9174390 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:24 9174624 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:24 9174842 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:24 9175147 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:24 9176834 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:24 9177501 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:24 9177934 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:24 9178300 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:24 9178585 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:24 9178877 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:24 9179137 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:25 2088055 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 2088508 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:25 2103613 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 2104030 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:25 2183932 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 2184346 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:25 2184756 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:25 2185134 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 2185385 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:25 2185657 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:25 2189163 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:25 2189512 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 2189782 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:25 2190041 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 2190269 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:25 2190478 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:25 2190670 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:25 2190859 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:25 2191119 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:25 2192950 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:25 2193386 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 2193704 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:25 2193999 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 2194239 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:25 2194474 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:25 2194701 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:25 3767110 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 3767607 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:25 3784688 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 3785160 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:25 3901526 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 3902036 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:25 3902504 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:25 3902909 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 3903200 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:25 3903534 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:25 3909512 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:25 3909967 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 3910320 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:25 3910641 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 3910936 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:25 3911199 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:25 3911439 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:25 3911667 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:25 3911981 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:25 3915618 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:25 3916106 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 3916452 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:25 3916789 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 3917061 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:25 3917328 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:25 3917587 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:25 5518334 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 5518847 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:25 5535758 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 5536217 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:25 5630439 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 5630926 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} REPARSE Desired Access: Read 10:10:25 5631356 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS Desired Access: Read 10:10:25 5631766 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 5632055 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable SUCCESS Type: REG_DWORD, Length: 4, Data: 1 10:10:25 5632385 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} SUCCESS 10:10:25 5636676 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:25 5637064 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 5637376 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Keyboard Layout\Toggle SUCCESS Desired Access: Read 10:10:25 5637677 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Keyboard Layout\Toggle SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 5637972 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:25 5638222 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Language Hotkey NAME NOT FOUND Length: 144 10:10:25 5638450 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Hotkey NAME NOT FOUND Length: 144 10:10:25 5638690 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKCU\Keyboard Layout\Toggle\Layout Hotkey NAME NOT FOUND Length: 144 10:10:25 5639005 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Keyboard Layout\Toggle SUCCESS 10:10:25 5640836 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU SUCCESS Desired Access: Read 10:10:25 5641192 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:25 5641487 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS Desired Access: Read 10:10:25 5641785 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:25 5642029 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:25 5642292 SamExpertAtnaujinimas.exe 5112 RegEnumKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys NO MORE ENTRIES Index: 0, Length: 288 10:10:25 5642542 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\CTF\DirectSwitchHotkeys SUCCESS 10:10:26 2476612 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:26 2476991 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:26 2495252 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:26 2495675 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:26 2591350 SamExpertAtnaujinimas.exe 5112 Thread Exit SUCCESS Thread ID: 2312, User Time: 0.2340015, Kernel Time: 0.6396041 10:10:27 751228 SamExpertAtnaujinimas.exe 5112 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:10:27 751812 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:10:27 802782 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\Desktop\SamExpertAtnaujinimas.exe SUCCESS 10:10:27 806547 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 807157 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS Filter: nsb6EEC.tmp, 1: nsb6EEC.tmp 10:10:27 807589 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp SUCCESS 10:10:27 809119 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 809546 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma\AppData\Local\Temp SUCCESS Filter: Temp, 1: Temp 10:10:27 809895 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local SUCCESS 10:10:27 811319 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 811730 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma\AppData\Local SUCCESS Filter: Local, 1: Local 10:10:27 812067 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData SUCCESS 10:10:27 813452 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 813850 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma\AppData SUCCESS Filter: AppData, 1: AppData 10:10:27 814196 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma SUCCESS 10:10:27 815617 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 816011 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma SUCCESS Filter: vilma, 1: vilma 10:10:27 816316 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users SUCCESS 10:10:27 816957 SamExpertAtnaujinimas.exe 5112 CreateFile C:\ SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 817358 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users SUCCESS Filter: Users, 1: Users 10:10:27 817689 SamExpertAtnaujinimas.exe 5112 CloseFile C:\ SUCCESS 10:10:27 818789 SamExpertAtnaujinimas.exe 5112 CreateFile C:\ SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 819417 SamExpertAtnaujinimas.exe 5112 QueryBasicInformationFile C:\ SUCCESS CreationTime: 2009-07-14 04:38:56, LastAccessTime: 2014-02-12 12:51:01, LastWriteTime: 2014-02-12 12:51:01, ChangeTime: 2014-02-12 12:51:01, FileAttributes: HSD 10:10:27 819607 SamExpertAtnaujinimas.exe 5112 CloseFile C:\ SUCCESS 10:10:27 820899 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 821277 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\* SUCCESS Filter: *, 1: . 10:10:27 821579 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS 0: .., 1: modern-wizard.bmp, 2: nsDialogs.dll, 3: System.dll 10:10:27 823497 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 823939 SamExpertAtnaujinimas.exe 5112 QueryBasicInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS CreationTime: 2003-09-23 20:34:00, LastAccessTime: 2014-02-20 10:10:20, LastWriteTime: 2003-09-23 20:34:00, ChangeTime: 2014-02-20 10:10:20, FileAttributes: ANCI 10:10:27 824096 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS 10:10:27 825302 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS Desired Access: Write Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 826306 SamExpertAtnaujinimas.exe 5112 SetBasicInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS CreationTime: 1601-01-01 02:00:00, LastAccessTime: 1601-01-01 02:00:00, LastWriteTime: 1601-01-01 02:00:00, ChangeTime: 1601-01-01 02:00:00, FileAttributes: ANNCI 10:10:27 826899 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS 10:10:27 828118 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 829170 SamExpertAtnaujinimas.exe 5112 QueryAttributeTagFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS Attributes: ANCI, ReparseTag: 0x0 10:10:27 829382 SamExpertAtnaujinimas.exe 5112 SetDispositionInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS Delete: True 10:10:27 829642 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\modern-wizard.bmp SUCCESS 10:10:27 832871 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 833298 SamExpertAtnaujinimas.exe 5112 QueryBasicInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS CreationTime: 2014-02-20 10:10:20, LastAccessTime: 2014-02-20 10:10:20, LastWriteTime: 2014-02-20 10:10:20, ChangeTime: 2014-02-20 10:10:20, FileAttributes: ANCI 10:10:27 833455 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS 10:10:27 834641 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS Desired Access: Write Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 835568 SamExpertAtnaujinimas.exe 5112 SetBasicInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS CreationTime: 1601-01-01 02:00:00, LastAccessTime: 1601-01-01 02:00:00, LastWriteTime: 1601-01-01 02:00:00, ChangeTime: 1601-01-01 02:00:00, FileAttributes: ANNCI 10:10:27 835953 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS 10:10:27 837133 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 838124 SamExpertAtnaujinimas.exe 5112 QueryAttributeTagFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS Attributes: ANCI, ReparseTag: 0x0 10:10:27 838320 SamExpertAtnaujinimas.exe 5112 SetDispositionInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS Delete: True 10:10:27 838952 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\nsDialogs.dll SUCCESS 10:10:27 841796 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 842239 SamExpertAtnaujinimas.exe 5112 QueryBasicInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS CreationTime: 2014-02-20 10:10:20, LastAccessTime: 2014-02-20 10:10:20, LastWriteTime: 2014-02-20 10:10:20, ChangeTime: 2014-02-20 10:10:20, FileAttributes: ANCI 10:10:27 842393 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS 10:10:27 843567 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS Desired Access: Write Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 844490 SamExpertAtnaujinimas.exe 5112 SetBasicInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS CreationTime: 1601-01-01 02:00:00, LastAccessTime: 1601-01-01 02:00:00, LastWriteTime: 1601-01-01 02:00:00, ChangeTime: 1601-01-01 02:00:00, FileAttributes: ANNCI 10:10:27 844846 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS 10:10:27 846091 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 847072 SamExpertAtnaujinimas.exe 5112 QueryAttributeTagFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS Attributes: ANCI, ReparseTag: 0x0 10:10:27 847268 SamExpertAtnaujinimas.exe 5112 SetDispositionInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS Delete: True 10:10:27 847845 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp\System.dll SUCCESS 10:10:27 849481 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp NO MORE FILES 10:10:27 849808 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS 10:10:27 851780 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 852213 SamExpertAtnaujinimas.exe 5112 QueryDirectory C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS Filter: nsb6EEC.tmp, 1: nsb6EEC.tmp 10:10:27 852576 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp SUCCESS 10:10:27 854702 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 855128 SamExpertAtnaujinimas.exe 5112 QueryBasicInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS CreationTime: 2014-02-20 10:10:20, LastAccessTime: 2014-02-20 10:10:27, LastWriteTime: 2014-02-20 10:10:27, ChangeTime: 2014-02-20 10:10:27, FileAttributes: DNCI 10:10:27 855289 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS 10:10:27 856495 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS Desired Access: Write Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 857422 SamExpertAtnaujinimas.exe 5112 SetBasicInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS CreationTime: 1601-01-01 02:00:00, LastAccessTime: 1601-01-01 02:00:00, LastWriteTime: 1601-01-01 02:00:00, ChangeTime: 1601-01-01 02:00:00, FileAttributes: NNCI 10:10:27 857777 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS 10:10:27 859083 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS Desired Access: Read Attributes, Delete, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 859455 SamExpertAtnaujinimas.exe 5112 QueryAttributeTagFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS Attributes: DNCI, ReparseTag: 0x0 10:10:27 859657 SamExpertAtnaujinimas.exe 5112 SetDispositionInformationFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS Delete: True 10:10:27 859917 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Users\vilma\AppData\Local\Temp\nsb6EEC.tmp SUCCESS 10:10:27 861443 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\Rpc\Extensions REPARSE Desired Access: Read 10:10:27 861735 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\SOFTWARE\Microsoft\Rpc\Extensions SUCCESS Desired Access: Read 10:10:27 862020 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\Rpc\Extensions SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:27 862181 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL SUCCESS Type: REG_EXPAND_SZ, Length: 20, Data: Ole32.dll 10:10:27 862373 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\Rpc\Extensions SUCCESS 10:10:27 864262 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCR SUCCESS 10:10:27 865282 SamExpertAtnaujinimas.exe 5112 Thread Exit SUCCESS Thread ID: 3264, User Time: 0.0000000, Kernel Time: 0.0000000 10:10:27 865372 SamExpertAtnaujinimas.exe 5112 Thread Exit SUCCESS Thread ID: 3208, User Time: 0.0000000, Kernel Time: 0.0000000 10:10:27 865686 SamExpertAtnaujinimas.exe 5112 Thread Exit SUCCESS Thread ID: 5092, User Time: 0.0000000, Kernel Time: 0.0000000 10:10:27 865795 SamExpertAtnaujinimas.exe 5112 Thread Exit SUCCESS Thread ID: 844, User Time: 0.0000000, Kernel Time: 0.0000000 10:10:27 868169 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Users\vilma\Desktop\netutils.dll NAME NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 10:10:27 870263 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Windows\SysWOW64\netutils.dll SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 871302 SamExpertAtnaujinimas.exe 5112 QueryBasicInformationFile C:\Windows\SysWOW64\netutils.dll SUCCESS CreationTime: 2010-11-21 05:24:16, LastAccessTime: 2010-11-21 05:24:16, LastWriteTime: 2010-11-21 05:24:16, ChangeTime: 2013-11-06 18:07:30, FileAttributes: A 10:10:27 871472 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\SysWOW64\netutils.dll SUCCESS 10:10:27 872681 SamExpertAtnaujinimas.exe 5112 CreateFile C:\Windows\SysWOW64\netutils.dll SUCCESS Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 10:10:27 874243 SamExpertAtnaujinimas.exe 5112 CreateFileMapping C:\Windows\SysWOW64\netutils.dll FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: 10:10:27 879371 SamExpertAtnaujinimas.exe 5112 CreateFileMapping C:\Windows\SysWOW64\netutils.dll SUCCESS SyncType: SyncTypeOther 10:10:27 882780 SamExpertAtnaujinimas.exe 5112 Load Image C:\Windows\SysWOW64\netutils.dll SUCCESS Image Base: 0x73110000, Image Size: 0x9000 10:10:27 883255 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\SysWOW64\netutils.dll SUCCESS 10:10:27 888251 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 SUCCESS 10:10:27 889355 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag SUCCESS 10:10:27 889621 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag SUCCESS 10:10:27 889800 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\PropertyBag SUCCESS 10:10:27 889983 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag SUCCESS 10:10:27 890140 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag SUCCESS 10:10:27 890310 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag SUCCESS 10:10:27 890512 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag SUCCESS 10:10:27 890673 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag SUCCESS 10:10:27 890862 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag SUCCESS 10:10:27 891048 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag SUCCESS 10:10:27 891215 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag SUCCESS 10:10:27 891398 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag SUCCESS 10:10:27 891584 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag SUCCESS 10:10:27 891776 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag SUCCESS 10:10:27 891978 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag SUCCESS 10:10:27 892424 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 SUCCESS 10:10:27 893251 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS 10:10:27 893684 SamExpertAtnaujinimas.exe 5112 RegOpenKey HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\GRE_Initialize SUCCESS Desired Access: Read 10:10:27 894005 SamExpertAtnaujinimas.exe 5112 RegSetInfoKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:10:27 894156 SamExpertAtnaujinimas.exe 5112 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles NAME NOT FOUND Length: 20 10:10:27 894326 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize SUCCESS 10:10:27 895079 SamExpertAtnaujinimas.exe 5112 Thread Exit SUCCESS Thread ID: 4144, User Time: 0.9672062, Kernel Time: 0.3432022 10:10:27 904335 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\System32\apisetschema.dll SUCCESS Name: \Windows\System32\apisetschema.dll 10:10:27 905034 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Users\vilma\Desktop\SamExpertAtnaujinimas.exe SUCCESS Name: \Users\vilma\Desktop\SamExpertAtnaujinimas.exe 10:10:27 905554 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\CRTDLL.dll SUCCESS Name: \Windows\SysWOW64\crtdll.dll 10:10:27 906048 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\propsys.dll SUCCESS Name: \Windows\SysWOW64\propsys.dll 10:10:27 906558 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\uxtheme.dll SUCCESS Name: \Windows\SysWOW64\uxtheme.dll 10:10:27 906994 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\dwmapi.dll SUCCESS Name: \Windows\SysWOW64\dwmapi.dll 10:10:27 907472 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\riched20.dll SUCCESS Name: \Windows\SysWOW64\riched20.dll 10:10:27 907930 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\ntmarta.dll SUCCESS Name: \Windows\SysWOW64\ntmarta.dll 10:10:27 908286 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\ntshrui.dll SUCCESS Name: \Windows\SysWOW64\ntshrui.dll 10:10:27 908706 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Program Files (x86)\TeamViewer\Version8\tv_w32.dll SUCCESS Name: \Program Files (x86)\TeamViewer\Version8\tv_w32.dll 10:10:27 909091 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\shfolder.dll SUCCESS Name: \Windows\SysWOW64\shfolder.dll 10:10:27 909460 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\srvcli.dll SUCCESS Name: \Windows\SysWOW64\srvcli.dll 10:10:27 909688 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\netutils.dll SUCCESS Name: \Windows\SysWOW64\netutils.dll 10:10:27 909925 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\profapi.dll SUCCESS Name: \Windows\SysWOW64\profapi.dll 10:10:27 910140 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\cscapi.dll SUCCESS Name: \Windows\SysWOW64\cscapi.dll 10:10:27 910361 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\linkinfo.dll SUCCESS Name: \Windows\SysWOW64\linkinfo.dll 10:10:27 910582 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\slc.dll SUCCESS Name: \Windows\SysWOW64\slc.dll 10:10:27 910820 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll SUCCESS Name: \Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll 10:10:27 911041 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\version.dll SUCCESS Name: \Windows\SysWOW64\version.dll 10:10:27 911266 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\System32\wow64win.dll SUCCESS Name: \Windows\System32\wow64win.dll 10:10:27 911490 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\System32\wow64.dll SUCCESS Name: \Windows\System32\wow64.dll 10:10:27 911721 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\System32\wow64cpu.dll SUCCESS Name: \Windows\System32\wow64cpu.dll 10:10:27 911933 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\cryptbase.dll SUCCESS Name: \Windows\SysWOW64\cryptbase.dll 10:10:27 912141 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\sspicli.dll SUCCESS Name: \Windows\SysWOW64\sspicli.dll 10:10:27 912356 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\oleaut32.dll SUCCESS Name: \Windows\SysWOW64\oleaut32.dll 10:10:27 912574 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\clbcatq.dll SUCCESS Name: \Windows\SysWOW64\clbcatq.dll 10:10:27 912786 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\usp10.dll SUCCESS Name: \Windows\SysWOW64\usp10.dll 10:10:27 913020 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\sechost.dll SUCCESS Name: \Windows\SysWOW64\sechost.dll 10:10:27 913235 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\advapi32.dll SUCCESS Name: \Windows\SysWOW64\advapi32.dll 10:10:27 913453 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\msvcrt.dll SUCCESS Name: \Windows\SysWOW64\msvcrt.dll 10:10:27 913665 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\ole32.dll SUCCESS Name: \Windows\SysWOW64\ole32.dll 10:10:27 913873 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\imm32.dll SUCCESS Name: \Windows\SysWOW64\imm32.dll 10:10:27 914130 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\cfgmgr32.dll SUCCESS Name: \Windows\SysWOW64\cfgmgr32.dll 10:10:27 914344 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\shell32.dll SUCCESS Name: \Windows\SysWOW64\shell32.dll 10:10:27 914569 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\setupapi.dll SUCCESS Name: \Windows\SysWOW64\setupapi.dll 10:10:27 914790 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\msctf.dll SUCCESS Name: \Windows\SysWOW64\msctf.dll 10:10:27 915005 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\Wldap32.dll SUCCESS Name: \Windows\SysWOW64\Wldap32.dll 10:10:27 915220 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\devobj.dll SUCCESS Name: \Windows\SysWOW64\devobj.dll 10:10:27 915435 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\KernelBase.dll SUCCESS Name: \Windows\SysWOW64\KernelBase.dll 10:10:27 915643 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\kernel32.dll SUCCESS Name: \Windows\SysWOW64\kernel32.dll 10:10:27 915913 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\rpcrt4.dll SUCCESS Name: \Windows\SysWOW64\rpcrt4.dll 10:10:27 916128 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\user32.dll SUCCESS Name: \Windows\SysWOW64\user32.dll 10:10:27 916371 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\gdi32.dll SUCCESS Name: \Windows\SysWOW64\gdi32.dll 10:10:27 916602 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\shlwapi.dll SUCCESS Name: \Windows\SysWOW64\shlwapi.dll 10:10:27 916824 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\lpk.dll SUCCESS Name: \Windows\SysWOW64\lpk.dll 10:10:27 917067 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\System32\ntdll.dll SUCCESS Name: \Windows\System32\ntdll.dll 10:10:27 917292 SamExpertAtnaujinimas.exe 5112 QueryNameInformationFile C:\Windows\SysWOW64\ntdll.dll SUCCESS Name: \Windows\SysWOW64\ntdll.dll 10:10:27 919104 SamExpertAtnaujinimas.exe 5112 Process Exit SUCCESS Exit Status: 2, User Time: 1.2012077 seconds, Kernel Time: 0.9828063 seconds, Private Bytes: 2 674 688, Peak Private Bytes: 2 904 064, Working Set: 9 805 824, Peak Working Set: 10 444 800 10:10:27 919325 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options SUCCESS 10:10:27 919559 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows SUCCESS 10:10:27 920085 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options SUCCESS 10:10:27 920204 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 SUCCESS 10:10:27 920771 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\System\CurrentControlSet\Control\Nls\Sorting\Versions SUCCESS 10:10:27 921265 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\System\CurrentControlSet\Control\SESSION MANAGER SUCCESS 10:10:27 921400 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM SUCCESS 10:10:27 921532 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\System\CurrentControlSet\Control\Nls\CustomLocale SUCCESS 10:10:27 921849 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions SUCCESS 10:10:27 934639 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU SUCCESS 10:10:27 934774 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKCU\Software\Classes SUCCESS 10:10:27 934976 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\System\CurrentControlSet\Control\Nls\Locale SUCCESS 10:10:27 935075 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts SUCCESS 10:10:27 935162 SamExpertAtnaujinimas.exe 5112 RegCloseKey HKLM\System\CurrentControlSet\Control\Nls\Language Groups SUCCESS 10:10:27 935370 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\SysWOW64\en-US\msctf.dll.mui SUCCESS 10:10:27 935909 SamExpertAtnaujinimas.exe 5112 CloseFile C:\Windows\Fonts\StaticCache.dat SUCCESS 10:10:27 936239 SamExpertAtnaujinimas.exe 5112 CloseFile C:\SamExpert\baz2003\techsalygos SUCCESS