PC Painfully Slow - Especially IE

woody55 · Oct 8, 2017

Is there anything I should try and do while in safe mode in case I never get in again

woody55 · Oct 8, 2017

Hi - sorry - yes all seemed well.

Nothing to report otherwise

Can I run anything that will help - diagnose ??

Juliet · Oct 8, 2017

OK
Let's pretend your system is working now(I sent a prayer along with that comment)
I'm going to have to send you to MalwareBytes forum to see if they can figure out those error messages.
They deal with that much more then I do.

You'll need to register there, create a new topic
Topic title; MalwareBytes will not function, or something similar
https://forums.malwarebytes.com/forum/41-malwarebytes-3/

If you can post the MBAM log you did here that shows all the error messages I think it would help also, they may ask you zip and upload the files to be examined.

You can post the link to this topic too if you like.

woody55 · Oct 8, 2017

Ok managed to start Windiws installer service in safe mode with a registry adjustment typed into command prompt - now uninstalling that Windows update which I didn't want anyway.

It's gone but not sure that was even the thing ?

Juliet · Oct 8, 2017

Have you tried to boot into normal mode again?

As far as being malware related, I don't think so.
What I would had suggested next would likely had been an online scanner
As far as trying to diagnose what happened to windows,

also - I am unable to turn on windows security

we had enabled windows security, and it picked the worse time in the world to start downloading updates.

Juliet · Oct 8, 2017

woody55 said:
It's gone but not sure that was even the thing ?

I have no idea, my fingers are crossed that if more updates come in it don't do that again!

woody55 · Oct 8, 2017

Ok thanks anyway

Have posted on malwarebytes

https://forums.malwarebytes.com/topic/212300-malwarebytes-wont-run-and-might-have-caused-pc-failure/

woody55 · Oct 8, 2017

A restart ends up the same / blue screen cycle

woody55 · Oct 8, 2017

Is it worth restoring the registry with tweaking thing I did in very first post ???

Juliet · Oct 8, 2017

woody55 said:
Is it worth restoring the registry with tweaking thing I did in very first post ???

Let's wait and see what the tech guys at MBAM forums suggest first.

woody55 · Oct 8, 2017

Ok

Can I ask - when I used to use these forums several years ago a lot of solutions used to involve the use of soy it S&D but don't see it mentioned much now but malwarebytes seems to be preferred - why is that ?

woody55 · Oct 8, 2017

Spybot I mean

woody55 · Oct 8, 2017

No sign of life from malwarebytes team

I've got back in via safe mode with networking

Located window/ mini dump folder
And see some crashes that have happened over the last few days while I was away at the weekend - wife told me she found the PC in startup star a few times

More crucially maybe in particular is the crash dump file from 6:17pm tonight when the first BSOD issue started

I can't read these files though .dmp - can you ?

Will they help ?

Juliet · Oct 8, 2017

woody55 said:
No sign of life from malwarebytes team

I've got back in via safe mode with networking

Located window/ mini dump folder
And see some crashes that have happened over the last few days while I was away at the weekend - wife told me she found the PC in startup star a few times

More crucially maybe in particular is the crash dump file from 6:17pm tonight when the first BSOD issue started

I can't read these files though .dmp - can you ?

Will they help ?

You can post it and I can try to research what it says.

The forums can be a little slow on the weekends, maybe pick back up during the week,

Juliet · Oct 8, 2017

I often refer people here
https://forums.whatthetech.com/index.php?showforum=119

The above is also another forum where I am a member, the tech guys there might be able to assist more then me with the BSOD

woody55 · Oct 8, 2017

The dmp files are gobbeltygook (coded) I believe a debugging software is required to interpret them

woody55 · Oct 9, 2017

Hi Juliet

I bit the bullet and while in safe mode I used tweaking to restore the registry to my initial backup from the 4th

Hey - Presto PC Started without BSOD in normal mode.

So now that I'm in - I imagine there might now be some issues with my machine after restoring the registry to a point before we have made other changes following that time.

Are you still willing to help me out ? :red: (Pretty Please )

Cheers

Murdo

Juliet · Oct 9, 2017

The dmp files are gobbeltygook

LOL!!

I bit the bullet and while in safe mode I used tweaking to restore the registry to my initial backup from the 4th

Hey - Presto PC Started without BSOD in normal mode.

So now that I'm in - I imagine there might now be some issues with my machine after restoring the registry to a point before we have made other changes following that time.

Are you still willing to help me out ? (Pretty Please )

of course.
Looking back over the original FRST logs it indicated that Tweaking had a few problems so.....you are very lucky, and I also think very smart!

Error: (10/04/2017 07:01:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Repair_Windows.exe, version: 4.0.0.7, time stamp: 0x59d3abef
Faulting application path: C:\Program Files\Tweaking.com\Windows Repair (All in One)\Repair_Windows.exe

I think, and I have nothing to back me on this, it ran and was able to do a little something that has enabled you to get to where you are now.

Let's see if we can get an online scan.

Emsisoft Emergency Kit

Please download Emsisoft Emergency Kit and save it to your desktop. Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop. Leave all settings as they are and click the Extract button at the bottom. A folder named EEK will be created in the root of the drive (usually c:\).

After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates.
When update is complete, click Malware Scan. When asked if you want the scanner to scan for Potentially Unwanted Programs, click Yes. Emsisoft Emergency Kit will start scanning.
When the scan is completed click Quarantine selected objects. Note, this option is only available if malicious objects were detected during the scan.
When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
Please save the log in Notepad on your desktop and post the contents in your next reply.
When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.

woody55 · Oct 9, 2017

Aww Shucks - Thanks. Also think your way cleverer though :red:

Malwarebytes now installed ok and works

Run a scan - Log Below. Only one thing found relating to the KMSPico thing I had

Running Emisoft scanner just now will update you when its done

Date Time Tick Count Process ID Thread ID Log Level Context Tag Function Name File Name Line Number Message
10/09/17 " 00:47:03.203" 679015 1c18 1c2c INFO LogController CLogController::Start "LogController.cpp" 86 "Started logging"
10/09/17 " 00:47:03.203" 679015 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 284 "Service Controller starting controller initialization"
10/09/17 " 00:47:03.203" 679015 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 285 "Product code MBAM-C"
10/09/17 " 00:47:03.203" 679015 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 286 "Product version 3.2.2.2029"
10/09/17 " 00:47:03.203" 679015 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 287 "Product build consumer"
10/09/17 " 00:47:03.219" 679031 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 288 "OS Version Windows 10 (Build 14393.187)"
10/09/17 " 00:47:03.297" 679109 1c18 1c2c WARNING PoliciesControllerImpl mb:

oliciescontrollerimpl:

oliciesConfigHandler::LoadConfig "PoliciesConfigHandler.cpp" 414 "Config file not found C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\PoliciesConfig.json. Using default values."
10/09/17 " 00:47:03.980" 679796 1c18 1c2c INFO PoliciesControllerImpl mb:

oliciescontrollerimpl:

oliciesConfigHandler::ShellExtensionControl "PoliciesConfigHandler.cpp" 1177 "Shell extension registered."
10/09/17 " 00:47:03.980" 679796 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartPoliciesController "ServiceControllerImplementation.cpp" 1870 "Policies Controller Started"
10/09/17 " 00:47:03.980" 679796 1c18 1c2c INFO LicenseControllerCOM CLicenseController::Start "LicenseController.cpp" 98 "CLicenseController::Start"
10/09/17 " 00:47:04.808" 680625 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartLicenseController "ServiceControllerImplementation.cpp" 1899 "License Controller Started"
10/09/17 " 00:47:04.964" 680781 1c18 1c2c ERROR UpdateControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Could not open file for reading C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\UpdateControllerConfig.json"
10/09/17 " 00:47:04.964" 680781 1c18 1c2c INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ReadConfig "UpdateControllerImplHelper.cpp" 328 "Config file C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\UpdateControllerConfig.json not found; using default values"
10/09/17 " 00:47:05.043" 680859 1c18 1c2c INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::Initialize "UpdateControllerImplHelper.cpp" 260 "COMPONENT PACKAGE VERSION: 1.0.0, DB PACKAGE VERSION: 1.0.0"
10/09/17 " 00:47:05.058" 680875 1c18 1c2c INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 4102 "Signature successfully validated"
10/09/17 " 00:47:05.652" 681468 1c18 1c2c INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 4106 "DB manifest successfully validated"
10/09/17 " 00:47:05.652" 681468 1c18 1c2c INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest "UpdateControllerImplHelper.cpp" 4371 "Validated DB manifest - success"
10/09/17 " 00:47:06.152" 681968 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartUpdateController "ServiceControllerImplementation.cpp" 1928 "Update Controller Started"
10/09/17 " 00:47:06.152" 681968 1c18 1c2c INFO CloudController CCloudController::Start "CloudController.cpp" 101 "CCloudController::Initialize"
10/09/17 " 00:47:06.246" 682062 1c18 1c2c INFO CloudCtrlImpl Initialize "CloudControllerImpl.cpp" 58 "CC Initialize called"
10/09/17 " 00:47:06.246" 682062 1c18 1c2c ERROR CloudCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Could not open file for reading C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\CloudConfig.json"
10/09/17 " 00:47:06.246" 682062 1c18 1c2c INFO CloudCtrlImpl CloudControllerImplHelper::ReadConfig "CloudControllerImplHelper.cpp" 2183 "Config file C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\CloudConfig.json not found; using default values"
10/09/17 " 00:47:06.527" 682343 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartCloudController "ServiceControllerImplementation.cpp" 1958 "Cloud Controller Started"
10/09/17 " 00:47:06.558" 682375 1c18 1c2c INFO TelemController CTelemetryController::Start_impl "TelemetryController.cpp" 116 "::Initialize"
10/09/17 " 00:47:06.918" 682734 1c18 1c2c ERROR TelemCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Could not open file for reading C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\TelemCtrlConfig.json"
10/09/17 " 00:47:06.918" 682734 1c18 1c2c INFO TelemCtrlImpl TelemetryControllerImpl::ReadConfig "TelemetryControllerImplHelper.cpp" 375 "Config file C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\TelemCtrlConfig.json not found; using default values"
10/09/17 " 00:47:06.918" 682734 1c18 1c2c ERROR TelemCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Could not open file for reading C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\telemetry.json"
10/09/17 " 00:47:07.043" 682859 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartTelemetryController "ServiceControllerImplementation.cpp" 2017 "Telemetry Controller Started"
10/09/17 " 00:47:07.074" 682890 1c18 1c2c INFO CleanController CCleanController::Start "CleanController.cpp" 150 "Initializing CleanController"
10/09/17 " 00:47:07.371" 683187 1c18 1c2c INFO CleanControllerImpl CleanControllerImpl::Start "CleanControllerImpl.cpp" 88 "Starting Clean Controller Impl"
10/09/17 " 00:47:07.371" 683187 1c18 1c2c ERROR CleanControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Could not open file for reading C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\CleanControllerConfig.json"
10/09/17 " 00:47:07.371" 683187 1c18 1c2c WARNING CleanControllerImpl CleanControllerImpl::ReadConfig "CleanControllerImpl.cpp" 277 "Failed to read config file C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\CleanControllerConfig.json"
10/09/17 " 00:47:07.371" 683187 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 802 "Initializing system paths and resolving DOR status"
10/09/17 " 00:47:07.418" 683234 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 823 "Processing pending actions"
10/09/17 " 00:47:07.418" 683234 1c18 1c2c INFO CleanController CCleanController::Start::<lambda_d1e329198e4626befe0c34caccf0da2d>:

perator () "CleanController.cpp" 151 "CleanController initialization complete"
10/09/17 " 00:47:07.418" 683234 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartCleanController "ServiceControllerImplementation.cpp" 2078 "Clean Controller Started"
10/09/17 " 00:47:09.028" 684843 1c18 1c2c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanConfigHandler::LoadConfig "ScanConfigHandler.cpp" 83 "Could not load config file C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\ScanConfig.json. Using default values."
10/09/17 " 00:47:09.231" 685046 1c18 1354 INFO Actions ActionsManager:

rocessPendingActionsAfterReboot "ActionsManager.cpp" 962 "Executing pending post cleanup actions"
10/09/17 " 00:47:09.231" 685046 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 927 "Initializing CLS Engine"
10/09/17 " 00:47:09.231" 685046 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 962 "Initializing swiss army SDK"
10/09/17 " 00:47:14.809" 690625 1c18 189c INFO LicenseControllerImpl mb::licensecontrollerimpl::KeystoneImpl::GetInstallationToken "KeystoneImpl.cpp" 1070 "Unable to retreive the installation token data. Performing a register to receive a token from Keystone."
10/09/17 " 00:47:14.809" 690625 1c18 189c INFO LicenseControllerImpl mb::licensecontrollerimpl::KeystoneImpl::GetInstallationToken "KeystoneImpl.cpp" 1084 "GetInstallationToken machineId is empty, calulating the machineId."
10/09/17 " 00:47:15.794" 691609 1c18 1354 INFO CleanControllerImpl CleanDBParser:

arse "CleanDBParser.cpp" 18 "Parsing C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb"
10/09/17 " 00:47:15.794" 691609 1c18 1354 INFO GalaxyRuleParser mb::common::galaxyrules::SimpleRuleFileParserV2:

arse "GalaxyRuleParser.cpp" 2974 "Successfully parsed 91 records."
10/09/17 " 00:47:15.794" 691609 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 990 "Loading Hubble cache"
10/09/17 " 00:47:15.919" 691734 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartScanController "ServiceControllerImplementation.cpp" 2107 "Scan Controller Started"
10/09/17 " 00:47:16.044" 691859 1c18 1c2c WARNING RTPControllerImpl mb::rtpcontrollerimpl::RTPConfigHandler::LoadConfig "RTPConfigHandler.cpp" 137 "Config file not found C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\RtpConfig.json. Using default values."
10/09/17 " 00:47:16.044" 691859 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartRtpController "ServiceControllerImplementation.cpp" 2136 "RTP Controller Started"
10/09/17 " 00:47:16.044" 691859 1c18 1c2c INFO MWACControllerCOM CMWACController::StartV2 "MWACController.cpp" 231 "Initializing MWAC Controller"
10/09/17 " 00:47:16.278" 692093 1c18 1c2c INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacConfigHandler::CreateMwacConfigFile "MwacConfigHandler.cpp" 374 "Config file not found C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\MwacControllerConfig.json. Using default values."
10/09/17 " 00:47:16.294" 692109 1c18 1c2c INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::IsLicenseStateValid "MWACControllerImplHelper.cpp" 479 "license state is: Unknown"
10/09/17 " 00:47:16.294" 692109 1c18 1c2c INFO MWACControllerCOM CMWACController::StartV2::<lambda_eb1667078bf4f26957e1d2f7234fe9e0>:

perator () "MWACController.cpp" 232 "MWAC Controller initialization complete"
10/09/17 " 00:47:16.294" 692109 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartMWACController "ServiceControllerImplementation.cpp" 2166 "MWAC Controller Started"
10/09/17 " 00:47:16.372" 692187 1c18 1c2c INFO AntiRansomwareControllerImpl mb::arwcontrollerimpl::ArwConfigHandler::LoadConfig "ArwConfigHandler.cpp" 67 "Config file not found C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\ArwControllerConfig.json. Using default values."
10/09/17 " 00:47:16.481" 692296 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartArwController "ServiceControllerImplementation.cpp" 2198 "ARW Controller Started"
10/09/17 " 00:47:16.653" 692468 1c18 18e4 INFO ScanControllerImpl mb::scancontrollerimpl::ScanScheduler::UpdateScheduledScans "ScanScheduler.cpp" 1119 "License state changed from Unknown to Trial. Removing existing scheduled scans and adding a default daily scan."
10/09/17 " 00:47:17.153" 692968 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1017 "Starting white list manager"
10/09/17 " 00:47:17.153" 692968 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1029 "Starting restore engine"
10/09/17 " 00:47:17.153" 692968 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1044 "Entering into main loop"
10/09/17 " 00:47:17.200" 693015 1c18 1c2c WARNING AEControllerImpl mb::aecontrollerimpl::AEConfigHandler::LoadConfig "AeConfigHandler.cpp" 118 "Config file not found C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\AeConfig.json. Using default values."
10/09/17 " 00:47:17.231" 693046 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartAEController "ServiceControllerImplementation.cpp" 2227 "Anti-Exploit Controller Started"
10/09/17 " 00:47:17.247" 693062 1c18 0a3c INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::LoadAeSdk "AEControllerImplHelper.cpp" 270 "Load and initialize the MbaeSdk"
10/09/17 " 00:47:17.466" 693281 1c18 18e4 INFO RtpShim RtpShimImpl::Install "RtpShimImpl.cpp" 139 "rtp.dll was successfully loaded. rtpPath=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\rtp.dll>."
10/09/17 " 00:47:17.544" 693359 1c18 18e4 WARNING DriverPackage mb::common::driver:

riverPackage::RemovePackage "DriverPackage.cpp" 360 "Could not delete driver .sys file [mbam]"
10/09/17 " 00:47:17.544" 693359 1c18 18e4 WARNING DriverPackage mb::common::driver:

riverPackage::RemovePackage "DriverPackage.cpp" 364 "Could not delete driver .cat file [mbam]"
10/09/17 " 00:47:17.544" 693359 1c18 18e4 WARNING DriverPackage mb::common::driver:

riverPackage::RemovePackage "DriverPackage.cpp" 368 "Could not delete driver .inf file [mbam]"
10/09/17 " 00:47:17.784" 693593 1c18 0a3c INFO AeShimImpl AeShimImpl::InitializeInternal "AeShimImpl.cpp" 205 "mbae-api-na.dll was successfully loaded. aePath=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbae-api-na.dll>."
10/09/17 " 00:47:17.816" 693625 1c18 1c2c WARNING SPControllerImpl mb::spcontrollerimpl::SpConfigHandler::LoadConfig "SpConfigHandler.cpp" 204 "Config file not found C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Config\SpConfigFile.json. Using default values."
10/09/17 " 00:47:17.831" 693640 1c18 1c2c INFO SPControllerImpl mb::spcontrollerimpl::SpConfigHandler::LoadConfig "SpConfigHandler.cpp" 269 "Protecting MBAM Install path - C:\Program Files\Malwarebytes\Anti-Malware"
10/09/17 " 00:47:17.831" 693640 1c18 1c2c INFO SPControllerImpl mb::spcontrollerimpl::SPShimModuleLoader::SPShimSetVerificationMode "SPShimModuleLoader.cpp" 445 "verification mode = 0 ."
10/09/17 " 00:47:17.831" 693640 1c18 1c2c INFO SPSDK SetVerificationMode "SelfProtectionUser.cpp" 52 "Setting Verification mode to 0."
10/09/17 " 00:47:17.831" 693640 1c18 1c2c INFO SPControllerImpl mb::spcontrollerimpl::SPControllerImpl::InitializeImpl "SPControllerImplHelper.cpp" 141 "Successfully initialized the SPControllerImpl, spFolderPath=[C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE]."
10/09/17 " 00:47:17.831" 693640 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartSpController "ServiceControllerImplementation.cpp" 1987 "Self-Protection Controller Started"
10/09/17 " 00:47:17.831" 693640 1c18 1c2c INFO ServiceControllerImpl ServiceControllerImplementation::StartSpController "ServiceControllerImplementation.cpp" 1989 "Start Service Controller complete"
10/09/17 " 00:47:17.847" 693656 1c18 21f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartApp "ServiceControllerImplementation.cpp" 68 "Starting 'C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe' in session 0x1"
10/09/17 " 00:47:17.847" 693656 0000 2754 INFO MBAMInstaller IService.cpp "MbamService::Initialize" 197 "Starting post install process."
10/09/17 " 00:47:17.894" 693703 1c18 0a3c INFO AeShimImpl AeShimImpl::InitializeInternal "AeShimImpl.cpp" 220 "Successfully Initialized MBAE"
10/09/17 " 00:47:17.909" 693718 1c18 0a3c ERROR AeShimImpl AeShimImpl::MbaeSetExclusions "AeShimImpl.cpp" 348 "MbaeSetExclusions failed. status(8)"
10/09/17 " 00:47:17.909" 693718 1c18 0a3c ERROR AEControllerImpl mb::aecontrollerimpl::AeExclusionsHandler::InitializeExclusions "ExclusionsHandler.cpp" 73 "Could not configure exclusions in MbaeSdk (8)"
10/09/17 " 00:47:18.019" 693828 1c18 18e4 INFO MBAMShimImpl MBAMShimImpl::InitializeInternal "MBAMShimImpl.cpp" 62 "MBAMCore was successfully loaded. CoreFilePath=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMCore.dll>."
10/09/17 " 00:47:18.347" 694156 1c18 0a3c INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::InitializeV2::<lambda_20333c7e7a4ed5da23d2d64c4e55433a>:

perator () "AEControllerImplHelper.cpp" 236 "Start with Anti-Exploit enabled."
10/09/17 " 00:47:18.347" 694156 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeSetConfig "AeShimImpl.cpp" 249 "Successfully configured MBAE."
10/09/17 " 00:47:18.472" 694281 0000 2754 INFO MBAMInstaller Mbam2xLicense.cpp "Mbam2xLicense::Save" 109 "Key is empty, don't need to Activate."
10/09/17 " 00:47:18.503" 694312 1c18 1c14 WARNING RTPControllerImpl mb::rtpcontrollerimpl::RTPControllerImpl::Enable "RTPControllerImplHelper.cpp" 613 "RTP has not been started, current state = [4]. cannot enable it."
10/09/17 " 00:47:18.503" 694312 1c18 1c14 ERROR RTPControllerCOM CRTPController::EnableProtection "RTPController.cpp" 550 "Failed to enable the RTP module!"
10/09/17 " 00:47:18.503" 694312 0000 2754 INFO MBAMInstaller Mbam2xSettings.cpp "Mbam2xSettings::SaveRtpSettings" 205 "Enable/DisableProtection (rtp) failed."
10/09/17 " 00:47:18.503" 694312 1c18 1c0c INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::StartInitializationThread "MWACControllerImplHelper.cpp" 918 "Web Access Controller is currently initializing"
10/09/17 " 00:47:18.503" 694312 1c18 1c0c INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::StartProtection "MWACControllerImplHelper.cpp" 1539 "Web Access protection is starting..."
10/09/17 " 00:47:18.503" 694312 0000 2754 INFO MBAMInstaller suhlpr.cpp "EP2" 618 "Migrated settings from MBAM 2.x"
10/09/17 " 00:47:18.597" 694406 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeSetExclusions "AeShimImpl.cpp" 337 "Successfully set exclusion list"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (winrar.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (winzip.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (7z.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (7zFM.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (7zG.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (S7Z.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (7zextractor.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (Winzip32.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (Winzip64.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (wzdisktools.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (winzipss.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (cmd.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (mshta.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (winhlp32.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (wscript.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (quicktimeplayer.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (winamp.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (vlc.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (mplayer2.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (wmplayer.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (powerpnt.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (excel.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (excelc.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (winword.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (winwordc.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (mspub.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (soffice.bin)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (foxitreader.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (foxit reader.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (Foxit PhantomPDF.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (FoxitPhantomPDF.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (acrord32.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (acrobat.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (java.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (javaw.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (javaws.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (dragon.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (waterfox.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (tor.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (tbb-firefox.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (palemoon.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (cyberfox.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (icedragon.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (seamonkey.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (maxthon.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (mxapploader.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (opera.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (opera_plugin_wrapper.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (opera_wrapper_32.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (iexplore.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (MicrosoftEdge.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (MicrosoftEdgeCP.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (chrome.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (old_chrome.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (firefox.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (plugin-container.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (FlashPlayerPlugin*.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (helpctr.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (fltldr.exe)"
10/09/17 " 00:47:18.612" 694421 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeAddProtectedApp "AeShimImpl.cpp" 286 "Successfully added protected app (mbae-test.exe)"
10/09/17 " 00:47:18.644" 694453 0000 2754 INFO MBAMInstaller suhlpr.cpp "EP2" 667 "Starting Trial"
10/09/17 " 00:47:19.128" 694937 1c18 0a3c INFO AeShimImpl AeShimImpl::MbaeStart "AeShimImpl.cpp" 358 "MBAE started."
10/09/17 " 00:47:19.128" 694937 1c18 0a3c INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::StartProtectionImpl "AEControllerImplHelper.cpp" 527 "Protection Started"
10/09/17 " 00:47:19.144" 694953 1c18 1c14 ERROR LicenseControllerImpl mb::licensecontrollerimpl::KeystoneImpl::SendKeystoneRequest "KeystoneImpl.cpp" 783 "Received a [202] response from Keystone. This isn't one of the expected httpStatus returns."
10/09/17 " 00:47:19.144" 694953 1c18 1c14 ERROR LicenseControllerImpl mb::licensecontrollerimpl::KeystoneImpl::SendKeystoneRequest "KeystoneImpl.cpp" 793 "SendRequest RequestBody ({
""installation_token"" : ""xQrq5qSPP29p5m9wwNax1504858911"",
""tags"" : ""{\\u000a ""affiliate_id"" : """",\\u000a ""affiliate_name"" : ""consumer"",\\u000a ""antivirus"" : [\\u000a ""Windows Defender"",\\u000a ""AVG Antivirus""\\u000a ],\\u000a ""biz_env"" : false,\\u000a ""domain_name"" : """",\\u000a ""is_on_domain"" : false,\\u000a ""license_state"" : ""free"",\\u000a ""os"" : ""Windows 10 (Build 14393.187)"",\\u000a ""os_build"" : ""14393"",\\u000a ""unredeem_reason"" : """",\\u000a ""user_is_admin"" : false\\u000a}""
})."
10/09/17 " 00:47:19.144" 694953 1c18 1c14 ERROR LicenseControllerImpl mb::licensecontrollerimpl::KeystoneImpl::SendKeystoneRequest "KeystoneImpl.cpp" 795 "SendRequest returned with responseBody ({
""message"": ""Trial not allowed"",
""status"": ""failed""
})."
10/09/17 " 00:47:19.144" 694953 1c18 1c14 ERROR LicenseControllerImpl mb::licensecontrollerimpl::KeystoneImpl::KeystoneStart "KeystoneImpl.cpp" 413 "SendKeystoneRequest failed trying to start a trial. Code: 202, Message: {
""message"": ""Trial not allowed"",
""status"": ""failed""
}"
10/09/17 " 00:47:19.159" 694968 0000 2754 INFO MBAMInstaller IService.cpp "MbamService::~MbamService" 136 "Post install process finished."
10/09/17 " 00:47:24.627" 700437 1c18 18e4 INFO MBAMCoreImpl MBAMCoreImpl::Initialize "MBAMCoreImpl.cpp" 123 "MBAMCore was successfully initialized. CoreFolderPath=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE>. DefsFolderPath=<C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE>."
10/09/17 " 00:47:24.799" 700609 1c18 18e4 INFO RtpSDK RtpUserImpl::Start "RtpUserImpl.cpp" 240 "Rtp driver started."
10/09/17 " 00:47:24.799" 700609 1c18 18e4 INFO RtpShim RtpShimImpl::Start "RtpShimImpl.cpp" 230 "Rtp successfully started."
10/09/17 " 00:47:24.799" 700609 1c18 18e4 INFO SPControllerImpl mb::spcontrollerimpl::SPControllerImpl::StartProtection "SPControllerImplHelper.cpp" 925 "Enter StartProtection for SP controller."
10/09/17 " 00:47:24.846" 700656 1c18 18e4 INFO SPSDK Install "SelfProtectionUser.cpp" 83 "SelfProtection verification mode = 0"
10/09/17 " 00:47:25.190" 701000 1c18 18e4 INFO SPSDK Install "SelfProtectionUser.cpp" 89 "SelfProtection driver was successfully installed. Path=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE>."
10/09/17 " 00:47:25.190" 701000 1c18 18e4 INFO SPSDK Install "SelfProtectionUser.cpp" 123 "SelfProtection driver is active!"
10/09/17 " 00:47:25.237" 701046 1c18 161c INFO AntiRansomwareControllerImpl mb::arwcontrollerimpl::ArwRulesHandler::LoadConfig "RulesHandler.cpp" 39 "Config file not found C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\ArwRulesConfig.json. Using default values."
10/09/17 " 00:47:25.643" 701453 1c18 18e4 INFO ScanControllerImpl mb::scancontrollerimpl::ScanScheduler::UpdateScheduledScans "ScanScheduler.cpp" 1105 "License state changed from Trial to Free. Removing existing scheduled scans and adding a default monthly scan."
10/09/17 " 00:47:28.175" 703984 1c18 1730 INFO GalaxyRuleParser mb::common::galaxyrules::SimpleRuleFileParserV2:

arse "GalaxyRuleParser.cpp" 2973 "Successfully parsed 736006 records."
10/09/17 " 00:47:31.457" 707265 1c18 2164 ERROR ArwSDK "" 0 "{Thread: 0x0000161C, Tick: 0x000ACAC1} [arw::mb::dll_driver::do_install] Failed to install driver package. {Error: 1243}"
10/09/17 " 00:47:31.457" 707265 1c18 2164 ERROR ArwSDK "" 0 "{Thread: 0x0000161C, Tick: 0x000ACAC1} [ArwLib::Globals::Impl_Start] {EXCEPTION} ==> {Thread: 0x0000161C, Tick: 0x000ACAC1} [ArwLib::driver_manager::install(31)] Pre-condition not held."
10/09/17 " 00:47:31.457" 707265 1c18 161c ERROR AntiRansomwareControllerImpl mb::arwcontrollerimpl::ArwControllerImpl::StartArwProtection "ArwControllerImplHelper.cpp" 720 "Failed to start the Anti-Ransomware driver!"
10/09/17 " 00:47:35.647" 711453 1c18 2190 ERROR RtpSDK RtpUserImpl::MessageLoop "RtpUserImpl.cpp" 437 "Error getting queued completion status (6)"
10/09/17 " 00:47:35.803" 711609 1c18 18e4 INFO RtpSDK RtpUserImpl::Stop "RtpUserImpl.cpp" 280 "Rtp driver stopped."
10/09/17 " 00:47:35.803" 711609 1c18 18e4 INFO RtpShim RtpShimImpl::Stop "RtpShimImpl.cpp" 242 "Rtp successfully stopped."
10/09/17 " 00:47:36.647" 712453 1c18 18e4 INFO MBAMCoreImpl MBAMCoreImpl::Shutdown "MBAMCoreImpl.cpp" 152 "MBAMCore was successfully shutdown."
10/09/17 " 00:47:36.647" 712453 1c18 18e4 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::StopProtection "MWACControllerImplHelper.cpp" 1580 "Web Access protection has been stopped."
10/09/17 " 00:47:37.537" 713343 1c18 18e4 INFO AeShimImpl AeShimImpl::MbaeShutdown "AeShimImpl.cpp" 430 "MBAE Shutdown"
10/09/17 " 00:47:40.929" 716734 1c18 18e4 INFO SPSDK Uninstall "SelfProtectionUser.cpp" 199 "SelfProtection driver was successfully removed."
10/09/17 " 00:47:40.944" 716750 1c18 1730 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::InitializeMwacSdk "MWACControllerImplHelper.cpp" 780 "Initialization succeeded"
10/09/17 " 00:47:49.794" 725609 1c18 1c14 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::StartScan "Scanner.cpp" 547 "Starting a Threat scan, clientID = MbamUI, clientType = MBClientFullUI."
10/09/17 " 00:47:49.811" 725625 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 4102 "Signature successfully validated"
10/09/17 " 00:47:50.221" 726031 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 4106 "DB manifest successfully validated"
10/09/17 " 00:47:50.221" 726031 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest "UpdateControllerImplHelper.cpp" 4371 "Validated DB manifest - success"
10/09/17 " 00:47:50.221" 726031 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

oUpdate "UpdateControllerImplHelper.cpp" 534 "DoUpdate - Starting check for updates (manual)"
10/09/17 " 00:47:50.221" 726031 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

oUpdate "UpdateControllerImplHelper.cpp" 536 "Checking for: Installer=[No], SDK/Ctlr=[No], DB/CLS=[Yes]"
10/09/17 " 00:47:51.375" 727187 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions "UpdateControllerImplHelper.cpp" 1173 "DB/ClsEng package --> [mbam-c.dbcls.32bit], current version: [1.0.2951]"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2976) of pkg [mbam-c.dbcls.32bit] (FULL) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2952) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2953) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2954) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2955) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2956) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2957) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2958) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2959) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2960) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2961) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.088" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2962) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2963) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2964) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2965) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2966) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2967) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2968) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2969) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2970) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2971) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2972) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2973) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2974) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2975) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.089" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessAvailablePackages "UpdateControllerImplHelper.cpp" 1053 "A New version (1.0.2976) of pkg [mbam-c.dbcls.32bit] (INCR) is available"
10/09/17 " 00:47:52.090" 727906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

oUpdate "UpdateControllerImplHelper.cpp" 545 "Available updates found - beginning download"
10/09/17 " 00:47:52.807" 728625 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta1\dbcls.32bit.incr.7z"
10/09/17 " 00:47:52.858" 728671 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:53.208" 729015 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta2\dbcls.32bit.incr.7z"
10/09/17 " 00:47:53.372" 729187 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:53.531" 729343 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta3\dbcls.32bit.incr.7z"
10/09/17 " 00:47:53.630" 729437 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:53.745" 729562 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta4\dbcls.32bit.incr.7z"
10/09/17 " 00:47:53.891" 729703 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:54.021" 729828 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta5\dbcls.32bit.incr.7z"
10/09/17 " 00:47:54.148" 729953 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:54.494" 730312 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta6\dbcls.32bit.incr.7z"
10/09/17 " 00:47:54.663" 730468 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:55.012" 730828 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta7\dbcls.32bit.incr.7z"
10/09/17 " 00:47:55.180" 730984 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:55.533" 731343 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta8\dbcls.32bit.incr.7z"
10/09/17 " 00:47:55.695" 731500 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:55.801" 731609 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta9\dbcls.32bit.incr.7z"
10/09/17 " 00:47:55.950" 731765 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:56.085" 731890 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta10\dbcls.32bit.incr.7z"
10/09/17 " 00:47:56.206" 732015 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:56.396" 732203 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta11\dbcls.32bit.incr.7z"
10/09/17 " 00:47:56.461" 732265 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:56.837" 732640 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta12\dbcls.32bit.incr.7z"
10/09/17 " 00:47:56.976" 732781 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:57.126" 732937 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta13\dbcls.32bit.incr.7z"
10/09/17 " 00:47:57.271" 733078 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:57.405" 733218 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta14\dbcls.32bit.incr.7z"
10/09/17 " 00:47:57.527" 733343 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:57.698" 733515 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta15\dbcls.32bit.incr.7z"
10/09/17 " 00:47:57.785" 733593 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:57.901" 733718 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta16\dbcls.32bit.incr.7z"
10/09/17 " 00:47:58.042" 733859 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:58.153" 733968 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta17\dbcls.32bit.incr.7z"
10/09/17 " 00:47:58.297" 734109 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:58.411" 734218 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta18\dbcls.32bit.incr.7z"
10/09/17 " 00:47:58.553" 734359 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:58.731" 734546 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta19\dbcls.32bit.incr.7z"
10/09/17 " 00:47:58.834" 734640 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:58.946" 734750 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta20\dbcls.32bit.incr.7z"
10/09/17 " 00:47:59.089" 734906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:59.497" 735312 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta21\dbcls.32bit.incr.7z"
10/09/17 " 00:47:59.638" 735453 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:47:59.757" 735562 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta22\dbcls.32bit.incr.7z"
10/09/17 " 00:47:59.894" 735703 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:48:00.025" 735828 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta23\dbcls.32bit.incr.7z"
10/09/17 " 00:48:00.152" 735968 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:48:00.265" 736078 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta24\dbcls.32bit.incr.7z"
10/09/17 " 00:48:00.407" 736218 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:48:00.526" 736343 1c18 1910 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadComplete "UpdateControllerImplHelper.cpp" 2943 "Download Complete (Successful) for: C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\delta25\dbcls.32bit.incr.7z"
10/09/17 " 00:48:00.668" 736484 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

ownloadUpdates "UpdateControllerImplHelper.cpp" 1413 "Successfully downloaded: mbam-c.dbcls.32bit"
10/09/17 " 00:48:03.704" 739515 1c18 20fc INFO MBAMShimImpl MBAMShimImpl:

repareUpdate "MBAMShimImpl.cpp" 95 "MBAMCore preparing update"
10/09/17 " 00:48:03.704" 739515 1c18 20fc INFO ActionsShim ActionsShim:

repareUpdate "ActionsShim.cpp" 118 "Starting update of actions"
10/09/17 " 00:48:48.647" 784453 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:48:48.648" 784453 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2952"
10/09/17 " 00:48:49.011" 784828 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.05.01"
10/09/17 " 00:48:58.480" 794296 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:48:58.480" 794296 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2953"
10/09/17 " 00:48:58.482" 794296 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.05.02"
10/09/17 " 00:49:02.819" 798625 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:02.819" 798625 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2954"
10/09/17 " 00:49:02.820" 798625 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.05.03"
10/09/17 " 00:49:07.822" 803625 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:07.822" 803625 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2955"
10/09/17 " 00:49:07.824" 803640 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.05.04"
10/09/17 " 00:49:15.981" 811796 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:15.981" 811796 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2956"
10/09/17 " 00:49:15.982" 811796 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.05.05"
10/09/17 " 00:49:23.263" 819078 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:23.264" 819078 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2957"
10/09/17 " 00:49:23.266" 819078 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.05.06"
10/09/17 " 00:49:30.437" 826250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:30.438" 826250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2958"
10/09/17 " 00:49:30.439" 826250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.05.07"
10/09/17 " 00:49:39.160" 834968 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:39.160" 834968 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2959"
10/09/17 " 00:49:39.162" 834968 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.06.01"
10/09/17 " 00:49:41.891" 837703 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:41.892" 837703 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2960"
10/09/17 " 00:49:41.895" 837703 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.06.02"
10/09/17 " 00:49:45.272" 841078 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:45.272" 841078 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2961"
10/09/17 " 00:49:45.274" 841078 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.06.03"
10/09/17 " 00:49:52.909" 848718 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:49:52.910" 848718 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2962"
10/09/17 " 00:49:52.911" 848718 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.06.04"
10/09/17 " 00:50:01.951" 857765 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:01.951" 857765 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2963"
10/09/17 " 00:50:01.953" 857765 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.06.05"
10/09/17 " 00:50:07.667" 863484 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:07.668" 863484 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2964"
10/09/17 " 00:50:07.671" 863484 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.06.06"
10/09/17 " 00:50:09.735" 865546 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:09.735" 865546 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2965"
10/09/17 " 00:50:09.736" 865546 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.06.07"
10/09/17 " 00:50:14.824" 870640 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:14.824" 870640 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2966"
10/09/17 " 00:50:14.828" 870640 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.06.08"
10/09/17 " 00:50:17.442" 873250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:17.443" 873250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2967"
10/09/17 " 00:50:17.446" 873250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.07.01"
10/09/17 " 00:50:22.100" 877906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:22.101" 877906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2968"
10/09/17 " 00:50:22.103" 877906 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.07.02"
10/09/17 " 00:50:26.546" 882359 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:26.546" 882359 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2969"
10/09/17 " 00:50:26.548" 882359 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.07.03"
10/09/17 " 00:50:29.356" 885171 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:29.356" 885171 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2970"
10/09/17 " 00:50:29.358" 885171 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.07.04"
10/09/17 " 00:50:58.310" 914125 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:50:58.310" 914125 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2971"
10/09/17 " 00:50:58.312" 914125 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.07.05"
10/09/17 " 00:51:01.353" 917156 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:51:01.354" 917171 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2972"
10/09/17 " 00:51:01.356" 917171 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.08.01"
10/09/17 " 00:51:06.246" 922062 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:51:06.247" 922062 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2973"
10/09/17 " 00:51:06.251" 922062 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.08.02"
10/09/17 " 00:51:08.866" 924671 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:51:08.867" 924671 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2974"
10/09/17 " 00:51:08.869" 924671 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.08.03"
10/09/17 " 00:51:11.981" 927796 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:51:11.981" 927796 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2975"
10/09/17 " 00:51:11.983" 927796 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.08.04"
10/09/17 " 00:51:25.142" 940953 1c18 20fc INFO ActionsShim ActionsShim::FinishUpdate "ActionsShim.cpp" 129 "Finishing update of actions"
10/09/17 " 00:51:26.279" 942093 1c18 20fc INFO MBAMShimImpl MBAMShimImpl::FinishUpdate "MBAMShimImpl.cpp" 131 "MBAMCore finishing update"
10/09/17 " 00:51:26.280" 942093 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

rocessDbClsEngUpdates "UpdateControllerImplHelper.cpp" 1782 "DoIncrementalUpdate was successful."
10/09/17 " 00:51:26.280" 942093 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2462 "Successfully updated DB/ClsEng package version to: 1.0.2976"
10/09/17 " 00:51:26.282" 942093 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 2470 "Set DB version to: 2017.10.08.05"
10/09/17 " 00:51:26.287" 942093 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 4102 "Signature successfully validated"
10/09/17 " 00:51:28.592" 944406 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 4106 "DB manifest successfully validated"
10/09/17 " 00:51:28.592" 944406 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest "UpdateControllerImplHelper.cpp" 4371 "Validated DB manifest - success"
10/09/17 " 00:51:28.692" 944500 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

oUpdate "UpdateControllerImplHelper.cpp" 575 "Update check is complete."
10/09/17 " 00:51:28.692" 944500 1c18 18c4 INFO CleanControllerImpl CleanDBParser:

arse "CleanDBParser.cpp" 18 "Parsing C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb"
10/09/17 " 00:51:28.693" 944500 1c18 18c4 INFO GalaxyRuleParser mb::common::galaxyrules::SimpleRuleFileParserV2:

arse "GalaxyRuleParser.cpp" 2974 "Successfully parsed 92 records."
10/09/17 " 00:51:28.698" 944515 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 4102 "Signature successfully validated"
10/09/17 " 00:51:29.445" 945250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 4106 "DB manifest successfully validated"
10/09/17 " 00:51:29.445" 945250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest "UpdateControllerImplHelper.cpp" 4371 "Validated DB manifest - success"
10/09/17 " 00:51:29.445" 945250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

oUpdate "UpdateControllerImplHelper.cpp" 534 "DoUpdate - Starting check for updates (automatic)"
10/09/17 " 00:51:29.445" 945250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

oUpdate "UpdateControllerImplHelper.cpp" 536 "Checking for: Installer=[Yes], SDK/Ctlr=[Yes], DB/CLS=[No]"
10/09/17 " 00:51:29.447" 945250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions "UpdateControllerImplHelper.cpp" 1107 "Installer package --> [mbam-c.installer.consumer], current version: [3.2.2]"
10/09/17 " 00:51:29.447" 945250 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions "UpdateControllerImplHelper.cpp" 1134 "SDK/Controller package --> [mbam-c.ctlr.32bit], current version: [1.0.212]"
10/09/17 " 00:51:30.187" 946000 1c18 1da8 INFO MBAMShimImpl MBAMShimImpl::InitializeInternal "MBAMShimImpl.cpp" 62 "MBAMCore was successfully loaded. CoreFilePath=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMCore.dll>."
10/09/17 " 00:51:30.435" 946250 1c18 1730 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacShimModuleLoader::UnloadModule "MwacShimModuleLoader.cpp" 106 "Unloaded the Web Access Control Sdk implementation module."
10/09/17 " 00:51:30.436" 946250 1c18 1730 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::StopProtection "MWACControllerImplHelper.cpp" 1580 "Web Access protection has been stopped."
10/09/17 " 00:51:31.469" 947281 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

oUpdate "UpdateControllerImplHelper.cpp" 566 "Checked for updates - no updates available"
10/09/17 " 00:51:31.469" 947281 1c18 20fc INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl:

oUpdate "UpdateControllerImplHelper.cpp" 575 "Update check is complete."
10/09/17 " 00:51:37.414" 953218 1c18 1730 INFO GalaxyRuleParser mb::common::galaxyrules::SimpleRuleFileParserV2:

arse "GalaxyRuleParser.cpp" 2973 "Successfully parsed 739029 records."
10/09/17 " 00:51:40.840" 956656 1c18 1da8 INFO MBAMCoreImpl MBAMCoreImpl::Initialize "MBAMCoreImpl.cpp" 123 "MBAMCore was successfully initialized. CoreFolderPath=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE>. DefsFolderPath=<C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE>."
10/09/17 " 00:51:48.637" 964453 1c18 1da8 INFO GalaxyRuleParser mb::common::galaxyrules::SimpleRuleFileParserV2:

arse "GalaxyRuleParser.cpp" 2974 "Successfully parsed 84408 records."
10/09/17 " 00:51:52.179" 967984 1c18 1730 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::InitializeMwacSdk "MWACControllerImplHelper.cpp" 780 "Initialization succeeded"
10/09/17 " 00:51:52.184" 968000 1c18 1730 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::StartProtection "MWACControllerImplHelper.cpp" 1539 "Web Access protection is starting..."
10/09/17 " 00:52:34.989" 1010796 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SECOH-QAD.EXE' (shuriken) => Hubble:BlackListed"
10/09/17 " 00:52:34.990" 1010796 1c18 17f4 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::Init "Linker.cpp" 92 "Initializing linker"
10/09/17 " 00:52:42.609" 1018421 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\ATIBTMON.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:52:45.893" 1021703 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\CTXFIREG.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:52:46.581" 1022390 1c18 17f4 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::FindLinkedTraces "Linker.cpp" 206 "Finding linked traces"
10/09/17 " 00:52:46.588" 1022390 1c18 17f4 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 139 "Hubble disabled for non-Shuriken/scan detections, path='C:\WINDOWS\SECOH-QAD.EXE'"
10/09/17 " 00:52:46.588" 1022390 1c18 17f4 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SECOH-QAD.EXE' => None:Unknown"
10/09/17 " 00:52:46.588" 1022390 1c18 17f4 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManagerCache::LogWhiteListStatus "WhiteListManagerCache.cpp" 129 "White list status from cache: File 'C:\Windows\SECOH-QAD.EXE' => None:Unknown"
10/09/17 " 00:52:46.655" 1022468 1c18 17f4 INFO Actions ActionsManager::GetDetectedThreatsV2 "ActionsManager.cpp" 457 "Getting detected threats from actions"
10/09/17 " 00:52:46.997" 1022812 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\CTXFIHLP.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:52:48.391" 1024203 1c18 17f4 INFO CleanControllerImpl PreCleanEngine::AddLinkedTraces "PreCleanEngine.cpp" 817 "Getting linked traces"
10/09/17 " 00:52:50.579" 1026390 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\CTXFISPI.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:52:52.777" 1028593 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\DEVLOAD.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:52:57.715" 1033531 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\ENLOCSTR.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:52:58.884" 1034687 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\KILLAPPS.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:53:03.402" 1039218 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\ATIECLXX.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:53:05.339" 1041156 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\REGPLIB.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:53:19.509" 1055312 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\UDAAIM32.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:53:20.731" 1056546 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\UDATEL32.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:53:40.552" 1076359 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\LOGITECH\VIDEO\FXSVR2.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:54:03.430" 1099234 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\LOGITECH\VIDEO\LOGITRAY.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:54:27.852" 1123656 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\LOGITECH\VIDEO\ISSTART.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:54:29.544" 1125359 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\COMMON FILES\AV\SPYBOT - SEARCH AND DESTROY\TEST.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:54:32.910" 1128718 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:55:24.540" 1180343 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\AVGUI.LOG"
10/09/17 " 00:55:24.855" 1180671 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\DISKDRV.LOG"
10/09/17 " 00:55:26.874" 1182687 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPDRV.LOG"
10/09/17 " 00:55:26.875" 1182687 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPEH.LOG.LOCK"
10/09/17 " 00:55:28.896" 1184703 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\SELFDEF.LOG"
10/09/17 " 00:55:28.896" 1184703 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\SWHEALTHEX.LOG"
10/09/17 " 00:55:31.163" 1186968 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\REPORT\FILESYSTEMSHIELD.TXT"
10/09/17 " 00:55:41.662" 1197468 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\DB\REMOVAL.DAT"
10/09/17 " 00:55:44.580" 1200390 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\ASWAR.LOG"
10/09/17 " 00:55:45.986" 1201796 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\FILEINFO2.DB"
10/09/17 " 00:55:45.987" 1201796 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG.DB"
10/09/17 " 00:55:46.002" 1201812 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\CLEANUP.LOG"
10/09/17 " 00:55:46.003" 1201812 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\DISKDRV.LOG.LOCK"
10/09/17 " 00:55:46.003" 1201812 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPAGENT.LOG"
10/09/17 " 00:55:46.311" 1202125 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPLUASCRIPT.LOG"
10/09/17 " 00:55:50.967" 1206781 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\SOFTWAREHEALTH.LOG"
10/09/17 " 00:55:51.208" 1207015 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\VPS.LOG"
10/09/17 " 00:55:51.328" 1207140 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\FILTERENGINE.LOG"
10/09/17 " 00:55:51.329" 1207140 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPAGENT.LOG.LOCK"
10/09/17 " 00:55:52.118" 1207921 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPAGENTMONITOR.LOG.LOCK"
10/09/17 " 00:55:52.119" 1207937 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPEH.LOG"
10/09/17 " 00:55:52.831" 1208640 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPLUASCRIPT.LOG.LOCK"
10/09/17 " 00:55:53.087" 1208890 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\EVENT_MANAGER.LOG"
10/09/17 " 00:55:53.099" 1208906 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\MAIL.LOG"
10/09/17 " 00:55:53.256" 1209062 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\AVGSVC.LOG"
10/09/17 " 00:55:56.167" 1211984 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\SECAPI.LOG.LOCK"
10/09/17 " 00:55:56.168" 1211984 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPAGENTMONITOR.LOG"
10/09/17 " 00:55:56.168" 1211984 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\IDPDRV.LOG.LOCK"
10/09/17 " 00:55:56.997" 1212812 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\URLINFOQUERY.LOG"
10/09/17 " 00:55:56.998" 1212812 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\REPORT\EMAILSHIELD.TXT"
10/09/17 " 00:55:59.852" 1215656 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\LIM.LOG"
10/09/17 " 00:55:59.853" 1215656 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\PSI.LOG"
10/09/17 " 00:55:59.853" 1215656 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\PSI.LOG.LOCK"
10/09/17 " 00:55:59.853" 1215656 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\SECAPI.LOG"
10/09/17 " 00:56:00.440" 1216250 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\STREAMFILTER.LOG"
10/09/17 " 00:56:00.440" 1216250 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\UNIVDRV.LOG"
10/09/17 " 00:56:00.441" 1216250 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\REPORT\BEHAVIORSHIELD.TXT"
10/09/17 " 00:56:01.742" 1217546 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\REPORT\WEBSHIELD.TXT"
10/09/17 " 00:56:01.845" 1217656 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\LOG\UNIVDRV.LOG.LOCK"
10/09/17 " 00:56:10.339" 1226156 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\ASWRESP.DAT"
10/09/17 " 00:56:11.533" 1227343 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\PSI.DB"
10/09/17 " 00:56:12.753" 1228562 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\AVG\ANTIVIRUS\URL.DB"
10/09/17 " 00:56:40.221" 1256031 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\LOGS\MBAMSERVICE.LOG"
10/09/17 " 00:56:40.223" 1256031 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005141233-NTUSER.DAT.LOG1"
10/09/17 " 00:56:40.224" 1256031 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005235878-NTUSER.DAT.LOG1"
10/09/17 " 00:56:40.224" 1256031 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005143710-NTUSER.DAT.LOG1"
10/09/17 " 00:56:40.224" 1256031 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005237282-NTUSER.DAT.LOG1"
10/09/17 " 00:56:40.239" 1256046 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005143984-NTUSER.DAT.LOG1"
10/09/17 " 00:56:40.240" 1256046 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005241016-NTUSER.DAT.LOG1"
10/09/17 " 00:56:40.240" 1256046 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-NTUSER.DAT.LOG1"
10/09/17 " 00:56:40.241" 1256046 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-USRCLASS.DAT.LOG1"
10/09/17 " 00:56:40.241" 1256046 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-NTUSER.DAT.LOG1"
10/09/17 " 00:56:40.241" 1256046 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-USRCLASS.DAT.LOG1"
10/09/17 " 00:56:48.338" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005141233-NTUSER.DAT.LOG2"
10/09/17 " 00:56:48.338" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005235878-NTUSER.DAT.LOG2"
10/09/17 " 00:56:48.338" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005143710-NTUSER.DAT.LOG2"
10/09/17 " 00:56:48.339" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005237282-NTUSER.DAT.LOG2"
10/09/17 " 00:56:48.339" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005143984-NTUSER.DAT.LOG2"
10/09/17 " 00:56:48.339" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005241016-NTUSER.DAT.LOG2"
10/09/17 " 00:56:48.339" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-NTUSER.DAT.LOG2"
10/09/17 " 00:56:48.340" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-USRCLASS.DAT.LOG2"
10/09/17 " 00:56:48.340" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-NTUSER.DAT.LOG2"
10/09/17 " 00:56:48.340" 1264156 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-USRCLASS.DAT.LOG2"
10/09/17 " 00:56:48.845" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005141233-NTUSER.DAT"
10/09/17 " 00:56:48.846" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005235878-NTUSER.DAT"
10/09/17 " 00:56:48.846" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005143710-NTUSER.DAT"
10/09/17 " 00:56:48.846" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005237282-NTUSER.DAT"
10/09/17 " 00:56:48.847" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005143984-NTUSER.DAT"
10/09/17 " 00:56:48.847" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005241016-NTUSER.DAT"
10/09/17 " 00:56:48.847" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-NTUSER.DAT"
10/09/17 " 00:56:48.848" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-USRCLASS.DAT"
10/09/17 " 00:56:48.848" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-NTUSER.DAT"
10/09/17 " 00:56:48.848" 1264656 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-USRCLASS.DAT"
10/09/17 " 00:56:53.286" 1269093 1c18 1af8 ERROR HttpConnection mb::common::net::HttpConnection::SendRequest "HttpConnection.cpp" 390 "Network error."
10/09/17 " 00:56:53.286" 1269093 1c18 1af8 ERROR HttpConnection mb::common::net::HttpConnection::LogExceptionDetails "HttpConnection.cpp" 1472 "Exception details: text=No message received"
10/09/17 " 00:56:53.286" 1269093 1c18 1af8 ERROR CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 398 "Error code -9 returned in PUT to Hubble"
10/09/17 " 00:56:53.288" 1269093 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\5a21dd8c-ac84-11e7-a34e-001e4fdf241c' (shuriken) => Hubble:Error"
10/09/17 " 00:56:56.681" 1272484 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\5a2deba4-ac84-11e7-b265-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 00:56:57.003" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005141233-NTUSER.DAT{677B56BC-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.003" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005235878-NTUSER.DAT{677B56EB-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.003" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005143710-NTUSER.DAT{677B56C4-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.004" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005237282-NTUSER.DAT{677B56F1-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.004" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005143984-NTUSER.DAT{677B56CA-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.004" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005241016-NTUSER.DAT{677B56F7-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.005" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-NTUSER.DAT{677B56D0-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.005" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-USRCLASS.DAT{677B56D2-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.005" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-NTUSER.DAT{677B56FD-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:57.006" 1272812 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-USRCLASS.DAT{677B56FF-AC81-11E7-945F-001E4FDF241C}.TM.BLF"
10/09/17 " 00:56:59.893" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005141233-NTUSER.DAT{677B56BC-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.893" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005235878-NTUSER.DAT{677B56EB-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.894" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005143710-NTUSER.DAT{677B56C4-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.894" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005237282-NTUSER.DAT{677B56F1-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.895" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005143984-NTUSER.DAT{677B56CA-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.895" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005241016-NTUSER.DAT{677B56F7-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.895" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-NTUSER.DAT{677B56D0-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.896" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-USRCLASS.DAT{677B56D2-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.896" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-NTUSER.DAT{677B56FD-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:56:59.896" 1275703 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-USRCLASS.DAT{677B56FF-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 00:57:11.355" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005141233-NTUSER.DAT{677B56BC-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.356" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-18-10092017005235878-NTUSER.DAT{677B56EB-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.358" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005143710-NTUSER.DAT{677B56C4-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.359" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-19-10092017005237282-NTUSER.DAT{677B56F1-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.359" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005143984-NTUSER.DAT{677B56CA-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.360" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-20-10092017005241016-NTUSER.DAT{677B56F7-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.360" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-NTUSER.DAT{677B56D0-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.361" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005144395-USRCLASS.DAT{677B56D2-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.361" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-NTUSER.DAT{677B56FD-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:57:11.362" 1287171 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-1307612883-4072204045-1798725994-1002-10092017005242123-USRCLASS.DAT{677B56FF-AC81-11E7-945F-001E4FDF241C}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 00:59:19.055" 1414859 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\DIAGNOSIS\EVENTS_COSTDEFERRED.RBS"
10/09/17 " 00:59:19.511" 1415328 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\NETWORK\DOWNLOADER\QMGR1.DAT"
10/09/17 " 00:59:20.336" 1416140 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\NETWORK\DOWNLOADER\QMGR0.DAT"
10/09/17 " 00:59:22.751" 1418562 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\DIAGNOSIS\EVENTS_NORMAL.RBS"
10/09/17 " 00:59:27.862" 1423671 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\DIAGNOSIS\EVENTS_NORMALCRITICAL.RBS"
10/09/17 " 00:59:28.392" 1424203 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\DIAGNOSIS\EVENTS_REALTIME.RBS"
10/09/17 " 00:59:43.367" 1439171 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\WINDOWS\APPREPOSITORY\STATEREPOSITORY-DEPLOYMENT.SRD-SHM"
10/09/17 " 00:59:44.625" 1440437 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\WINDOWS\LFSVC\GEOFENCE\GEOFENCEAPPLICATIONID.DAT"
10/09/17 " 00:59:45.067" 1440875 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\WINDOWS\APPREPOSITORY\STATEREPOSITORY-DEPLOYMENT.SRD-WAL"
10/09/17 " 00:59:47.257" 1443062 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\WINDOWS\APPREPOSITORY\STATEREPOSITORY-MACHINE.SRD-WAL"
10/09/17 " 00:59:48.280" 1444093 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\WINDOWS\APPREPOSITORY\STATEREPOSITORY-MACHINE.SRD-SHM"
10/09/17 " 00:59:53.093" 1448906 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\WINDOWS\APPREPOSITORY\STATEREPOSITORY-MACHINE.SRD"
10/09/17 " 00:59:58.747" 1454562 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PROGRAMDATA\MICROSOFT\WINDOWS\WFP\WFPDIAG.ETL"
10/09/17 " 01:01:10.900" 1526718 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\APPLE COMPUTER\LOGS\ASL.003833_09OCT17.LOG"
10/09/17 " 01:08:18.946" 1954750 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\CACHE\CACHE\DATA_3"
10/09/17 " 01:08:18.970" 1954781 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\CACHE\CACHE\DATA_2"
10/09/17 " 01:08:19.089" 1954906 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\CACHE\CACHE\DATA_0"
10/09/17 " 01:08:19.089" 1954906 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\CACHE\CACHE\INDEX"
10/09/17 " 01:08:21.349" 1957156 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\CACHE\COOKIES"
10/09/17 " 01:08:22.476" 1958281 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\LOG\CEF_LOG.TXT"
10/09/17 " 01:08:22.766" 1958578 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\CACHE\CACHE\DATA_1"
10/09/17 " 01:08:24.454" 1960265 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\CACHE\COOKIES-JOURNAL"
10/09/17 " 01:08:25.100" 1960906 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\ROAMING\AVG\ANTIVIRUS\CACHE\VISITED LINKS"
10/09/17 " 01:10:32.870" 2088687 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\APPLE COMPUTER\LOGS\ASL.003647_09OCT17.LOG"
10/09/17 " 01:10:36.532" 2092343 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\EXPLORER\ICONCACHE_32.DB"
10/09/17 " 01:10:36.532" 2092343 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\EXPLORER\ICONCACHE_IDX.DB"
10/09/17 " 01:10:36.552" 2092359 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\EXPLORER\THUMBCACHE_96.DB"
10/09/17 " 01:10:36.666" 2092468 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\EXPLORER\ICONCACHE_16.DB"
10/09/17 " 01:10:36.930" 2092734 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\EXPLORER\THUMBCACHE_32.DB"
10/09/17 " 01:10:36.931" 2092734 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\EXPLORER\THUMBCACHE_IDX.DB"
10/09/17 " 01:10:36.952" 2092765 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\EXPLORER\ICONCACHE_256.DB"
10/09/17 " 01:10:37.016" 2092828 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\EXPLORER\ICONCACHE_48.DB"
10/09/17 " 01:10:38.028" 2093843 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\COUNTERS.DAT"
10/09/17 " 01:10:44.455" 2100265 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\NOTIFICATIONS\WPNDATABASE.DB"
10/09/17 " 01:10:44.647" 2100453 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT"
10/09/17 " 01:10:44.647" 2100453 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT{2FDEFEF8-8358-11E6-A360-B0EA3DF3CA99}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 01:10:45.205" 2101015 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT{2FDEFEF8-8358-11E6-A360-B0EA3DF3CA99}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 01:10:45.696" 2101500 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\NOTIFICATIONS\WPNDATABASE.DB-WAL"
10/09/17 " 01:10:45.696" 2101500 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\WEBCACHE\V01.LOG"
10/09/17 " 01:10:45.696" 2101500 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\WEBCACHE\V01TMP.LOG"
10/09/17 " 01:10:45.697" 2101515 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG2"
10/09/17 " 01:10:45.700" 2101515 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\NOTIFICATIONS\WPNPRMRY.TMP"
10/09/17 " 01:10:45.887" 2101703 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\WEBCACHE\WEBCACHEV01.DAT"
10/09/17 " 01:10:45.932" 2101750 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\NOTIFICATIONS\WPNDATABASE.DB-SHM"
10/09/17 " 01:10:46.072" 2101890 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG1"
10/09/17 " 01:10:46.072" 2101890 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\WEBCACHELOCK.DAT"
10/09/17 " 01:10:46.857" 2102671 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\NOTIFICATIONS\WPNDATABASE.DB-WAL"
10/09/17 " 01:10:47.973" 2103781 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\NOTIFICATIONS\WPNPRMRY.TMP"
10/09/17 " 01:10:47.975" 2103781 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DEFAULT\APPDATA\LOCAL\MICROSOFT\WINDOWS\SHELL\DEFAULTLAYOUTS.XML"
10/09/17 " 01:10:48.030" 2103843 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\WEBCACHE\WEBCACHEV01.JFM"
10/09/17 " 01:10:48.031" 2103843 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT{2FDEFEF8-8358-11E6-A360-B0EA3DF3CA99}.TM.BLF"
10/09/17 " 01:10:48.079" 2103890 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\COUNTERS.DAT"
10/09/17 " 01:10:48.627" 2104437 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\NOTIFICATIONS\WPNDATABASE.DB"
10/09/17 " 01:10:49.244" 2105046 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\NOTIFICATIONS\WPNDATABASE.DB-SHM"
10/09/17 " 01:10:50.269" 2106078 1c18 1af8 ERROR HttpConnection mb::common::net::HttpConnection::SendRequest "HttpConnection.cpp" 390 "Network error."
10/09/17 " 01:10:50.269" 2106078 1c18 1af8 ERROR HttpConnection mb::common::net::HttpConnection::LogExceptionDetails "HttpConnection.cpp" 1472 "Exception details: text=No message received"
10/09/17 " 01:10:50.269" 2106078 1c18 1af8 ERROR CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 398 "Error code -9 returned in PUT to Hubble"
10/09/17 " 01:10:50.270" 2106078 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\AIRFOIL\AIRFOIL.EXE' (shuriken) => Hubble:Error"
10/09/17 " 01:10:52.947" 2108750 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\AIRFOIL\AIRFOILSATELLITE.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:09.615" 2125421 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\HDD REGENERATOR\HDDREG.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:11.475" 2127281 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus "WhiteListManager.cpp" 201 "Started batch white listing"
10/09/17 " 01:11:13.372" 2129187 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\FREAC\FREAC.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:13.372" 2129187 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\FREAC\UNINSTALL.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:13.372" 2129187 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\HDD REGENERATOR\HDD REGENERATOR.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:13.372" 2129187 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus::<lambda_cab0c25b4beacc8a545de8a1e5c3d793>:

perator () "WhiteListManager.cpp" 208 "Completed batch white listing"
10/09/17 " 01:11:33.293" 2149109 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\MXETX0MNVR\UNINSTALLER.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:36.100" 2151906 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\SCRIBBLENAUTS UNMASKED\LAUNCHER.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:54.497" 2170312 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\SUGARBOX\SUGARBOX.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:56.915" 2172718 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAM FILES\TETRIS UNLIMITED\TETRIS.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:11:57.282" 2173093 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\SWAPFILE.SYS"
10/09/17 " 01:12:00.742" 2176546 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\HIBERFIL.SYS"
10/09/17 " 01:12:01.498" 2177312 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\PAGEFILE.SYS"
10/09/17 " 01:12:12.796" 2188609 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|D82049156621BC18787FB0746B2CA0A7C78E3AB75D4318DB92795F0A781792F1' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:12.796" 2188609 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\ATIBTMON.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:12.796" 2188609 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\ATIBTMON.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:12.797" 2188609 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus "WhiteListManager.cpp" 201 "Started batch white listing"
10/09/17 " 01:12:14.565" 2190375 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|4CC8CBEB6E0672C5F682360A63A900D001F78587A57240DD02BCC1B8D190544B' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:14.565" 2190375 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\ATIECLXX.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:14.897" 2190703 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\ATIECLXX.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:14.897" 2190703 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\7f77c068-ac86-11e7-ad42-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:14.897" 2190703 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus::<lambda_cab0c25b4beacc8a545de8a1e5c3d793>:

perator () "WhiteListManager.cpp" 208 "Completed batch white listing"
10/09/17 " 01:12:17.277" 2193093 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\8002eb7a-ac86-11e7-b5df-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:18.480" 2194296 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|32213C40712AC40F6B096277482693A1370B74BF08CBA4BC9329E9C6F9C45398' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:18.480" 2194296 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\CTXFIREG.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:18.480" 2194296 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\CTXFIREG.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:20.178" 2195984 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|37AB04F28801F95876A8E9EE6536EE9F6316F6C0ABCDFEAE8FD64C121F8AA039' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:20.178" 2195984 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\CTXFIHLP.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:20.178" 2195984 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\CTXFIHLP.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:20.180" 2195984 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus "WhiteListManager.cpp" 201 "Started batch white listing"
10/09/17 " 01:12:22.818" 2198625 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|ED95F6F5BBC62E6BFD5E0718D48D7F0FF1113BD2CC9E19F660742AE38E3EE509' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:22.818" 2198625 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\DEVLOAD.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:23.501" 2199312 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\838da640-ac86-11e7-a605-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:23.501" 2199312 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\83ae4e18-ac86-11e7-ad76-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:23.501" 2199312 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\83b9e70a-ac86-11e7-909a-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:23.501" 2199312 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\DEVLOAD.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:23.501" 2199312 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus::<lambda_cab0c25b4beacc8a545de8a1e5c3d793>:

perator () "WhiteListManager.cpp" 208 "Completed batch white listing"
10/09/17 " 01:12:23.503" 2199312 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus "WhiteListManager.cpp" 201 "Started batch white listing"
10/09/17 " 01:12:25.291" 2201109 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|3C9B27DAD37B1C19362443256C750526D0799C04465814922A67E4436A9F2E83' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:25.292" 2201109 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\CTXFISPI.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:25.629" 2201437 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\CTXFISPI.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:25.629" 2201437 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\857e0bd4-ac86-11e7-90cf-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:25.629" 2201437 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus::<lambda_cab0c25b4beacc8a545de8a1e5c3d793>:

perator () "WhiteListManager.cpp" 208 "Completed batch white listing"
10/09/17 " 01:12:25.630" 2201437 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus "WhiteListManager.cpp" 201 "Started batch white listing"
10/09/17 " 01:12:26.856" 2202671 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|7C668F31CC8B4B3A2B6D04BC185ABF16A6824E84BAF3D4D83CC0AEBACF48008D' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:26.856" 2202671 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\KILLAPPS.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:26.856" 2202671 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|6E1164C023F57246522F33DE44E284638BCB20535A0A4BB975B05F45BE8DDFB0' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:26.856" 2202671 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\ENLOCSTR.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:26.856" 2202671 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\KILLAPPS.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:26.856" 2202671 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\ENLOCSTR.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:26.856" 2202671 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus::<lambda_cab0c25b4beacc8a545de8a1e5c3d793>:

perator () "WhiteListManager.cpp" 208 "Completed batch white listing"
10/09/17 " 01:12:29.355" 2205171 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\88f51744-ac86-11e7-90d8-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:29.356" 2205171 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus "WhiteListManager.cpp" 201 "Started batch white listing"
10/09/17 " 01:12:32.166" 2207968 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|44FE804538A07F9842EAF7942AD8F11D8FF2C014ACE2B4A865349C84BB3337E5' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:32.166" 2207968 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\UDAAIM32.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:32.166" 2207968 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|3DB08D95202EBD18AE4A28490FB46EC77A03D4D91B8169B8DDFB1599B473580A' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:32.166" 2207968 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\UDATEL32.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:32.445" 2208250 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\UDAAIM32.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:32.445" 2208250 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\896c1dda-ac86-11e7-9053-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:32.445" 2208250 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\UDATEL32.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:32.445" 2208250 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::GetWhiteListStatus::<lambda_cab0c25b4beacc8a545de8a1e5c3d793>:

perator () "WhiteListManager.cpp" 208 "Completed batch white listing"
10/09/17 " 01:12:33.056" 2208859 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|5B5FD1AD70070927381F5CB427CD715D965E73C93C72B93F34DAAB8F827FF9CB' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:33.056" 2208859 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\SYSTEM32\REGPLIB.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:33.056" 2208859 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\SYSTEM32\REGPLIB.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:36.838" 2212640 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SAM"
10/09/17 " 01:12:36.839" 2212656 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG2"
10/09/17 " 01:12:36.840" 2212656 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM"
10/09/17 " 01:12:37.931" 2213734 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\BBI.LOG2"
10/09/17 " 01:12:38.874" 2214687 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG1"
10/09/17 " 01:12:40.771" 2216578 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT"
10/09/17 " 01:12:41.101" 2216906 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SECURITY"
10/09/17 " 01:12:41.102" 2216906 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG2"
10/09/17 " 01:12:41.808" 2217625 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG1"
10/09/17 " 01:12:42.058" 2217875 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG1"
10/09/17 " 01:12:45.601" 2221406 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\TEMP\~DF9749180EB4EBD1F3.TMP"
10/09/17 " 01:12:45.635" 2221453 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\BBI"
10/09/17 " 01:12:45.722" 2221531 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\TEMP\~DF9DF8C737DE023181.TMP"
10/09/17 " 01:12:45.795" 2221609 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\TEMP\_AVG_\AVLOCK.TXT"
10/09/17 " 01:12:46.368" 2222171 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\TEMP\_AVG_\NSFSP00000011.TMP"
10/09/17 " 01:12:47.295" 2223109 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG1"
10/09/17 " 01:12:47.557" 2223375 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\TEMP\~DFA1B6C0B275660DD4.TMP"
10/09/17 " 01:12:47.843" 2223656 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\TEMP\DESKTOP-2FD7588-20171009-0036.LOG"
10/09/17 " 01:12:47.844" 2223656 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\TEMP\OFFICECLICKTORUN.EXE_STREAMSERVER(201710090036509C0).LOG"
10/09/17 " 01:12:47.974" 2223781 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG2"
10/09/17 " 01:12:47.975" 2223781 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE"
10/09/17 " 01:12:47.975" 2223781 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG2"
10/09/17 " 01:12:48.360" 2224171 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\TEMP\~DFC9AACCEDAA49E4A6.TMP"
10/09/17 " 01:12:48.360" 2224171 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\TEMP\TMP00002EF5\TMP00000000"
10/09/17 " 01:12:48.572" 2224375 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\BBI.LOG1"
10/09/17 " 01:12:49.209" 2225015 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG2"
10/09/17 " 01:12:50.418" 2226234 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG1"
10/09/17 " 01:12:52.213" 2228015 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|4B013D4910363A3BE50C92271C484E902C11B74EFE6BC3B242FB00E0BDF1F51A' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:52.213" 2228015 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\973ed560-ac86-11e7-b479-001e4fdf241c' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:52.213" 2228015 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\973ed560-ac86-11e7-b479-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:52.245" 2228062 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleCache::GetValueFromCache "HubbleCache.cpp" 228 "Found hash 'shuriken|3DB08D95202EBD18AE4A28490FB46EC77A03D4D91B8169B8DDFB1599B473580A' in Hubble cache, white list status = 'WhiteListed'"
10/09/17 " 01:12:52.245" 2228062 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::GetWhiteListStatus "HubbleWhiteLister.cpp" 189 "Found hash of file 'C:\WINDOWS\TEMP\UDATEL32.EXE' in Hubble's cache, value = WhiteListed"
10/09/17 " 01:12:52.245" 2228062 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\WINDOWS\TEMP\UDATEL32.EXE' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:12:53.149" 2228953 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\NTUSER.DAT"
10/09/17 " 01:12:54.346" 2230156 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\NTUSER.DAT.LOG1"
10/09/17 " 01:12:54.908" 2230718 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\TEMP\~DF5A60128195484CD4.TMP"
10/09/17 " 01:12:55.476" 2231281 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT{2FDEFD6D-8358-11E6-A360-B0EA3DF3CA99}.TM.BLF"
10/09/17 " 01:12:55.712" 2231515 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\NTUSER.DAT{2FDEFD8E-8358-11E6-A360-B0EA3DF3CA99}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 01:12:56.391" 2232203 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT.LOG2"
10/09/17 " 01:12:56.535" 2232343 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT{3F85C224-4B2D-11E6-80CB-E41D2D0D40E0}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 01:12:57.390" 2233203 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT{2FDEFD6D-8358-11E6-A360-B0EA3DF3CA99}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 01:12:57.391" 2233203 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT"
10/09/17 " 01:12:57.391" 2233203 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT{3F85C224-4B2D-11E6-80CB-E41D2D0D40E0}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 01:12:57.999" 2233812 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT{3F85C224-4B2D-11E6-80CB-E41D2D0D40E0}.TM.BLF"
10/09/17 " 01:12:59.392" 2235203 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\NTUSER.DAT.LOG2"
10/09/17 " 01:12:59.393" 2235203 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\NTUSER.DAT{2FDEFD8E-8358-11E6-A360-B0EA3DF3CA99}.TM.BLF"
10/09/17 " 01:13:00.539" 2236343 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\COMMS\UNISTOREDB\STORE.VOL"
10/09/17 " 01:13:00.614" 2236421 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\COMMS\UNISTOREDB\STORE.JFM"
10/09/17 " 01:13:00.717" 2236531 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\CONNECTEDDEVICESPLATFORM\CDPTRACES.LOG"
10/09/17 " 01:13:00.761" 2236578 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT"
10/09/17 " 01:13:00.761" 2236578 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT{2FDEFD6D-8358-11E6-A360-B0EA3DF3CA99}.TMCONTAINER00000000000000000002.REGTRANS-MS"
10/09/17 " 01:13:00.761" 2236578 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT.LOG1"
10/09/17 " 01:13:02.941" 2238750 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\9d53c71c-ac86-11e7-9ff7-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:13:04.125" 2239937 1c18 17d8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\LOG\TRAY.LOG"
10/09/17 " 01:13:04.851" 2240656 1c18 1af8 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 248 "White list status (not cached): File 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\9dbc003e-ac86-11e7-97b1-001e4fdf241c' (shuriken) => Hubble:WhiteListed"
10/09/17 " 01:13:06.011" 2241828 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\NTUSER.DAT{2FDEFD8E-8358-11E6-A360-B0EA3DF3CA99}.TMCONTAINER00000000000000000001.REGTRANS-MS"
10/09/17 " 01:13:08.116" 2243921 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT.LOG1"
10/09/17 " 01:13:08.162" 2243968 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT.LOG2"
10/09/17 " 01:13:11.532" 2247343 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\TILEDATALAYER\DATABASE\EDB.LOG"
10/09/17 " 01:13:12.500" 2248312 1c18 06e4 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\LOCAL\CONNECTEDDEVICESPLATFORM\CDPTRACES.LOG"
10/09/17 " 01:13:13.614" 2249421 1c18 0f50 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\LOCAL\FONTCACHE\~FONTCACHE-SYSTEM.DAT"
10/09/17 " 01:13:13.650" 2249453 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\COMMS\UNISTOREDB\USS.JTX"
10/09/17 " 01:13:14.624" 2250437 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\LOCAL\FONTCACHE\~FONTCACHE-S-1-5-21-1307612883-4072204045-1798725994-1002.DAT"
10/09/17 " 01:13:15.141" 2250953 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\TILEDATALAYER\DATABASE\VEDATAMODEL.EDB"
10/09/17 " 01:13:20.000" 2255812 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\USERS\DAD\APPDATA\LOCAL\TILEDATALAYER\DATABASE\VEDATAMODEL.JFM"
10/09/17 " 01:13:20.257" 2256062 1c18 108c WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\CONNECTEDDEVICESPLATFORM\CDPTRACES.LOG"
10/09/17 " 01:13:20.705" 2256515 1c18 17f8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\LOCAL\FONTCACHE\~FONTCACHE-FONTFACE.DAT"
10/09/17 " 01:13:26.450" 2262265 1c18 17f4 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner:

rocessClassificationResult "Scanner.cpp" 3505 "Threat detected: ThreatName=HackTool.IdleKMS, FilePath=C:\WINDOWS\SECOH-QAD.EXE"
10/09/17 " 01:13:26.579" 2262390 1c18 17f4 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::FindLinkedTraces "Linker.cpp" 206 "Finding linked traces"
10/09/17 " 01:13:26.816" 2262625 1c18 17f4 INFO CleanControllerImpl PreCleanEngine::GetCleanItemsAndProcessedPaths "PreCleanEngine.cpp" 424 "Ignoring clean item because it is a duplicate, C:\WINDOWS\SECOH-QAD.EXE and C:\Windows\SECOH-QAD.EXE"
10/09/17 " 01:13:30.951" 2266765 1c18 13a8 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanUtils::ReadFileUsingDDA "ScanUtils.cpp" 219 "The SwissArmySDK is not available, cannot read the file, FilePath = C:\WINDOWS\DEBUG\PASSWD.LOG"
10/09/17 " 01:15:13.769" 2369578 1c18 1da8 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::Shutdown "Linker.cpp" 143 "Shutting down linker, waiting for it to complete"
10/09/17 " 01:15:13.769" 2369578 1c18 1da8 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::UnInit "Linker.cpp" 130 "Un-initializing linker"
10/09/17 " 01:15:24.149" 2379953 1c18 1da8 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::Shutdown "Linker.cpp" 143 "Shutting down linker, waiting for it to complete"
10/09/17 " 01:15:31.539" 2387343 1c18 1da8 INFO MBAMCoreImpl MBAMCoreImpl::Shutdown "MBAMCoreImpl.cpp" 152 "MBAMCore was successfully shutdown."
10/09/17 " 01:15:32.112" 2387921 1c18 1da8 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner:

erformScan "Scanner.cpp" 1046 "Scan completed."
10/09/17 " 01:15:32.112" 2387921 1c18 1da8 INFO MBAMShimImpl MBAMShimImpl:

repareUpdate "MBAMShimImpl.cpp" 95 "MBAMCore preparing update"
10/09/17 " 01:15:32.112" 2387921 1c18 1da8 INFO MBAMShimImpl MBAMShimImpl::FinishUpdate "MBAMShimImpl.cpp" 131 "MBAMCore finishing update"
10/09/17 " 01:16:13.275" 2429078 1c18 1354 INFO MBAMShimImpl MBAMShimImpl::InitializeInternal "MBAMShimImpl.cpp" 62 "MBAMCore was successfully loaded. CoreFilePath=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\\MBAMCore.dll>."
10/09/17 " 01:16:32.809" 2448625 1c18 1354 INFO MBAMCoreImpl MBAMCoreImpl::Initialize "MBAMCoreImpl.cpp" 123 "MBAMCore was successfully initialized. CoreFolderPath=<C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\>. DefsFolderPath=<C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE>."
10/09/17 " 01:16:32.809" 2448625 1c18 1354 INFO CleanControllerImpl Cleaner::Clean "Cleaner.cpp" 55 "Start of clean, client 'MbamUI', detection results 'C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\ScanResults\17cd0e94-ac83-11e7-8eca-001e4fdf241c.json'"
10/09/17 " 01:16:33.044" 2448859 1c18 1354 INFO CleanControllerImpl DOREngine:

reCleanIsRebootRequired "DOREngine.cpp" 119 "Must reboot, special file C:\Windows\SECOH-QAD.EXE"
10/09/17 " 01:16:33.170" 2448984 1c18 1354 INFO CleanControllerImpl QuarantineEngine::QuarantineFile "QuarantineEngine.cpp" 395 "Quarantining C:\WINDOWS\SECOH-QAD.EXE"
10/09/17 " 01:16:33.740" 2449546 1c18 1354 INFO CleanControllerImpl Cleaner::RemediateAndWriteMetadata "Cleaner.cpp" 320 "Starting cleaning of File C:\WINDOWS\SECOH-QAD.EXE"
10/09/17 " 01:16:33.741" 2449546 1c18 1354 INFO CleanControllerImpl RemovalEngine::RemediateFile "RemovalEngine.cpp" 1156 "Cleaning file 'C:\WINDOWS\SECOH-QAD.EXE', anti-rootkit = false"
10/09/17 " 01:16:34.516" 2450328 1c18 1354 INFO CleanControllerImpl RemovalEngine:

eleteFileAPI "RemovalEngine.cpp" 1518 "Deleting file 'C:\Windows\SECOH-QAD.EXE', resolved path = 'C:\Windows\SECOH-QAD.EXE'"
10/09/17 " 01:16:50.451" 2466265 1c18 1354 INFO CleanControllerImpl RemovalEngine::LogCleanResult "RemovalEngine.cpp" 1691 "Succeeded cleaning file 'C:\Windows\SECOH-QAD.EXE'"
10/09/17 " 01:16:50.452" 2466265 1c18 1354 INFO CleanControllerImpl QuarantineEngine::CopyMetadataToQuarantine "QuarantineEngine.cpp" 138 "Copying quarantine metadata for C:\WINDOWS\SECOH-QAD.EXE"
10/09/17 " 01:16:50.527" 2466343 1c18 1354 INFO CleanControllerImpl QuarantineEngine::LogQuarantineResult "QuarantineEngine.cpp" 639 "Succeeded quarantining File 'C:\Windows\SECOH-QAD.EXE'"
10/09/17 " 01:16:50.527" 2466343 1c18 1354 INFO CleanControllerImpl Cleaner::RebuildSystemRegistryValues "Cleaner.cpp" 449 "Rebuilding system registry values."
10/09/17 " 01:16:50.528" 2466343 1c18 1354 INFO CleanControllerImpl Cleaner::RebuildRegistryValueEx "Cleaner.cpp" 432 "Successfully rebuilt registry value at HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages, from 'scecli^^' to 'scecli'."
10/09/17 " 01:16:50.528" 2466343 1c18 1354 INFO CleanControllerImpl Cleaner::RebuildRegistryValueEx "Cleaner.cpp" 432 "Successfully rebuilt registry value at HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages, from '""""^^' to '""""'."
10/09/17 " 01:16:50.529" 2466343 1c18 1354 INFO CleanControllerImpl Cleaner::RebuildRegistryValueEx "Cleaner.cpp" 432 "Successfully rebuilt registry value at HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages, from 'msv1_0^^' to 'msv1_0'."
10/09/17 " 01:16:50.531" 2466343 1c18 1354 INFO CleanControllerImpl mb::swissarmyclientutils::SwissArmySDKWrapper::ScheduleDeleteFile "SwissArmySDKWrapper.cpp" 188 "Scheduling delete file: 'C:\Windows\SECOH-QAD.EXE'"
10/09/17 " 01:16:50.577" 2466390 1c18 1354 INFO CleanControllerImpl Cleaner::ExecutePostCleanupActions "Cleaner.cpp" 576 "Executing post-cleanup actions"
10/09/17 " 01:16:50.578" 2466390 1c18 1354 INFO Actions ActionsManager:

rocessThreatActionsV2 "ActionsManager.cpp" 835 "Executing post cleanup actions"
10/09/17 " 01:16:50.772" 2466578 1c18 1354 INFO CleanControllerImpl Cleaner::Clean "Cleaner.cpp" 267 "Completed clean from client MbamUI, detection results C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\ScanResults\17cd0e94-ac83-11e7-8eca-001e4fdf241c.json, status DORRequired"
10/09/17 " 01:16:51.233" 2467046 1c18 1354 INFO CleanControllerImpl CleanControllerImpl::SetAutoStartOverrideDueToDOR "CleanControllerImpl.cpp" 2518 "Service auto-start override was set"
10/09/17 " 01:16:51.398" 2467203 1c18 1354 INFO MBAMCoreImpl MBAMCoreImpl::Shutdown "MBAMCoreImpl.cpp" 152 "MBAMCore was successfully shutdown."

Juliet · Oct 9, 2017

Aww Shucks - Thanks. Also think your way cleverer though
Malwarebytes now installed ok and works
Run a scan - Log Below. Only one thing found relating to the KMSPico thing I had

cleverer, is that a real word?
lol thank you

**
Yeah for MalwareBytes!
I think what you've posted is an applications log of sorts. To find the malware scan log
You can access the logs by going in the "Reports" tab, clicking on the latest "Scan" entry (the one with detections), then clicking on the "Export" button in the bottom-left corner and select "Copy to clipboard". After that, all you have to do is paste it here

Usually at this point I recommend running an online scan, up to it?
Look back a couple of post and look at what I posted for Emsisoft Emergency Kit

Or, are you ready to remove tools and quarantine folders?

PC Painfully Slow - Especially IE

New member

New member

Security Expert-emeritus

New member

Security Expert-emeritus

Security Expert-emeritus

New member

New member

New member

Security Expert-emeritus

New member

New member

New member

Security Expert-emeritus

Security Expert-emeritus

New member

New member

Security Expert-emeritus

New member

Security Expert-emeritus