1 11:31:22 explorer.exe:5396 IRP_MJ_CREATE C:\Documents and Settings\detacom\Desktop\Opera.lnk SUCCESS Options: Open Access: All 2 11:31:22 explorer.exe:5396 IRP_MJ_READ C:\Documents and Settings\detacom\Desktop\Opera.lnk SUCCESS Offset: 0 Length: 4096 3 11:31:22 System:4 IRP_MJ_CLOSE C:\Documents and Settings\detacom\Desktop\Opera.lnk SUCCESS 4 11:31:22 explorer.exe:5396 IRP_MJ_QUERY_VOLUME_INFORMATION C:\Documents and Settings\detacom\Desktop\Opera.lnk BUFFER OVERFLOW FileFsVolumeInformation 5 11:31:22 explorer.exe:5396 IRP_MJ_QUERY_INFORMATION C:\Documents and Settings\detacom\Desktop\Opera.lnk BUFFER OVERFLOW FileAllInformation 6 11:31:22 explorer.exe:5396 IRP_MJ_CLEANUP C:\Documents and Settings\detacom\Desktop\Opera.lnk SUCCESS 7 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\winmm.dll SUCCESS Attributes: A 8 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\winmm.dll SUCCESS Options: Open Access: All 9 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\winmm.dll SUCCESS 10 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\winmm.dll SUCCESS 11 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF SUCCESS Attributes: D 12 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF SUCCESS Options: Open Directory Access: Traverse 13 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF\COMCTL32.dll SUCCESS Options: Open Access: All 14 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF\COMCTL32.dll SUCCESS 15 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF\COMCTL32.dll SUCCESS 16 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\wsock32.dll SUCCESS Attributes: A 17 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\wsock32.dll SUCCESS Options: Open Access: All 18 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\wsock32.dll SUCCESS 19 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\wsock32.dll SUCCESS 20 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\WS2_32.dll SUCCESS Attributes: A 21 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\WS2_32.dll SUCCESS Options: Open Access: All 22 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\WS2_32.dll SUCCESS 23 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\WS2_32.dll SUCCESS 24 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\WS2HELP.dll SUCCESS Attributes: A 25 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\WS2HELP.dll SUCCESS Options: Open Access: All 26 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\WS2HELP.dll SUCCESS 27 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\WS2HELP.dll SUCCESS 28 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\imm32.dll SUCCESS Attributes: A 29 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\imm32.dll SUCCESS Options: Open Access: All 30 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\imm32.dll SUCCESS 31 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\imm32.dll SUCCESS 32 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\rdpsnd.dll SUCCESS Attributes: A 33 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\rdpsnd.dll SUCCESS Options: Open Access: All 34 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\rdpsnd.dll SUCCESS 35 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\rdpsnd.dll SUCCESS 36 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\WINSTA.dll SUCCESS Attributes: A 37 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\WINSTA.dll SUCCESS Options: Open Access: All 38 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\WINSTA.dll SUCCESS 39 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\WINSTA.dll SUCCESS 40 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\PSAPI.DLL SUCCESS Attributes: A 41 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\PSAPI.DLL SUCCESS Options: Open Access: All 42 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\PSAPI.DLL SUCCESS 43 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\PSAPI.DLL SUCCESS 44 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\rdpsnd.dll SUCCESS Attributes: A 45 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\rdpsnd.dll SUCCESS Attributes: A 46 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\rdpsnd.dll SUCCESS Attributes: A 47 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\WindowsShell.Manifest SUCCESS Attributes: RHA 48 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\WindowsShell.Manifest SUCCESS Options: Open Access: Execute 49 11:31:24 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\WindowsShell.Manifest SUCCESS Length: 749 50 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\WindowsShell.Manifest SUCCESS 51 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\WindowsShell.Manifest SUCCESS 52 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\WindowsShell.Manifest SUCCESS Attributes: RHA 53 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\WindowsShell.Manifest SUCCESS Options: Open Access: All 54 11:31:24 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\WindowsShell.Manifest SUCCESS Length: 749 55 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\WindowsShell.Manifest SUCCESS 56 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\WindowsShell.Manifest SUCCESS 57 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\WindowsShell.Manifest SUCCESS Options: Open Access: All 58 11:31:24 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\WindowsShell.Manifest SUCCESS Length: 749 59 11:31:24 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\WindowsShell.Manifest SUCCESS Length: 749 60 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\WindowsShell.Config NOT FOUND Options: Open Access: All 61 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\WindowsShell.Manifest SUCCESS 62 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\WindowsShell.Manifest SUCCESS 63 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\SHELL32.dll SUCCESS Options: Open Access: All 64 11:31:24 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\system32\SHELL32.dll SUCCESS Length: 8380928 65 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\SHELL32.dll.124.Config NOT FOUND Options: Open Access: All 66 11:31:24 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\SHELL32.dll SUCCESS 67 11:31:24 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\SHELL32.dll SUCCESS 68 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF SUCCESS Attributes: D 69 11:31:24 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF SUCCESS Options: Open Directory Access: Traverse 70 11:31:24 Opera.exe:2320 IRP_MJ_SET_INFORMATION C:\WINDOWS\system32\config\software.LOG SUCCESS Length: 28672 71 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\IMM32.DLL SUCCESS Attributes: A 72 11:31:24 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\IMM32.DLL SUCCESS Attributes: A 73 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\klient\opera_profile.txt SUCCESS Options: OverwriteIf Access: All 74 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\Msimg32.dll SUCCESS Attributes: A 75 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\Msimg32.dll SUCCESS Options: Open Access: All 76 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\Msimg32.dll SUCCESS 77 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\Msimg32.dll SUCCESS 78 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\uxtheme.dll SUCCESS Attributes: A 79 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\uxtheme.dll SUCCESS Options: Open Access: All 80 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\uxtheme.dll SUCCESS 81 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\uxtheme.dll SUCCESS 82 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\rpcss.dll SUCCESS Attributes: A 83 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\rpcss.dll SUCCESS Options: Open Access: Execute 84 11:31:28 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\system32\rpcss.dll SUCCESS Length: 417792 85 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\rpcss.dll SUCCESS 86 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\rpcss.dll SUCCESS 87 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\Documents and Settings\detacom\Application Data SUCCESS Attributes: DRH 88 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\SHELL32.dll SUCCESS Attributes: A 89 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\SETUPAPI.dll SUCCESS Attributes: A 90 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\SETUPAPI.dll SUCCESS Options: Open Access: All 91 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\SETUPAPI.dll SUCCESS 92 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\SETUPAPI.dll SUCCESS 93 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\ SUCCESS Attributes: D 94 11:31:28 Opera.exe:2320 IRP_MJ_CREATE \\.\Pipe\ntsvcs SUCCESS Options: Open Access: All 95 11:31:28 Opera.exe:2320 IRP_MJ_SET_INFORMATION \\.\Pipe\ntsvcs SUCCESS FilePipeInformation 96 11:31:28 Opera.exe:2320 IRP_MJ_WRITE \\.\Pipe\ntsvcs SUCCESS Offset: 0 Length: 116 97 11:31:28 Opera.exe:2320 IRP_MJ_READ \\.\Pipe\ntsvcs SUCCESS Offset: 0 Length: 1024 98 11:31:28 Opera.exe:2320 FSCTL_PIPE_TRANSCEIVE \\.\Pipe\ntsvcs SUCCESS WriteLen: 48 ReadLen: 1024 99 11:31:28 Opera.exe:2320 FSCTL_PIPE_TRANSCEIVE \\.\Pipe\ntsvcs SUCCESS WriteLen: 52 ReadLen: 1024 100 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\ SUCCESS Options: Open Directory Access: All 101 11:31:28 Opera.exe:2320 IRP_MJ_DIRECTORY_CONTROL C:\ SUCCESS FileBothDirectoryInformation: Documents and Settings 102 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\ SUCCESS 103 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\ SUCCESS 104 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\Documents and Settings\ SUCCESS Options: Open Directory Access: All 105 11:31:28 Opera.exe:2320 IRP_MJ_DIRECTORY_CONTROL C:\Documents and Settings\ SUCCESS FileBothDirectoryInformation: detacom 106 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\Documents and Settings\ SUCCESS 107 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\Documents and Settings\ SUCCESS 108 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\Documents and Settings\detacom\ SUCCESS Options: Open Directory Access: All 109 11:31:28 Opera.exe:2320 IRP_MJ_DIRECTORY_CONTROL C:\Documents and Settings\detacom\ SUCCESS FileBothDirectoryInformation: Application Data 110 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\Documents and Settings\detacom\ SUCCESS 111 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\Documents and Settings\detacom\ SUCCESS 112 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Attributes: HSA 113 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Options: Open Access: All 114 11:31:28 Opera.exe:2320 FASTIO_LOCK C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Excl: No Offset: 0 Length: -1 115 11:31:28 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Length: 62 116 11:31:28 Opera.exe:2320 IRP_MJ_READ C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Offset: 0 Length: 62 117 11:31:28 Opera.exe:2320 FASTIO_UNLOCK C:\Documents and Settings\detacom\Application Data\desktop.ini RANGE NOT LOCKED Offset: 0 Length: -1 118 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS 119 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Attributes: HSA 120 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Options: Open Access: All 121 11:31:28 Opera.exe:2320 FASTIO_LOCK C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Excl: No Offset: 0 Length: -1 122 11:31:28 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Length: 62 123 11:31:28 Opera.exe:2320 IRP_MJ_READ C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Offset: 0 Length: 62 124 11:31:28 Opera.exe:2320 FASTIO_UNLOCK C:\Documents and Settings\detacom\Application Data\desktop.ini RANGE NOT LOCKED Offset: 0 Length: -1 125 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS 126 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS 127 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Attributes: HSA 128 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Options: Open Access: All 129 11:31:28 Opera.exe:2320 FASTIO_LOCK C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Excl: No Offset: 0 Length: -1 130 11:31:28 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Length: 62 131 11:31:28 Opera.exe:2320 IRP_MJ_READ C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS Offset: 0 Length: 62 132 11:31:28 Opera.exe:2320 FASTIO_UNLOCK C:\Documents and Settings\detacom\Application Data\desktop.ini RANGE NOT LOCKED Offset: 0 Length: -1 133 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS 134 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\Documents and Settings\detacom\Application Data\desktop.ini SUCCESS 135 11:31:28 Opera.exe:2320 FASTIO_QUERY_OPEN C:\Documents and Settings\detacom\Desktop SUCCESS Attributes: D 136 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\ SUCCESS Options: Open Directory Access: All 137 11:31:28 Opera.exe:2320 IRP_MJ_DIRECTORY_CONTROL C:\ SUCCESS FileBothDirectoryInformation: Documents and Settings 138 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\ SUCCESS 139 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\ SUCCESS 140 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\Documents and Settings\ SUCCESS Options: Open Directory Access: All 141 11:31:28 Opera.exe:2320 IRP_MJ_DIRECTORY_CONTROL C:\Documents and Settings\ SUCCESS FileBothDirectoryInformation: detacom 142 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\Documents and Settings\ SUCCESS 143 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\Documents and Settings\ SUCCESS 144 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\Documents and Settings\detacom\ SUCCESS Options: Open Directory Access: All 145 11:31:28 Opera.exe:2320 IRP_MJ_DIRECTORY_CONTROL C:\Documents and Settings\detacom\ SUCCESS FileBothDirectoryInformation: Desktop 146 11:31:28 Opera.exe:2320 IRP_MJ_CLEANUP C:\Documents and Settings\detacom\ SUCCESS 147 11:31:28 Opera.exe:2320 IRP_MJ_CLOSE C:\Documents and Settings\detacom\ SUCCESS 148 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\DOCUME~1\detacom\LOCALS~1\Temp\1 NAME COLLISION Options: Create Directory Access: All 149 11:31:28 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32 NAME COLLISION Options: Create Directory Access: All 150 11:31:29 Opera.exe:2320 IRP_MJ_CREATE C:\Documents and Settings\detacom\Desktop NAME COLLISION Options: Create Directory Access: All 151 11:31:29 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\Opera6.ini NOT FOUND Options: Open Access: All 152 11:31:31 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\override.ini NOT FOUND Options: Open Access: All 153 11:31:39 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\aspell-15.dll NOT FOUND Attributes: Error 154 11:31:39 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system\aspell-15.dll NOT FOUND Attributes: Error 155 11:31:39 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\aspell-15.dll NOT FOUND Attributes: Error 156 11:31:39 Opera.exe:2320 FASTIO_QUERY_OPEN D:\oracle\ora81\bin\aspell-15.dll NOT FOUND Attributes: Error 157 11:31:39 Opera.exe:2320 FASTIO_QUERY_OPEN C:\Program Files\Oracle\jre\1.1.7\bin\aspell-15.dll NOT FOUND Attributes: Error 158 11:31:39 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\aspell-15.dll NOT FOUND Attributes: Error 159 11:31:39 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\aspell-15.dll NOT FOUND Attributes: Error 160 11:31:39 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\System32\Wbem\aspell-15.dll NOT FOUND Attributes: Error 161 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\usp10.dll SUCCESS Attributes: A 162 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\usp10.dll SUCCESS Options: Open Access: All 163 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\usp10.dll SUCCESS 164 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\usp10.dll SUCCESS 165 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\System32\mswsock.dll SUCCESS Attributes: A 166 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\System32\mswsock.dll SUCCESS Options: Open Access: Execute 167 11:31:44 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\System32\mswsock.dll SUCCESS Length: 256512 168 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\System32\mswsock.dll SUCCESS 169 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\System32\mswsock.dll SUCCESS 170 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\System32\mswsock.dll SUCCESS Attributes: A 171 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\System32\mswsock.dll SUCCESS Options: Open Access: All 172 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\System32\mswsock.dll SUCCESS 173 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\System32\mswsock.dll SUCCESS 174 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\DNSAPI.dll SUCCESS Attributes: A 175 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\DNSAPI.dll SUCCESS Options: Open Access: All 176 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\DNSAPI.dll SUCCESS 177 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\DNSAPI.dll SUCCESS 178 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\System32\winrnr.dll SUCCESS Attributes: A 179 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\System32\winrnr.dll SUCCESS Options: Open Access: Execute 180 11:31:44 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\System32\winrnr.dll SUCCESS Length: 17408 181 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\System32\winrnr.dll SUCCESS 182 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\System32\winrnr.dll SUCCESS 183 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\System32\winrnr.dll SUCCESS Attributes: A 184 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\System32\winrnr.dll SUCCESS Options: Open Access: All 185 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\System32\winrnr.dll SUCCESS 186 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\System32\winrnr.dll SUCCESS 187 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\System32\mswsock.dll SUCCESS Attributes: A 188 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\rasadhlp.dll SUCCESS Attributes: A 189 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\rasadhlp.dll SUCCESS Options: Open Access: All 190 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\rasadhlp.dll SUCCESS 191 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\rasadhlp.dll SUCCESS 192 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\mswsock.dll SUCCESS Attributes: A 193 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\hnetcfg.dll SUCCESS Attributes: A 194 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\hnetcfg.dll SUCCESS Options: Open Access: All 195 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\hnetcfg.dll SUCCESS 196 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\hnetcfg.dll SUCCESS 197 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\System32\wshtcpip.dll SUCCESS Attributes: A 198 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\System32\wshtcpip.dll SUCCESS Options: Open Access: Execute 199 11:31:44 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\System32\wshtcpip.dll SUCCESS Length: 18432 200 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\System32\wshtcpip.dll SUCCESS 201 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\System32\wshtcpip.dll SUCCESS 202 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\System32\wshtcpip.dll SUCCESS Attributes: A 203 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\System32\wshtcpip.dll SUCCESS Options: Open Access: All 204 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\System32\wshtcpip.dll SUCCESS 205 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\System32\wshtcpip.dll SUCCESS 206 11:31:44 Opera.exe:2320 IRP_MJ_CREATE \\.\Pipe\wkssvc SUCCESS Options: Open Access: All 207 11:31:44 Opera.exe:2320 IRP_MJ_SET_INFORMATION \\.\Pipe\wkssvc SUCCESS FilePipeInformation 208 11:31:44 Opera.exe:2320 IRP_MJ_WRITE \\.\Pipe\wkssvc SUCCESS Offset: 0 Length: 116 209 11:31:44 Opera.exe:2320 IRP_MJ_READ \\.\Pipe\wkssvc SUCCESS Offset: 0 Length: 1024 210 11:31:44 Opera.exe:2320 FSCTL_PIPE_TRANSCEIVE \\.\Pipe\wkssvc SUCCESS WriteLen: 88 ReadLen: 1024 211 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP \\.\Pipe\wkssvc SUCCESS 212 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE \\.\Pipe\wkssvc SUCCESS 213 11:31:44 Opera.exe:2320 IRP_MJ_CREATE \\.\Pipe\srvsvc SUCCESS Options: Open Access: All 214 11:31:44 Opera.exe:2320 IRP_MJ_SET_INFORMATION \\.\Pipe\srvsvc SUCCESS FilePipeInformation 215 11:31:44 Opera.exe:2320 IRP_MJ_WRITE \\.\Pipe\srvsvc SUCCESS Offset: 0 Length: 116 216 11:31:44 Opera.exe:2320 IRP_MJ_READ \\.\Pipe\srvsvc SUCCESS Offset: 0 Length: 1024 217 11:31:44 Opera.exe:2320 FSCTL_PIPE_TRANSCEIVE \\.\Pipe\srvsvc SUCCESS WriteLen: 80 ReadLen: 1024 218 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP \\.\Pipe\srvsvc SUCCESS 219 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE \\.\Pipe\srvsvc SUCCESS 220 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 221 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\rsaenh.dll SUCCESS Options: Open Access: All 222 11:31:44 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\system32\rsaenh.dll SUCCESS Length: 188392 223 11:31:44 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\system32\rsaenh.dll SUCCESS Length: 188392 224 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\rsaenh.dll SUCCESS 225 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\rsaenh.dll SUCCESS 226 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\rsaenh.dll SUCCESS Attributes: A 227 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\rsaenh.dll SUCCESS Options: Open Access: All 228 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\rsaenh.dll SUCCESS 229 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\rsaenh.dll SUCCESS 230 11:31:44 Opera.exe:2320 FASTIO_QUERY_OPEN C:\WINDOWS\system32\crypt32.dll SUCCESS Attributes: A 231 11:31:44 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\system32\crypt32.dll SUCCESS Options: Open Access: All 232 11:31:44 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\system32\crypt32.dll SUCCESS Length: 595968 233 11:31:44 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\system32\crypt32.dll SUCCESS 234 11:31:44 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\system32\crypt32.dll SUCCESS 235 11:33:36 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS Options: Open Access: All 236 11:33:36 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS Length: 248368 237 11:33:36 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS Attributes: A 238 11:33:36 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS FileFsAttributeInformation 239 11:33:36 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS Length: 248368 240 11:33:36 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS Options: Open Access: All 241 11:33:36 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS Length: 248368 242 11:33:36 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS Attributes: A 243 11:33:36 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS FileFsAttributeInformation 244 11:33:36 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\TIMESI.TTF SUCCESS Length: 248368 245 11:33:42 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS Options: Open Access: All 246 11:33:42 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS Length: 367112 247 11:33:42 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS Attributes: A 248 11:33:42 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS FileFsAttributeInformation 249 11:33:42 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS Length: 367112 250 11:33:42 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS Options: Open Access: All 251 11:33:42 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS Length: 367112 252 11:33:42 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS Attributes: A 253 11:33:42 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS FileFsAttributeInformation 254 11:33:42 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\ARIAL.TTF SUCCESS Length: 367112 255 11:33:42 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS Options: Open Access: All 256 11:33:42 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS Length: 117028 257 11:33:42 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS Attributes: A 258 11:33:42 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS FileFsAttributeInformation 259 11:33:42 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS Length: 117028 260 11:33:42 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS Options: Open Access: All 261 11:33:42 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS Length: 117028 262 11:33:42 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS Attributes: A 263 11:33:42 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS FileFsAttributeInformation 264 11:33:42 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\ARIBLK.TTF SUCCESS Length: 117028 265 11:33:55 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS Options: Open Access: All 266 11:33:55 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS Length: 155076 267 11:33:55 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS Attributes: A 268 11:33:55 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS FileFsAttributeInformation 269 11:33:55 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS Length: 155076 270 11:33:55 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS Options: Open Access: All 271 11:33:55 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS Length: 155076 272 11:33:55 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS Attributes: A 273 11:33:55 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS FileFsAttributeInformation 274 11:33:55 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\VERDANAI.TTF SUCCESS Length: 155076 275 11:34:00 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS Options: Open Access: All 276 11:34:00 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS Length: 154800 277 11:34:00 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS Attributes: A 278 11:34:00 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS FileFsAttributeInformation 279 11:34:00 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS Length: 154800 280 11:34:00 Opera.exe:2320 IRP_MJ_CREATE C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS Options: Open Access: All 281 11:34:00 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS Length: 154800 282 11:34:00 Opera.exe:2320 FASTIO_QUERY_BASIC_INFO C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS Attributes: A 283 11:34:00 Opera.exe:2320 IRP_MJ_QUERY_VOLUME_INFORMATION C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS FileFsAttributeInformation 284 11:34:00 Opera.exe:2320 FASTIO_QUERY_STANDARD_INFO C:\WINDOWS\FONTS\VERDANAZ.TTF SUCCESS Length: 154800 285 11:36:58 Opera.exe:2320 IRP_MJ_WRITE C:\klient\opera_profile.txt SUCCESS Offset: 0 Length: 1024 286 11:36:58 Opera.exe:2320 FASTIO_WRITE C:\klient\opera_profile.txt SUCCESS Offset: 1024 Length: 222 287 11:36:58 Opera.exe:2320 IRP_MJ_CLEANUP C:\klient\opera_profile.txt SUCCESS 288 11:36:58 Mcshield.exe:1680 IRP_MJ_CREATE C:\klient\opera_profile.txt SUCCESS Options: Open Access: All 289 11:36:58 Mcshield.exe:1680 IRP_MJ_QUERY_INFORMATION C:\klient\opera_profile.txt SUCCESS FileBasicInformation 290 11:36:58 Mcshield.exe:1680 IRP_MJ_SET_INFORMATION C:\klient\opera_profile.txt SUCCESS FileBasicInformation 291 11:36:58 Mcshield.exe:1680 IRP_MJ_QUERY_INFORMATION C:\klient\opera_profile.txt SUCCESS FileStandardInformation 292 11:36:58 Mcshield.exe:1680 IRP_MJ_CLEANUP C:\klient\opera_profile.txt SUCCESS 293 11:36:58 Mcshield.exe:1680 IRP_MJ_CLOSE C:\klient\opera_profile.txt SUCCESS 294 11:36:58 Mcshield.exe:1680 IRP_MJ_CREATE C:\klient\opera_profile.txt SUCCESS Options: Open Access: All 295 11:36:58 Mcshield.exe:1680 IRP_MJ_SET_INFORMATION C:\klient\opera_profile.txt SUCCESS FileBasicInformation 296 11:36:58 Mcshield.exe:1680 IRP_MJ_QUERY_INFORMATION C:\klient\opera_profile.txt SUCCESS FileStandardInformation 297 11:36:58 Mcshield.exe:1680 IRP_MJ_CLEANUP C:\klient\opera_profile.txt SUCCESS 298 11:36:58 Mcshield.exe:1680 IRP_MJ_CLOSE C:\klient\opera_profile.txt SUCCESS 299 11:36:58 Mcshield.exe:1680 IRP_MJ_CREATE C:\klient\opera_profile.txt SUCCESS Options: Open Access: All 300 11:36:58 Mcshield.exe:1680 IRP_MJ_SET_INFORMATION C:\klient\opera_profile.txt SUCCESS FileBasicInformation 301 11:36:58 Mcshield.exe:1680 IRP_MJ_READ C:\klient\opera_profile.txt SUCCESS Offset: 0 Length: 4096 302 11:36:58 Mcshield.exe:1680 FASTIO_READ C:\klient\opera_profile.txt END OF FILE Offset: 1246 Length: 2850 303 11:36:58 Mcshield.exe:1680 IRP_MJ_CLEANUP C:\klient\opera_profile.txt SUCCESS 304 11:36:58 Mcshield.exe:1680 IRP_MJ_CLOSE C:\klient\opera_profile.txt SUCCESS 305 11:36:58 Mcshield.exe:1680 IRP_MJ_CREATE C:\klient\opera_profile.txt SUCCESS Options: Open Access: All 306 11:36:58 Mcshield.exe:1680 IRP_MJ_SET_INFORMATION C:\klient\opera_profile.txt SUCCESS FileBasicInformation 307 11:36:58 Mcshield.exe:1680 IRP_MJ_QUERY_INFORMATION C:\klient\opera_profile.txt SUCCESS FileBasicInformation 308 11:36:58 Mcshield.exe:1680 IRP_MJ_CLEANUP C:\klient\opera_profile.txt SUCCESS 309 11:36:58 Mcshield.exe:1680 IRP_MJ_CLOSE C:\klient\opera_profile.txt SUCCESS 310 11:36:58 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF SUCCESS 311 11:36:58 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF SUCCESS 312 11:36:58 Opera.exe:2320 IRP_MJ_CLEANUP C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF SUCCESS 313 11:36:58 Opera.exe:2320 IRP_MJ_CLOSE C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.1830_x-ww_7AE38CCF SUCCESS 314 11:36:58 Opera.exe:2320 IRP_MJ_CLEANUP \\.\Pipe\ntsvcs SUCCESS 315 11:36:58 Opera.exe:2320 IRP_MJ_CLOSE \\.\Pipe\ntsvcs SUCCESS 316 11:37:01 System:4 IRP_MJ_WRITE* C:\klient\opera_profile.txt SUCCESS Offset: 0 Length: 4096 317 11:37:01 System:4 IRP_MJ_SET_INFORMATION* C:\klient\opera_profile.txt SUCCESS Length: 1246