Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Logfiles unbekannter Herkunft in Windows/Temp

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 19.02.2015, 13:37   #1
zufällig
 
Logfiles unbekannter Herkunft in Windows/Temp - Standard

Logfiles unbekannter Herkunft in Windows/Temp



Hallo Ihr!

Wollte meinen Rechner wieder bisschen aufräumen und bin dabei über eine erhebliche Anzahl von .log Dateien im Ordner C:\Windows\Temp\ gestoßen.

Eventuell wisst ihr ja woher die Dinger kommen und alles in Ordnung ist, oder ob ich mir einen Plagegeist eingefangen habe.

Anhander der Zeitstempel könnt ihr sehen, dass sie relativ regelmäßig angefertigt werden.
Datei heißt:
KURZI-PC-20150219-1125
Inhalt:
Code:
ATTFilter
Timestamp	Process	TID	Area	Category	EventID	Level	Message	Correlation
02/19/2015 11:25:57.456	OFFICEC2 (0x510)	0xb90		Click-To-Run Telemetry	aqkhc	Medium	{"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","ExeVer":"15.0.4673.1000","SecuritySessionId":"0","ModulePath":"C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe","CommandLine":"/update SCHEDULEDTASK displaylevel=False","Bitness":"64","IntegrityLevel":"0x4000"}	
02/19/2015 11:25:57.457	OFFICEC2 (0x510)	0xb90		Click-To-Run Telemetry	aqkhe	Medium	{"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","OSVersion":"6.1","SP":"1","ProductType":"1","ProcessorArch":"9","Locale":"1031"}	
02/19/2015 11:25:57.465	OFFICEC2 (0x510)	0xb90		Click-To-Run Telemetry	amebh	Medium	ClientExe complete. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","Action":"1","Result":"0"}	
02/19/2015 11:25:57.465	OFFICEC2 (0x510)	0xb90		Logging Liblet	aqc99	Medium	Logging liblet uninitializing.
         
Datei heißt:
KURZI-PC-20150219-1055
Inhalt:
Code:
ATTFilter
Timestamp	Process	TID	Area	Category	EventID	Level	Message	Correlation
02/19/2015 10:55:57.453	OFFICEC2 (0x1554)	0x310		Click-To-Run Telemetry	aqkhc	Medium	{"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","ExeVer":"15.0.4673.1000","SecuritySessionId":"0","ModulePath":"C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe","CommandLine":"/update SCHEDULEDTASK displaylevel=False","Bitness":"64","IntegrityLevel":"0x4000"}	
02/19/2015 10:55:57.454	OFFICEC2 (0x1554)	0x310		Click-To-Run Telemetry	aqkhe	Medium	{"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","OSVersion":"6.1","SP":"1","ProductType":"1","ProcessorArch":"9","Locale":"1031"}	
02/19/2015 10:55:57.460	OFFICEC2 (0x1554)	0x310		Click-To-Run Telemetry	amebh	Medium	ClientExe complete. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","Action":"1","Result":"0"}	
02/19/2015 10:55:57.460	OFFICEC2 (0x1554)	0x310		Logging Liblet	aqc99	Medium	Logging liblet uninitializing.
         
Datei heißt:
KURZI-PC-20150219-1025
Inhalt:
Code:
ATTFilter
Timestamp	Process	TID	Area	Category	EventID	Level	Message	Correlation
02/19/2015 10:25:57.460	OFFICEC2 (0x44c)	0x18b4		Click-To-Run Telemetry	aqkhc	Medium	{"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","ExeVer":"15.0.4673.1000","SecuritySessionId":"0","ModulePath":"C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe","CommandLine":"/update SCHEDULEDTASK displaylevel=False","Bitness":"64","IntegrityLevel":"0x4000"}	
02/19/2015 10:25:57.469	OFFICEC2 (0x44c)	0x18b4		Click-To-Run Telemetry	aqkhe	Medium	{"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","OSVersion":"6.1","SP":"1","ProductType":"1","ProcessorArch":"9","Locale":"1031"}	
02/19/2015 10:25:57.476	OFFICEC2 (0x44c)	0x18b4		Click-To-Run Telemetry	amebh	Medium	ClientExe complete. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","Action":"1","Result":"0"}	
02/19/2015 10:25:57.477	OFFICEC2 (0x44c)	0x18b4		Logging Liblet	aqc99	Medium	Logging liblet uninitializing.
         
Datei heißt:
KURZI-PC-20150219-1010
Inhalt:
Code:
ATTFilter
Timestamp	Process	TID	Area	Category	EventID	Level	Message	Correlation
02/19/2015 10:10:55.613	OFFICECL (0x768)	0x76c		Click-To-Run Telemetry	aqkhc	Medium	{"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","ExeVer":"15.0.4675.1000","SecuritySessionId":"0","ModulePath":"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe","CommandLine":"/service","Bitness":"64","IntegrityLevel":"0x4000"}	
02/19/2015 10:10:55.613	OFFICECL (0x768)	0x76c		Click-To-Run Telemetry	aqkhe	Medium	{"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","OSVersion":"6.1","SP":"1","ProductType":"1","ProcessorArch":"9","Locale":"1031"}	
02/19/2015 10:10:55.613	OFFICECL (0x768)	0x784		Click-To-Run	annt7	Medium	ProcessPool::Initialize - Initializing Main Process Pool	
02/19/2015 10:10:55.613	OFFICECL (0x768)	0x784		Click-To-Run	annuf	Medium	SystemProcessPool::DoInitialize - Initializing System Process Pool	
02/19/2015 10:10:55.613	OFFICECL (0x768)	0x784		Click-To-Run	anntv	Medium	ConfigurationManager::Initialize - Initializing ConfigurationManager	
02/19/2015 10:10:55.613	OFFICECL (0x768)	0x784		Click-To-Run Telemetry	amebi	Medium	ConfigurationManager::Initialize - {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003"}	
02/19/2015 10:10:55.613	OFFICECL (0x768)	0x784		Click-To-Run	amdl6	Medium	CCS::InitConfigSafe: Successfully init config. Nothing to repair	
02/19/2015 10:10:55.613	OFFICECL (0x768)	0x784		Click-To-Run	annt4	Medium	Pipeline::Initialize - Initializing pipeline with PipelineServerName: "ClickToRun_Pipeline" and InstallationPath: "C:\Program Files\Microsoft Office 15"	
02/19/2015 10:10:55.633	OFFICECL (0x768)	0x784		Click-To-Run	annt1	Medium	Orchestration::Initialize - Initializing Orchestration	
02/19/2015 10:10:55.713	OFFICECL (0x768)	0x784		Click-To-Run	annto	Medium	ApiServer::Initialize - Initializing ApiServer for endpoint: C2RClientAPI_Server_System	
02/19/2015 10:25:57.470	OFFICECL (0x768)	0xd4c		Click-To-Run	annty	Medium	ExecutionContext::QueueScenario - Set executing scenario to UPDATE	
02/19/2015 10:25:57.470	OFFICECL (0x768)	0xd4c		Click-To-Run	annuz	Medium	TaskFactory::TryLoadScenario - Start loading UPDATE scenario	
02/19/2015 10:25:57.473	OFFICECL (0x768)	0xd4c		Click-To-Run	annu0	Medium	TaskFactory::TryLoadScenario - Loading UPDATE scenario is successful	
02/19/2015 10:25:57.475	OFFICECL (0x768)	0xd4c		Click-To-Run	amcwz	Medium	TaskScenario::TryInitializeScenarioSettings - ScenarioInstanceId = 899B1E37-3A10-4E5E-9581-1379211AF82F	
02/19/2015 10:25:57.476	OFFICECL (0x768)	0xd4c		Click-To-Run	ama3g	Medium	ScenarioController::Initialize - requested display level: False	
02/19/2015 10:25:57.476	OFFICECL (0x768)	0xd4c		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:25:57.476	OFFICECL (0x768)	0xd4c		Click-To-Run	aoicd	Medium	ExecutionContext::QueueScenario - Successfully queue scenario UPDATE.	
02/19/2015 10:25:57.477	OFFICECL (0x768)	0xbb0		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} is being scheduled to run in this process	
02/19/2015 10:25:57.477	OFFICECL (0x768)	0xbb0		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:25:57.477	OFFICECL (0x768)	0xbb0		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.479	OFFICECL (0x768)	0xdfc		Click-To-Run Telemetry	amb0n	Medium	TaskUpdateDetection::ApplySettings: Beginning Update Scenario. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","TriggeringUI":"UNDEFINED","TaskCaller":"SCHEDULEDTASK","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","TargetVersion":"UNDEFINED","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","UpdatePathType":"DEFAULT"}	
02/19/2015 10:25:57.806	OFFICECL (0x768)	0xdfc		Click-To-Run	amecw	Medium	Descriptor::Load: Reading Available value from descriptor: 15.0.4693.1002	
02/19/2015 10:25:57.806	OFFICECL (0x768)	0xdfc		Click-To-Run	amecx	Medium	Descriptor::Load: Prereq Node exists. Being parsing it.	
02/19/2015 10:25:57.807	OFFICECL (0x768)	0xdfc		Click-To-Run	amecy	Medium	Descriptor::Load: Reading Bootstrapper value from descriptor: 15.0	
02/19/2015 10:25:57.807	OFFICECL (0x768)	0xdfc		Click-To-Run	an8z1	Medium	CCS::IsUpdateNeeded: Older installed culture found: Culture "de-de" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run	an8z1	Medium	CCS::IsUpdateNeeded: Older installed culture found: Culture "x-none" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run Telemetry	amce9	Medium	TaskUpdateDetection::Execute: Detection results: {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","OldestPackageVersion":"15.0.4675.1003","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","AvailableBuildNumber":"15.0.4693.1002","PackageUpdateAvailable":"1","CurrentClientVersion":"15.0.4675.1000","RequiredClientVersion":"15.0.4446.1000"}	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run	aoh6t	Medium	TaskUpdateDetection::Execute: Package update available! Oldest installed version 15.0.4675.1003, Available version 15.0.4693.1002, required client version 15.0.4446.1000.	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run Telemetry	amchi	Medium	TaskUpdateDetection::Execute: Update detection task succeeded, update is throttled. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run Telemetry	aoh6v	Medium	TaskUpdateDetection::Execute: Update detection task succeeded. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","Duration":"733086","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0)	
02/19/2015 10:25:57.808	OFFICECL (0x768)	0xdfc		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {77176F9C-873B-4A7D-8051-EBEB52DDE8B0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.809	OFFICECL (0x768)	0xdfc		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{57173191-24E0-42E1-96F4-914AF8CFD1D5}}, queue for execution.	
02/19/2015 10:25:57.809	OFFICECL (0x768)	0xdfc		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:25:57.809	OFFICECL (0x768)	0xcb0		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} is being scheduled to run in this process	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0xcb0		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0xcb0		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0x1768		Click-To-Run	aoh66	Medium	Starting update download task.	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0x1768		Click-To-Run Telemetry	amchk	Medium	TaskUpdateDownload::Execute: No version to download. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"57173191-24E0-42E1-96F4-914AF8CFD1D5","TaskType":"UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5}","Scenario":"UPDATE"}	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0x1768		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0x1768		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (57173191-24E0-42E1-96F4-914AF8CFD1D5) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0x1768		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0x1768		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (57173191-24E0-42E1-96F4-914AF8CFD1D5)	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0x1768		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {57173191-24E0-42E1-96F4-914AF8CFD1D5} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.810	OFFICECL (0x768)	0x1768		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}}, queue for execution.	
02/19/2015 10:25:57.811	OFFICECL (0x768)	0x1768		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:25:57.811	OFFICECL (0x768)	0x1780		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} is being scheduled to run in this process	
02/19/2015 10:25:57.811	OFFICECL (0x768)	0x1780		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:25:57.811	OFFICECL (0x768)	0x1780		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.812	OFFICECL (0x768)	0x1770		Click-To-Run Telemetry	apmsl	Medium	TaskUpdateApply::Execute: No action needed. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"AA63EED2-70B9-4E21-952C-9CFB09EC37C0","TaskType":"UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}","Scenario":"UPDATE"}	
02/19/2015 10:25:57.812	OFFICECL (0x768)	0x1770		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:25:57.812	OFFICECL (0x768)	0x1770		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 10:25:57.812	OFFICECL (0x768)	0x1770		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:25:57.812	OFFICECL (0x768)	0x1770		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0)	
02/19/2015 10:25:57.812	OFFICECL (0x768)	0x1770		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AA63EED2-70B9-4E21-952C-9CFB09EC37C0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.812	OFFICECL (0x768)	0x1770		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{D1506E3F-4B2A-41D3-913B-FA3E889CE20D}}, queue for execution.	
02/19/2015 10:25:57.812	OFFICECL (0x768)	0x1770		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:25:57.813	OFFICECL (0x768)	0x1774		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} is being scheduled to run in this process	
02/19/2015 10:25:57.813	OFFICECL (0x768)	0x1774		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:25:57.813	OFFICECL (0x768)	0x1774		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.813	OFFICECL (0x768)	0x1764		Click-To-Run	ap5l5	Medium	TaskBranch::DoExecute - No condition value has been set.	
02/19/2015 10:25:57.813	OFFICECL (0x768)	0x1764		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:25:57.813	OFFICECL (0x768)	0x1764		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:25:57.813	OFFICECL (0x768)	0x1764		Click-To-Run	aozsm	Medium	TaskBranch::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} success event is handled by task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D}	
02/19/2015 10:25:57.813	OFFICECL (0x768)	0x1764		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.814	OFFICECL (0x768)	0x1764		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}}, queue for execution.	
02/19/2015 10:25:57.814	OFFICECL (0x768)	0x1764		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:25:57.814	OFFICECL (0x768)	0x1650		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} is being scheduled to run in this process	
02/19/2015 10:25:57.815	OFFICECL (0x768)	0x1650		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:25:57.815	OFFICECL (0x768)	0x1650		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.815	OFFICECL (0x768)	0x1aa8		Click-To-Run	ap5l5	Medium	TaskBranch::DoExecute - No condition value has been set.	
02/19/2015 10:25:57.815	OFFICECL (0x768)	0x1aa8		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:25:57.815	OFFICECL (0x768)	0x1aa8		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:25:57.815	OFFICECL (0x768)	0x1aa8		Click-To-Run	aozsm	Medium	TaskBranch::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} success event is handled by task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}	
02/19/2015 10:25:57.815	OFFICECL (0x768)	0x1aa8		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:25:57.815	OFFICECL (0x768)	0x1aa8		Click-To-Run	apm4o	Medium	TaskGroup::Finalize - Finalizing task AC2F0D89-6518-48E9-A0D9-EF039C456034.	
02/19/2015 10:25:57.816	OFFICECL (0x768)	0x1aa8		Click-To-Run	annt0	Medium	ExecutionContext::ResetExecutingScenario - Reset executing scenario	
02/19/2015 10:25:57.816	OFFICECL (0x768)	0x7c0		Click-To-Run	ati21	Medium	SystemProcessPool::WaitOnScenarioReset - Scenario is reset.	
02/19/2015 10:55:57.455	OFFICECL (0x768)	0x1b3c		Click-To-Run	annty	Medium	ExecutionContext::QueueScenario - Set executing scenario to UPDATE	
02/19/2015 10:55:57.455	OFFICECL (0x768)	0x1b3c		Click-To-Run	annuz	Medium	TaskFactory::TryLoadScenario - Start loading UPDATE scenario	
02/19/2015 10:55:57.457	OFFICECL (0x768)	0x1b3c		Click-To-Run	annu0	Medium	TaskFactory::TryLoadScenario - Loading UPDATE scenario is successful	
02/19/2015 10:55:57.459	OFFICECL (0x768)	0x1b3c		Click-To-Run	amcwz	Medium	TaskScenario::TryInitializeScenarioSettings - ScenarioInstanceId = 32C22C34-71D4-437A-A165-C7A6AF638EE5	
02/19/2015 10:55:57.460	OFFICECL (0x768)	0x1b3c		Click-To-Run	ama3g	Medium	ScenarioController::Initialize - requested display level: False	
02/19/2015 10:55:57.460	OFFICECL (0x768)	0x1b3c		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:55:57.460	OFFICECL (0x768)	0x1b3c		Click-To-Run	aoicd	Medium	ExecutionContext::QueueScenario - Successfully queue scenario UPDATE.	
02/19/2015 10:55:57.461	OFFICECL (0x768)	0xf20		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} is being scheduled to run in this process	
02/19/2015 10:55:57.461	OFFICECL (0x768)	0xf20		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:55:57.461	OFFICECL (0x768)	0xf20		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.462	OFFICECL (0x768)	0x1764		Click-To-Run Telemetry	amb0n	Medium	TaskUpdateDetection::ApplySettings: Beginning Update Scenario. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","TriggeringUI":"UNDEFINED","TaskCaller":"SCHEDULEDTASK","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","TargetVersion":"UNDEFINED","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","UpdatePathType":"DEFAULT"}	
02/19/2015 10:55:57.741	OFFICECL (0x768)	0x1764		Click-To-Run	amecw	Medium	Descriptor::Load: Reading Available value from descriptor: 15.0.4693.1002	
02/19/2015 10:55:57.741	OFFICECL (0x768)	0x1764		Click-To-Run	amecx	Medium	Descriptor::Load: Prereq Node exists. Being parsing it.	
02/19/2015 10:55:57.741	OFFICECL (0x768)	0x1764		Click-To-Run	amecy	Medium	Descriptor::Load: Reading Bootstrapper value from descriptor: 15.0	
02/19/2015 10:55:57.742	OFFICECL (0x768)	0x1764		Click-To-Run	an8z1	Medium	CCS::IsUpdateNeeded: Older installed culture found: Culture "de-de" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!	
02/19/2015 10:55:57.742	OFFICECL (0x768)	0x1764		Click-To-Run	an8z1	Medium	CCS::IsUpdateNeeded: Older installed culture found: Culture "x-none" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run Telemetry	amce9	Medium	TaskUpdateDetection::Execute: Detection results: {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","OldestPackageVersion":"15.0.4675.1003","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","AvailableBuildNumber":"15.0.4693.1002","PackageUpdateAvailable":"1","CurrentClientVersion":"15.0.4675.1000","RequiredClientVersion":"15.0.4446.1000"}	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run	aoh6t	Medium	TaskUpdateDetection::Execute: Package update available! Oldest installed version 15.0.4675.1003, Available version 15.0.4693.1002, required client version 15.0.4446.1000.	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run Telemetry	amchi	Medium	TaskUpdateDetection::Execute: Update detection task succeeded, update is throttled. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run Telemetry	aoh6v	Medium	TaskUpdateDetection::Execute: Update detection task succeeded. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","Duration":"734886","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0)	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {77176F9C-873B-4A7D-8051-EBEB52DDE8B0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{57173191-24E0-42E1-96F4-914AF8CFD1D5}}, queue for execution.	
02/19/2015 10:55:57.743	OFFICECL (0x768)	0x1764		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:55:57.744	OFFICECL (0x768)	0x1338		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} is being scheduled to run in this process	
02/19/2015 10:55:57.744	OFFICECL (0x768)	0x1338		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:55:57.744	OFFICECL (0x768)	0x1338		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.744	OFFICECL (0x768)	0xccc		Click-To-Run	aoh66	Medium	Starting update download task.	
02/19/2015 10:55:57.745	OFFICECL (0x768)	0xccc		Click-To-Run Telemetry	amchk	Medium	TaskUpdateDownload::Execute: No version to download. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"57173191-24E0-42E1-96F4-914AF8CFD1D5","TaskType":"UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5}","Scenario":"UPDATE"}	
02/19/2015 10:55:57.745	OFFICECL (0x768)	0xccc		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:55:57.745	OFFICECL (0x768)	0xccc		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (57173191-24E0-42E1-96F4-914AF8CFD1D5) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 10:55:57.745	OFFICECL (0x768)	0xccc		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:55:57.745	OFFICECL (0x768)	0xccc		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (57173191-24E0-42E1-96F4-914AF8CFD1D5)	
02/19/2015 10:55:57.745	OFFICECL (0x768)	0xccc		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {57173191-24E0-42E1-96F4-914AF8CFD1D5} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.745	OFFICECL (0x768)	0xccc		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}}, queue for execution.	
02/19/2015 10:55:57.745	OFFICECL (0x768)	0xccc		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x5d8		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} is being scheduled to run in this process	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x5d8		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x5d8		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x610		Click-To-Run Telemetry	apmsl	Medium	TaskUpdateApply::Execute: No action needed. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"AA63EED2-70B9-4E21-952C-9CFB09EC37C0","TaskType":"UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}","Scenario":"UPDATE"}	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x610		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x610		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x610		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x610		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0)	
02/19/2015 10:55:57.746	OFFICECL (0x768)	0x610		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AA63EED2-70B9-4E21-952C-9CFB09EC37C0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.747	OFFICECL (0x768)	0x610		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{D1506E3F-4B2A-41D3-913B-FA3E889CE20D}}, queue for execution.	
02/19/2015 10:55:57.747	OFFICECL (0x768)	0x610		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:55:57.747	OFFICECL (0x768)	0x9fc		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} is being scheduled to run in this process	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x9fc		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x9fc		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x1720		Click-To-Run	ap5l5	Medium	TaskBranch::DoExecute - No condition value has been set.	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x1720		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x1720		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x1720		Click-To-Run	aozsm	Medium	TaskBranch::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} success event is handled by task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D}	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x1720		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x1720		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}}, queue for execution.	
02/19/2015 10:55:57.748	OFFICECL (0x768)	0x1720		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 10:55:57.749	OFFICECL (0x768)	0x4cc		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} is being scheduled to run in this process	
02/19/2015 10:55:57.750	OFFICECL (0x768)	0x4cc		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 10:55:57.750	OFFICECL (0x768)	0x4cc		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.750	OFFICECL (0x768)	0x8f8		Click-To-Run	ap5l5	Medium	TaskBranch::DoExecute - No condition value has been set.	
02/19/2015 10:55:57.750	OFFICECL (0x768)	0x8f8		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 10:55:57.750	OFFICECL (0x768)	0x8f8		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 10:55:57.750	OFFICECL (0x768)	0x8f8		Click-To-Run	aozsm	Medium	TaskBranch::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} success event is handled by task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}	
02/19/2015 10:55:57.750	OFFICECL (0x768)	0x8f8		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 10:55:57.750	OFFICECL (0x768)	0x8f8		Click-To-Run	apm4o	Medium	TaskGroup::Finalize - Finalizing task AC2F0D89-6518-48E9-A0D9-EF039C456034.	
02/19/2015 10:55:57.751	OFFICECL (0x768)	0x8f8		Click-To-Run	annt0	Medium	ExecutionContext::ResetExecutingScenario - Reset executing scenario	
02/19/2015 10:55:57.751	OFFICECL (0x768)	0x7c0		Click-To-Run	ati21	Medium	SystemProcessPool::WaitOnScenarioReset - Scenario is reset.	
02/19/2015 11:25:57.458	OFFICECL (0x768)	0x938		Click-To-Run	annty	Medium	ExecutionContext::QueueScenario - Set executing scenario to UPDATE	
02/19/2015 11:25:57.458	OFFICECL (0x768)	0x938		Click-To-Run	annuz	Medium	TaskFactory::TryLoadScenario - Start loading UPDATE scenario	
02/19/2015 11:25:57.461	OFFICECL (0x768)	0x938		Click-To-Run	annu0	Medium	TaskFactory::TryLoadScenario - Loading UPDATE scenario is successful	
02/19/2015 11:25:57.464	OFFICECL (0x768)	0x938		Click-To-Run	amcwz	Medium	TaskScenario::TryInitializeScenarioSettings - ScenarioInstanceId = 6130BB58-8B32-47F1-9D9E-0AFD31193E64	
02/19/2015 11:25:57.464	OFFICECL (0x768)	0x938		Click-To-Run	ama3g	Medium	ScenarioController::Initialize - requested display level: False	
02/19/2015 11:25:57.464	OFFICECL (0x768)	0x938		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 11:25:57.465	OFFICECL (0x768)	0x938		Click-To-Run	aoicd	Medium	ExecutionContext::QueueScenario - Successfully queue scenario UPDATE.	
02/19/2015 11:25:57.465	OFFICECL (0x768)	0x1b40		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} is being scheduled to run in this process	
02/19/2015 11:25:57.466	OFFICECL (0x768)	0x1b40		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 11:25:57.466	OFFICECL (0x768)	0x1b40		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.467	OFFICECL (0x768)	0x19c4		Click-To-Run Telemetry	amb0n	Medium	TaskUpdateDetection::ApplySettings: Beginning Update Scenario. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","TriggeringUI":"UNDEFINED","TaskCaller":"SCHEDULEDTASK","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","TargetVersion":"UNDEFINED","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","UpdatePathType":"DEFAULT"}	
02/19/2015 11:25:57.750	OFFICECL (0x768)	0x19c4		Click-To-Run	amecw	Medium	Descriptor::Load: Reading Available value from descriptor: 15.0.4693.1002	
02/19/2015 11:25:57.750	OFFICECL (0x768)	0x19c4		Click-To-Run	amecx	Medium	Descriptor::Load: Prereq Node exists. Being parsing it.	
02/19/2015 11:25:57.750	OFFICECL (0x768)	0x19c4		Click-To-Run	amecy	Medium	Descriptor::Load: Reading Bootstrapper value from descriptor: 15.0	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run	an8z1	Medium	CCS::IsUpdateNeeded: Older installed culture found: Culture "de-de" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run	an8z1	Medium	CCS::IsUpdateNeeded: Older installed culture found: Culture "x-none" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run Telemetry	amce9	Medium	TaskUpdateDetection::Execute: Detection results: {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","OldestPackageVersion":"15.0.4675.1003","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","AvailableBuildNumber":"15.0.4693.1002","PackageUpdateAvailable":"1","CurrentClientVersion":"15.0.4675.1000","RequiredClientVersion":"15.0.4446.1000"}	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run	aoh6t	Medium	TaskUpdateDetection::Execute: Package update available! Oldest installed version 15.0.4675.1003, Available version 15.0.4693.1002, required client version 15.0.4446.1000.	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run Telemetry	amchi	Medium	TaskUpdateDetection::Execute: Update detection task succeeded, update is throttled. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run Telemetry	aoh6v	Medium	TaskUpdateDetection::Execute: Update detection task succeeded. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","Duration":"736686","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0)	
02/19/2015 11:25:57.751	OFFICECL (0x768)	0x19c4		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {77176F9C-873B-4A7D-8051-EBEB52DDE8B0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.752	OFFICECL (0x768)	0x19c4		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{57173191-24E0-42E1-96F4-914AF8CFD1D5}}, queue for execution.	
02/19/2015 11:25:57.752	OFFICECL (0x768)	0x19c4		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 11:25:57.752	OFFICECL (0x768)	0x1634		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} is being scheduled to run in this process	
02/19/2015 11:25:57.752	OFFICECL (0x768)	0x1634		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 11:25:57.752	OFFICECL (0x768)	0x1634		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run	aoh66	Medium	Starting update download task.	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run Telemetry	amchk	Medium	TaskUpdateDownload::Execute: No version to download. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"57173191-24E0-42E1-96F4-914AF8CFD1D5","TaskType":"UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5}","Scenario":"UPDATE"}	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (57173191-24E0-42E1-96F4-914AF8CFD1D5) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (57173191-24E0-42E1-96F4-914AF8CFD1D5)	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {57173191-24E0-42E1-96F4-914AF8CFD1D5} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}}, queue for execution.	
02/19/2015 11:25:57.753	OFFICECL (0x768)	0x1390		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 11:25:57.754	OFFICECL (0x768)	0xd68		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} is being scheduled to run in this process	
02/19/2015 11:25:57.754	OFFICECL (0x768)	0xd68		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 11:25:57.754	OFFICECL (0x768)	0xd68		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.755	OFFICECL (0x768)	0x338		Click-To-Run Telemetry	apmsl	Medium	TaskUpdateApply::Execute: No action needed. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"AA63EED2-70B9-4E21-952C-9CFB09EC37C0","TaskType":"UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}","Scenario":"UPDATE"}	
02/19/2015 11:25:57.755	OFFICECL (0x768)	0x338		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 11:25:57.755	OFFICECL (0x768)	0x338		Click-To-Run	apm4b	Medium	Task::DoHandleWorkerCompleteEvent - Setting Task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0) Task State to (TASKSTATE_COMPLETED)	
02/19/2015 11:25:57.755	OFFICECL (0x768)	0x338		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 11:25:57.755	OFFICECL (0x768)	0x338		Click-To-Run	apm4d	Medium	Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0)	
02/19/2015 11:25:57.755	OFFICECL (0x768)	0x338		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AA63EED2-70B9-4E21-952C-9CFB09EC37C0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.755	OFFICECL (0x768)	0x338		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{D1506E3F-4B2A-41D3-913B-FA3E889CE20D}}, queue for execution.	
02/19/2015 11:25:57.755	OFFICECL (0x768)	0x338		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 11:25:57.756	OFFICECL (0x768)	0x1a04		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} is being scheduled to run in this process	
02/19/2015 11:25:57.756	OFFICECL (0x768)	0x1a04		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 11:25:57.756	OFFICECL (0x768)	0x1a04		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.756	OFFICECL (0x768)	0x1744		Click-To-Run	ap5l5	Medium	TaskBranch::DoExecute - No condition value has been set.	
02/19/2015 11:25:57.756	OFFICECL (0x768)	0x1744		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 11:25:57.756	OFFICECL (0x768)	0x1744		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 11:25:57.756	OFFICECL (0x768)	0x1744		Click-To-Run	aozsm	Medium	TaskBranch::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} success event is handled by task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D}	
02/19/2015 11:25:57.756	OFFICECL (0x768)	0x1744		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.757	OFFICECL (0x768)	0x1744		Click-To-Run	annu9	Medium	TaskGroup::HandleTaskStateCompleted - Found task {{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}}, queue for execution.	
02/19/2015 11:25:57.757	OFFICECL (0x768)	0x1744		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process	
02/19/2015 11:25:57.757	OFFICECL (0x768)	0xf5c		Click-To-Run	annua	Medium	ProcessPool::QueueTaskItem - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} is being scheduled to run in this process	
02/19/2015 11:25:57.758	OFFICECL (0x768)	0xf5c		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.	
02/19/2015 11:25:57.758	OFFICECL (0x768)	0xf5c		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.758	OFFICECL (0x768)	0x4ec		Click-To-Run	ap5l5	Medium	TaskBranch::DoExecute - No condition value has been set.	
02/19/2015 11:25:57.758	OFFICECL (0x768)	0x4ec		Click-To-Run	apkpk	Monitorable	ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event	
02/19/2015 11:25:57.758	OFFICECL (0x768)	0x4ec		Click-To-Run	annvj	Medium	Worker::TaskExecutionThreadProc - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} completed with TaskState TASKSTATE_COMPLETED.	
02/19/2015 11:25:57.758	OFFICECL (0x768)	0x4ec		Click-To-Run	aozsm	Medium	TaskBranch::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} success event is handled by task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}	
02/19/2015 11:25:57.758	OFFICECL (0x768)	0x4ec		Click-To-Run	annu6	Medium	TaskGroup::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}	
02/19/2015 11:25:57.759	OFFICECL (0x768)	0x4ec		Click-To-Run	apm4o	Medium	TaskGroup::Finalize - Finalizing task AC2F0D89-6518-48E9-A0D9-EF039C456034.	
02/19/2015 11:25:57.759	OFFICECL (0x768)	0x4ec		Click-To-Run	annt0	Medium	ExecutionContext::ResetExecutingScenario - Reset executing scenario	
02/19/2015 11:25:57.759	OFFICECL (0x768)	0x7c0		Click-To-Run	ati21	Medium	SystemProcessPool::WaitOnScenarioReset - Scenario is reset.
         
Datei heißt (erstellt um 10:13 Uhr, also kurz nach dem log eins drüber):
MpSigStub
Inhalt:
Code:
ATTFilter
----------------------------------------------------------------------------------
Command:    MpSigStub.exe /program q:\47cb40c8953bed595ba0692745a2ba62\MpMiniSigStub.exe  WD /q
Start time: 19.02.2015 10:13 (version 11.1.4958.0)

=================================== ProductSearch ==================================

Failed to get MpTriggerErrorHeartbeatReport address for product WD (Win7). (error 0x8007007f).
             Microsoft Windows Defender (Windows 7):
     Status: Active                                 
    Product: 6.1.7601.18170                         
     Engine: 1.1.11400.0                            
 Signatures: 1.193.42.0                             

================================ PackageDiscovery ================================

Package files discovered:
q:\47cb40c8953bed595ba0692745a2ba62\1.193.42.0_to_1.193.217.0_mpasdlta.vdm._p (?.?.?.?)

               AS BDD:     
       Engine: Not included
  AS base VDM: Not included
  AV base VDM: Not included
 AS delta VDM: 1.193.217.0 
 AV delta VDM: Not included

================================ PatchApplication ================================

Patched mpasdlta.vdm to 1.193.217.0

================================= MpUpdateEngine =================================

Package files for the engine update:
q:\47cb40c8953bed595ba0692745a2ba62\1.193.42.0_to_1.193.217.0_mpasdlta.vdm._p (?.?.?.?)
q:\47cb40c8953bed595ba0692745a2ba62\mpasdlta.vdm (1.193.217.0)

Updated from q:\47cb40c8953bed595ba0692745a2ba62 (0x0)

================================= ValidateUpdate =================================

MpSigStub successfully updated Microsoft Windows Defender (Windows 7) using the AS BDD package.

               Original:   Updated to:
 AS delta VDM: 1.193.42.0  1.193.217.0

Set DeltaUpdateFailure to 0
Set BddUpdateFailure to 0
Deleted q:\47cb40c8953bed595ba0692745a2ba62\1.193.42.0_to_1.193.217.0_mpasdlta.vdm._p
Deleted q:\47cb40c8953bed595ba0692745a2ba62\mpasdlta.vdm
End time: 19.02.2015 10:13
----------------------------------------------------------------------------------
         
Datei heißt (erstell um 10:10 Uhr):
officeclicktorun.exe_c2ruidll(20150219101055768)
Inhalt:
Keiner

Datei heißt (erstellt um 10:10 Uhr):
officeclicktorun.exe_streamserver(20150219101055768)
Inhalt:
Keiner

Das sind jetzt alle .log Dateien die heute erstellt wurden seid mein Rechner an ist. (Habe gestern Windows Temp vollständig geleert).
Außerdem ist noch eine Datei: fwtsqmfile00.sqm im Ordner, wenn ich sie im Editor öffne wird mir aber nur Kryptik angezeigt.

Vielen Dank schonmal für die Hilfe!

Alt 19.02.2015, 14:13   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Logfiles unbekannter Herkunft in Windows/Temp - Standard

Logfiles unbekannter Herkunft in Windows/Temp



hi,

Sieht nach WIndows Update/Microsoft Update aus.
__________________

__________________

Alt 19.02.2015, 14:37   #3
zufällig
 
Logfiles unbekannter Herkunft in Windows/Temp - Standard

Logfiles unbekannter Herkunft in Windows/Temp



Ist doch aber nicht normal, dass es mir meinen Temp Ordner zuspammt oder?!
__________________

Alt 19.02.2015, 19:32   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Logfiles unbekannter Herkunft in Windows/Temp - Standard

Logfiles unbekannter Herkunft in Windows/Temp



Naja, zuspammen. Wieviele Logs sind es? Und wie groß sind die?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 19.02.2015, 20:18   #5
zufällig
 
Logfiles unbekannter Herkunft in Windows/Temp - Standard

Logfiles unbekannter Herkunft in Windows/Temp



Zwischen 3 und 150kb pro log.
Heute waren es bisher 19, gestern waren es 15, vorgestern waren es 17.

Als ich "frisch" in Temp geschaut habe, waren es 4000 irgendwas.

Ich glaube nach jedem Neustart/Start fängt er wieder an mit den Logs.
Tante Google hat leider bisher wenig ausgespuckt darüber, genau deswegen stört es mich ja. Umso mehr, wenn es nur ein Microsoft update Ding ist, dann müsste es ja (relativ) oft vorkommen und auch einfacher zu finden sein.

Kann man nicht anhand der Datei herausfinden wer sie erstellt hat?
Oder eine "Ordnerüberwachung" was Dateien reinschreibt?


Alt 20.02.2015, 10:33   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Logfiles unbekannter Herkunft in Windows/Temp - Standard

Logfiles unbekannter Herkunft in Windows/Temp



Du kannst sie löschen, und dann mit procmon schauen wer sie wann warum erstellt.
__________________
--> Logfiles unbekannter Herkunft in Windows/Temp

Antwort

Themen zu Logfiles unbekannter Herkunft in Windows/Temp
anzahl, c:\windows, code, dateien, defender, dinger, erstellt, failed, files, found, gen, hilfe!, logfiles, manager, microsoft, ordner, rechner, relativ, start, temp, this, unbekannter, win7, windows, windows 7




Ähnliche Themen: Logfiles unbekannter Herkunft in Windows/Temp


  1. TR/Agent.7375 in C:\Users\HerrTest\AppData\Local\Temp\nscA085.tmp\temp\5FT.zip
    Log-Analyse und Auswertung - 18.10.2015 (13)
  2. PC langsam, Herkunft unbekannt HEUR/APC (Cloud), Windows 7
    Log-Analyse und Auswertung - 29.08.2015 (25)
  3. Windows 8.1, Fund durch Avast: Win32:Evo-gen in C:\Windows\Temp
    Log-Analyse und Auswertung - 09.08.2015 (5)
  4. windows 7: staendig unbekannter datendownload
    Log-Analyse und Auswertung - 30.11.2014 (13)
  5. Windows 7, Verlagerung der Windows Temp nach Laufwerk D:, kann neue Benutzer nur als Administratoren anlegen
    Alles rund um Windows - 31.05.2014 (6)
  6. startfenster.com auf relativ frischem System - Herkunft unbekannt
    Plagegeister aller Art und deren Bekämpfung - 10.10.2012 (2)
  7. TrojWare.Win32.Buzus.carj in C:\Windows\Temp\HInfo.exe bzw. C:\Windows\Temp\restart.exe
    Plagegeister aller Art und deren Bekämpfung - 27.09.2012 (2)
  8. Avira findet TR/EyeStye.N.1213 unter C:\User\***\AppData\Local\Temp\203.temp
    Log-Analyse und Auswertung - 31.10.2011 (5)
  9. Immer wieder PopUps unbekannter Herkunft
    Plagegeister aller Art und deren Bekämpfung - 02.08.2011 (1)
  10. Problem unbekannter Herkunft Flash/Svchost
    Plagegeister aller Art und deren Bekämpfung - 07.05.2011 (5)
  11. Richtiger Umgang mit USB/Flash-Medien unbekannter Herkunft
    Plagegeister aller Art und deren Bekämpfung - 15.06.2010 (5)
  12. Trojaner TR/Crypt.ZPACK.gen in C:/WINDOWS/TEMP/xxxx.temp/svchost.exe
    Plagegeister aller Art und deren Bekämpfung - 30.04.2010 (33)
  13. JAVA/Dldr.Agent.L C:\windows\Temp\~77E1.temp
    Plagegeister aller Art und deren Bekämpfung - 05.01.2010 (2)
  14. Datei-Herkunft ermitteln
    Alles rund um Windows - 20.02.2009 (3)
  15. mx_**.temp dateien in windows/temp ordner?
    Plagegeister aller Art und deren Bekämpfung - 27.06.2007 (1)

Zum Thema Logfiles unbekannter Herkunft in Windows/Temp - Hallo Ihr! Wollte meinen Rechner wieder bisschen aufräumen und bin dabei über eine erhebliche Anzahl von .log Dateien im Ordner C:\Windows\Temp\ gestoßen. Eventuell wisst ihr ja woher die Dinger kommen - Logfiles unbekannter Herkunft in Windows/Temp...
Archiv
Du betrachtest: Logfiles unbekannter Herkunft in Windows/Temp auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.