Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Logfiles unbekannter Herkunft in Windows/Temp (https://www.trojaner-board.de/164189-logfiles-unbekannter-herkunft-windows-temp.html)

zufällig 19.02.2015 13:37

Logfiles unbekannter Herkunft in Windows/Temp
 
Hallo Ihr!

Wollte meinen Rechner wieder bisschen aufräumen und bin dabei über eine erhebliche Anzahl von .log Dateien im Ordner C:\Windows\Temp\ gestoßen.

Eventuell wisst ihr ja woher die Dinger kommen und alles in Ordnung ist, oder ob ich mir einen Plagegeist eingefangen habe.

Anhander der Zeitstempel könnt ihr sehen, dass sie relativ regelmäßig angefertigt werden.
Datei heißt:
KURZI-PC-20150219-1125
Inhalt:
Code:

Timestamp        Process        TID        Area        Category        EventID        Level        Message        Correlation
02/19/2015 11:25:57.456        OFFICEC2 (0x510)        0xb90                Click-To-Run Telemetry        aqkhc        Medium        {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","ExeVer":"15.0.4673.1000","SecuritySessionId":"0","ModulePath":"C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe","CommandLine":"/update SCHEDULEDTASK displaylevel=False","Bitness":"64","IntegrityLevel":"0x4000"}       
02/19/2015 11:25:57.457        OFFICEC2 (0x510)        0xb90                Click-To-Run Telemetry        aqkhe        Medium        {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","OSVersion":"6.1","SP":"1","ProductType":"1","ProcessorArch":"9","Locale":"1031"}       
02/19/2015 11:25:57.465        OFFICEC2 (0x510)        0xb90                Click-To-Run Telemetry        amebh        Medium        ClientExe complete. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","Action":"1","Result":"0"}       
02/19/2015 11:25:57.465        OFFICEC2 (0x510)        0xb90                Logging Liblet        aqc99        Medium        Logging liblet uninitializing.

Datei heißt:
KURZI-PC-20150219-1055
Inhalt:
Code:

Timestamp        Process        TID        Area        Category        EventID        Level        Message        Correlation
02/19/2015 10:55:57.453        OFFICEC2 (0x1554)        0x310                Click-To-Run Telemetry        aqkhc        Medium        {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","ExeVer":"15.0.4673.1000","SecuritySessionId":"0","ModulePath":"C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe","CommandLine":"/update SCHEDULEDTASK displaylevel=False","Bitness":"64","IntegrityLevel":"0x4000"}       
02/19/2015 10:55:57.454        OFFICEC2 (0x1554)        0x310                Click-To-Run Telemetry        aqkhe        Medium        {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","OSVersion":"6.1","SP":"1","ProductType":"1","ProcessorArch":"9","Locale":"1031"}       
02/19/2015 10:55:57.460        OFFICEC2 (0x1554)        0x310                Click-To-Run Telemetry        amebh        Medium        ClientExe complete. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","Action":"1","Result":"0"}       
02/19/2015 10:55:57.460        OFFICEC2 (0x1554)        0x310                Logging Liblet        aqc99        Medium        Logging liblet uninitializing.

Datei heißt:
KURZI-PC-20150219-1025
Inhalt:
Code:

Timestamp        Process        TID        Area        Category        EventID        Level        Message        Correlation
02/19/2015 10:25:57.460        OFFICEC2 (0x44c)        0x18b4                Click-To-Run Telemetry        aqkhc        Medium        {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","ExeVer":"15.0.4673.1000","SecuritySessionId":"0","ModulePath":"C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe","CommandLine":"/update SCHEDULEDTASK displaylevel=False","Bitness":"64","IntegrityLevel":"0x4000"}       
02/19/2015 10:25:57.469        OFFICEC2 (0x44c)        0x18b4                Click-To-Run Telemetry        aqkhe        Medium        {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","OSVersion":"6.1","SP":"1","ProductType":"1","ProcessorArch":"9","Locale":"1031"}       
02/19/2015 10:25:57.476        OFFICEC2 (0x44c)        0x18b4                Click-To-Run Telemetry        amebh        Medium        ClientExe complete. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","Action":"1","Result":"0"}       
02/19/2015 10:25:57.477        OFFICEC2 (0x44c)        0x18b4                Logging Liblet        aqc99        Medium        Logging liblet uninitializing.

Datei heißt:
KURZI-PC-20150219-1010
Inhalt:
Code:

Timestamp        Process        TID        Area        Category        EventID        Level        Message        Correlation
02/19/2015 10:10:55.613        OFFICECL (0x768)        0x76c                Click-To-Run Telemetry        aqkhc        Medium        {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","ExeVer":"15.0.4675.1000","SecuritySessionId":"0","ModulePath":"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe","CommandLine":"/service","Bitness":"64","IntegrityLevel":"0x4000"}       
02/19/2015 10:10:55.613        OFFICECL (0x768)        0x76c                Click-To-Run Telemetry        aqkhe        Medium        {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"0.0.0.0","OSVersion":"6.1","SP":"1","ProductType":"1","ProcessorArch":"9","Locale":"1031"}       
02/19/2015 10:10:55.613        OFFICECL (0x768)        0x784                Click-To-Run        annt7        Medium        ProcessPool::Initialize - Initializing Main Process Pool       
02/19/2015 10:10:55.613        OFFICECL (0x768)        0x784                Click-To-Run        annuf        Medium        SystemProcessPool::DoInitialize - Initializing System Process Pool       
02/19/2015 10:10:55.613        OFFICECL (0x768)        0x784                Click-To-Run        anntv        Medium        ConfigurationManager::Initialize - Initializing ConfigurationManager       
02/19/2015 10:10:55.613        OFFICECL (0x768)        0x784                Click-To-Run Telemetry        amebi        Medium        ConfigurationManager::Initialize - {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003"}       
02/19/2015 10:10:55.613        OFFICECL (0x768)        0x784                Click-To-Run        amdl6        Medium        CCS::InitConfigSafe: Successfully init config. Nothing to repair       
02/19/2015 10:10:55.613        OFFICECL (0x768)        0x784                Click-To-Run        annt4        Medium        Pipeline::Initialize - Initializing pipeline with PipelineServerName: "ClickToRun_Pipeline" and InstallationPath: "C:\Program Files\Microsoft Office 15"       
02/19/2015 10:10:55.633        OFFICECL (0x768)        0x784                Click-To-Run        annt1        Medium        Orchestration::Initialize - Initializing Orchestration       
02/19/2015 10:10:55.713        OFFICECL (0x768)        0x784                Click-To-Run        annto        Medium        ApiServer::Initialize - Initializing ApiServer for endpoint: C2RClientAPI_Server_System       
02/19/2015 10:25:57.470        OFFICECL (0x768)        0xd4c                Click-To-Run        annty        Medium        ExecutionContext::QueueScenario - Set executing scenario to UPDATE       
02/19/2015 10:25:57.470        OFFICECL (0x768)        0xd4c                Click-To-Run        annuz        Medium        TaskFactory::TryLoadScenario - Start loading UPDATE scenario       
02/19/2015 10:25:57.473        OFFICECL (0x768)        0xd4c                Click-To-Run        annu0        Medium        TaskFactory::TryLoadScenario - Loading UPDATE scenario is successful       
02/19/2015 10:25:57.475        OFFICECL (0x768)        0xd4c                Click-To-Run        amcwz        Medium        TaskScenario::TryInitializeScenarioSettings - ScenarioInstanceId = 899B1E37-3A10-4E5E-9581-1379211AF82F       
02/19/2015 10:25:57.476        OFFICECL (0x768)        0xd4c                Click-To-Run        ama3g        Medium        ScenarioController::Initialize - requested display level: False       
02/19/2015 10:25:57.476        OFFICECL (0x768)        0xd4c                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:25:57.476        OFFICECL (0x768)        0xd4c                Click-To-Run        aoicd        Medium        ExecutionContext::QueueScenario - Successfully queue scenario UPDATE.       
02/19/2015 10:25:57.477        OFFICECL (0x768)        0xbb0                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} is being scheduled to run in this process       
02/19/2015 10:25:57.477        OFFICECL (0x768)        0xbb0                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:25:57.477        OFFICECL (0x768)        0xbb0                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.479        OFFICECL (0x768)        0xdfc                Click-To-Run Telemetry        amb0n        Medium        TaskUpdateDetection::ApplySettings: Beginning Update Scenario. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","TriggeringUI":"UNDEFINED","TaskCaller":"SCHEDULEDTASK","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","TargetVersion":"UNDEFINED","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","UpdatePathType":"DEFAULT"}       
02/19/2015 10:25:57.806        OFFICECL (0x768)        0xdfc                Click-To-Run        amecw        Medium        Descriptor::Load: Reading Available value from descriptor: 15.0.4693.1002       
02/19/2015 10:25:57.806        OFFICECL (0x768)        0xdfc                Click-To-Run        amecx        Medium        Descriptor::Load: Prereq Node exists. Being parsing it.       
02/19/2015 10:25:57.807        OFFICECL (0x768)        0xdfc                Click-To-Run        amecy        Medium        Descriptor::Load: Reading Bootstrapper value from descriptor: 15.0       
02/19/2015 10:25:57.807        OFFICECL (0x768)        0xdfc                Click-To-Run        an8z1        Medium        CCS::IsUpdateNeeded: Older installed culture found: Culture "de-de" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run        an8z1        Medium        CCS::IsUpdateNeeded: Older installed culture found: Culture "x-none" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run Telemetry        amce9        Medium        TaskUpdateDetection::Execute: Detection results: {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","OldestPackageVersion":"15.0.4675.1003","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","AvailableBuildNumber":"15.0.4693.1002","PackageUpdateAvailable":"1","CurrentClientVersion":"15.0.4675.1000","RequiredClientVersion":"15.0.4446.1000"}       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run        aoh6t        Medium        TaskUpdateDetection::Execute: Package update available! Oldest installed version 15.0.4675.1003, Available version 15.0.4693.1002, required client version 15.0.4446.1000.       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run Telemetry        amchi        Medium        TaskUpdateDetection::Execute: Update detection task succeeded, update is throttled. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run Telemetry        aoh6v        Medium        TaskUpdateDetection::Execute: Update detection task succeeded. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","Duration":"733086","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0)       
02/19/2015 10:25:57.808        OFFICECL (0x768)        0xdfc                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {77176F9C-873B-4A7D-8051-EBEB52DDE8B0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.809        OFFICECL (0x768)        0xdfc                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{57173191-24E0-42E1-96F4-914AF8CFD1D5}}, queue for execution.       
02/19/2015 10:25:57.809        OFFICECL (0x768)        0xdfc                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:25:57.809        OFFICECL (0x768)        0xcb0                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} is being scheduled to run in this process       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0xcb0                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0xcb0                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0x1768                Click-To-Run        aoh66        Medium        Starting update download task.       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0x1768                Click-To-Run Telemetry        amchk        Medium        TaskUpdateDownload::Execute: No version to download. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"57173191-24E0-42E1-96F4-914AF8CFD1D5","TaskType":"UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5}","Scenario":"UPDATE"}       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0x1768                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0x1768                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (57173191-24E0-42E1-96F4-914AF8CFD1D5) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0x1768                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0x1768                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (57173191-24E0-42E1-96F4-914AF8CFD1D5)       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0x1768                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {57173191-24E0-42E1-96F4-914AF8CFD1D5} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.810        OFFICECL (0x768)        0x1768                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}}, queue for execution.       
02/19/2015 10:25:57.811        OFFICECL (0x768)        0x1768                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:25:57.811        OFFICECL (0x768)        0x1780                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} is being scheduled to run in this process       
02/19/2015 10:25:57.811        OFFICECL (0x768)        0x1780                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:25:57.811        OFFICECL (0x768)        0x1780                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.812        OFFICECL (0x768)        0x1770                Click-To-Run Telemetry        apmsl        Medium        TaskUpdateApply::Execute: No action needed. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"899B1E37-3A10-4E5E-9581-1379211AF82F","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"AA63EED2-70B9-4E21-952C-9CFB09EC37C0","TaskType":"UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}","Scenario":"UPDATE"}       
02/19/2015 10:25:57.812        OFFICECL (0x768)        0x1770                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:25:57.812        OFFICECL (0x768)        0x1770                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 10:25:57.812        OFFICECL (0x768)        0x1770                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:25:57.812        OFFICECL (0x768)        0x1770                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0)       
02/19/2015 10:25:57.812        OFFICECL (0x768)        0x1770                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AA63EED2-70B9-4E21-952C-9CFB09EC37C0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.812        OFFICECL (0x768)        0x1770                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{D1506E3F-4B2A-41D3-913B-FA3E889CE20D}}, queue for execution.       
02/19/2015 10:25:57.812        OFFICECL (0x768)        0x1770                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:25:57.813        OFFICECL (0x768)        0x1774                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} is being scheduled to run in this process       
02/19/2015 10:25:57.813        OFFICECL (0x768)        0x1774                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:25:57.813        OFFICECL (0x768)        0x1774                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.813        OFFICECL (0x768)        0x1764                Click-To-Run        ap5l5        Medium        TaskBranch::DoExecute - No condition value has been set.       
02/19/2015 10:25:57.813        OFFICECL (0x768)        0x1764                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:25:57.813        OFFICECL (0x768)        0x1764                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:25:57.813        OFFICECL (0x768)        0x1764                Click-To-Run        aozsm        Medium        TaskBranch::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} success event is handled by task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D}       
02/19/2015 10:25:57.813        OFFICECL (0x768)        0x1764                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.814        OFFICECL (0x768)        0x1764                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}}, queue for execution.       
02/19/2015 10:25:57.814        OFFICECL (0x768)        0x1764                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:25:57.814        OFFICECL (0x768)        0x1650                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} is being scheduled to run in this process       
02/19/2015 10:25:57.815        OFFICECL (0x768)        0x1650                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:25:57.815        OFFICECL (0x768)        0x1650                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.815        OFFICECL (0x768)        0x1aa8                Click-To-Run        ap5l5        Medium        TaskBranch::DoExecute - No condition value has been set.       
02/19/2015 10:25:57.815        OFFICECL (0x768)        0x1aa8                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:25:57.815        OFFICECL (0x768)        0x1aa8                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:25:57.815        OFFICECL (0x768)        0x1aa8                Click-To-Run        aozsm        Medium        TaskBranch::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} success event is handled by task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}       
02/19/2015 10:25:57.815        OFFICECL (0x768)        0x1aa8                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:25:57.815        OFFICECL (0x768)        0x1aa8                Click-To-Run        apm4o        Medium        TaskGroup::Finalize - Finalizing task AC2F0D89-6518-48E9-A0D9-EF039C456034.       
02/19/2015 10:25:57.816        OFFICECL (0x768)        0x1aa8                Click-To-Run        annt0        Medium        ExecutionContext::ResetExecutingScenario - Reset executing scenario       
02/19/2015 10:25:57.816        OFFICECL (0x768)        0x7c0                Click-To-Run        ati21        Medium        SystemProcessPool::WaitOnScenarioReset - Scenario is reset.       
02/19/2015 10:55:57.455        OFFICECL (0x768)        0x1b3c                Click-To-Run        annty        Medium        ExecutionContext::QueueScenario - Set executing scenario to UPDATE       
02/19/2015 10:55:57.455        OFFICECL (0x768)        0x1b3c                Click-To-Run        annuz        Medium        TaskFactory::TryLoadScenario - Start loading UPDATE scenario       
02/19/2015 10:55:57.457        OFFICECL (0x768)        0x1b3c                Click-To-Run        annu0        Medium        TaskFactory::TryLoadScenario - Loading UPDATE scenario is successful       
02/19/2015 10:55:57.459        OFFICECL (0x768)        0x1b3c                Click-To-Run        amcwz        Medium        TaskScenario::TryInitializeScenarioSettings - ScenarioInstanceId = 32C22C34-71D4-437A-A165-C7A6AF638EE5       
02/19/2015 10:55:57.460        OFFICECL (0x768)        0x1b3c                Click-To-Run        ama3g        Medium        ScenarioController::Initialize - requested display level: False       
02/19/2015 10:55:57.460        OFFICECL (0x768)        0x1b3c                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:55:57.460        OFFICECL (0x768)        0x1b3c                Click-To-Run        aoicd        Medium        ExecutionContext::QueueScenario - Successfully queue scenario UPDATE.       
02/19/2015 10:55:57.461        OFFICECL (0x768)        0xf20                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} is being scheduled to run in this process       
02/19/2015 10:55:57.461        OFFICECL (0x768)        0xf20                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:55:57.461        OFFICECL (0x768)        0xf20                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.462        OFFICECL (0x768)        0x1764                Click-To-Run Telemetry        amb0n        Medium        TaskUpdateDetection::ApplySettings: Beginning Update Scenario. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","TriggeringUI":"UNDEFINED","TaskCaller":"SCHEDULEDTASK","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","TargetVersion":"UNDEFINED","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","UpdatePathType":"DEFAULT"}       
02/19/2015 10:55:57.741        OFFICECL (0x768)        0x1764                Click-To-Run        amecw        Medium        Descriptor::Load: Reading Available value from descriptor: 15.0.4693.1002       
02/19/2015 10:55:57.741        OFFICECL (0x768)        0x1764                Click-To-Run        amecx        Medium        Descriptor::Load: Prereq Node exists. Being parsing it.       
02/19/2015 10:55:57.741        OFFICECL (0x768)        0x1764                Click-To-Run        amecy        Medium        Descriptor::Load: Reading Bootstrapper value from descriptor: 15.0       
02/19/2015 10:55:57.742        OFFICECL (0x768)        0x1764                Click-To-Run        an8z1        Medium        CCS::IsUpdateNeeded: Older installed culture found: Culture "de-de" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!       
02/19/2015 10:55:57.742        OFFICECL (0x768)        0x1764                Click-To-Run        an8z1        Medium        CCS::IsUpdateNeeded: Older installed culture found: Culture "x-none" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run Telemetry        amce9        Medium        TaskUpdateDetection::Execute: Detection results: {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","OldestPackageVersion":"15.0.4675.1003","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","AvailableBuildNumber":"15.0.4693.1002","PackageUpdateAvailable":"1","CurrentClientVersion":"15.0.4675.1000","RequiredClientVersion":"15.0.4446.1000"}       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run        aoh6t        Medium        TaskUpdateDetection::Execute: Package update available! Oldest installed version 15.0.4675.1003, Available version 15.0.4693.1002, required client version 15.0.4446.1000.       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run Telemetry        amchi        Medium        TaskUpdateDetection::Execute: Update detection task succeeded, update is throttled. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run Telemetry        aoh6v        Medium        TaskUpdateDetection::Execute: Update detection task succeeded. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","Duration":"734886","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0)       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {77176F9C-873B-4A7D-8051-EBEB52DDE8B0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{57173191-24E0-42E1-96F4-914AF8CFD1D5}}, queue for execution.       
02/19/2015 10:55:57.743        OFFICECL (0x768)        0x1764                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:55:57.744        OFFICECL (0x768)        0x1338                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} is being scheduled to run in this process       
02/19/2015 10:55:57.744        OFFICECL (0x768)        0x1338                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:55:57.744        OFFICECL (0x768)        0x1338                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.744        OFFICECL (0x768)        0xccc                Click-To-Run        aoh66        Medium        Starting update download task.       
02/19/2015 10:55:57.745        OFFICECL (0x768)        0xccc                Click-To-Run Telemetry        amchk        Medium        TaskUpdateDownload::Execute: No version to download. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"57173191-24E0-42E1-96F4-914AF8CFD1D5","TaskType":"UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5}","Scenario":"UPDATE"}       
02/19/2015 10:55:57.745        OFFICECL (0x768)        0xccc                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:55:57.745        OFFICECL (0x768)        0xccc                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (57173191-24E0-42E1-96F4-914AF8CFD1D5) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 10:55:57.745        OFFICECL (0x768)        0xccc                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:55:57.745        OFFICECL (0x768)        0xccc                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (57173191-24E0-42E1-96F4-914AF8CFD1D5)       
02/19/2015 10:55:57.745        OFFICECL (0x768)        0xccc                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {57173191-24E0-42E1-96F4-914AF8CFD1D5} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.745        OFFICECL (0x768)        0xccc                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}}, queue for execution.       
02/19/2015 10:55:57.745        OFFICECL (0x768)        0xccc                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x5d8                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} is being scheduled to run in this process       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x5d8                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x5d8                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x610                Click-To-Run Telemetry        apmsl        Medium        TaskUpdateApply::Execute: No action needed. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"32C22C34-71D4-437A-A165-C7A6AF638EE5","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"AA63EED2-70B9-4E21-952C-9CFB09EC37C0","TaskType":"UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}","Scenario":"UPDATE"}       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x610                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x610                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x610                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x610                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0)       
02/19/2015 10:55:57.746        OFFICECL (0x768)        0x610                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AA63EED2-70B9-4E21-952C-9CFB09EC37C0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.747        OFFICECL (0x768)        0x610                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{D1506E3F-4B2A-41D3-913B-FA3E889CE20D}}, queue for execution.       
02/19/2015 10:55:57.747        OFFICECL (0x768)        0x610                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:55:57.747        OFFICECL (0x768)        0x9fc                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} is being scheduled to run in this process       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x9fc                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x9fc                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x1720                Click-To-Run        ap5l5        Medium        TaskBranch::DoExecute - No condition value has been set.       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x1720                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x1720                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x1720                Click-To-Run        aozsm        Medium        TaskBranch::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} success event is handled by task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D}       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x1720                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x1720                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}}, queue for execution.       
02/19/2015 10:55:57.748        OFFICECL (0x768)        0x1720                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 10:55:57.749        OFFICECL (0x768)        0x4cc                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} is being scheduled to run in this process       
02/19/2015 10:55:57.750        OFFICECL (0x768)        0x4cc                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 10:55:57.750        OFFICECL (0x768)        0x4cc                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.750        OFFICECL (0x768)        0x8f8                Click-To-Run        ap5l5        Medium        TaskBranch::DoExecute - No condition value has been set.       
02/19/2015 10:55:57.750        OFFICECL (0x768)        0x8f8                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 10:55:57.750        OFFICECL (0x768)        0x8f8                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 10:55:57.750        OFFICECL (0x768)        0x8f8                Click-To-Run        aozsm        Medium        TaskBranch::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} success event is handled by task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}       
02/19/2015 10:55:57.750        OFFICECL (0x768)        0x8f8                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 10:55:57.750        OFFICECL (0x768)        0x8f8                Click-To-Run        apm4o        Medium        TaskGroup::Finalize - Finalizing task AC2F0D89-6518-48E9-A0D9-EF039C456034.       
02/19/2015 10:55:57.751        OFFICECL (0x768)        0x8f8                Click-To-Run        annt0        Medium        ExecutionContext::ResetExecutingScenario - Reset executing scenario       
02/19/2015 10:55:57.751        OFFICECL (0x768)        0x7c0                Click-To-Run        ati21        Medium        SystemProcessPool::WaitOnScenarioReset - Scenario is reset.       
02/19/2015 11:25:57.458        OFFICECL (0x768)        0x938                Click-To-Run        annty        Medium        ExecutionContext::QueueScenario - Set executing scenario to UPDATE       
02/19/2015 11:25:57.458        OFFICECL (0x768)        0x938                Click-To-Run        annuz        Medium        TaskFactory::TryLoadScenario - Start loading UPDATE scenario       
02/19/2015 11:25:57.461        OFFICECL (0x768)        0x938                Click-To-Run        annu0        Medium        TaskFactory::TryLoadScenario - Loading UPDATE scenario is successful       
02/19/2015 11:25:57.464        OFFICECL (0x768)        0x938                Click-To-Run        amcwz        Medium        TaskScenario::TryInitializeScenarioSettings - ScenarioInstanceId = 6130BB58-8B32-47F1-9D9E-0AFD31193E64       
02/19/2015 11:25:57.464        OFFICECL (0x768)        0x938                Click-To-Run        ama3g        Medium        ScenarioController::Initialize - requested display level: False       
02/19/2015 11:25:57.464        OFFICECL (0x768)        0x938                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 11:25:57.465        OFFICECL (0x768)        0x938                Click-To-Run        aoicd        Medium        ExecutionContext::QueueScenario - Successfully queue scenario UPDATE.       
02/19/2015 11:25:57.465        OFFICECL (0x768)        0x1b40                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} is being scheduled to run in this process       
02/19/2015 11:25:57.466        OFFICECL (0x768)        0x1b40                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 11:25:57.466        OFFICECL (0x768)        0x1b40                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.467        OFFICECL (0x768)        0x19c4                Click-To-Run Telemetry        amb0n        Medium        TaskUpdateDetection::ApplySettings: Beginning Update Scenario. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","TriggeringUI":"UNDEFINED","TaskCaller":"SCHEDULEDTASK","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","TargetVersion":"UNDEFINED","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","UpdatePathType":"DEFAULT"}       
02/19/2015 11:25:57.750        OFFICECL (0x768)        0x19c4                Click-To-Run        amecw        Medium        Descriptor::Load: Reading Available value from descriptor: 15.0.4693.1002       
02/19/2015 11:25:57.750        OFFICECL (0x768)        0x19c4                Click-To-Run        amecx        Medium        Descriptor::Load: Prereq Node exists. Being parsing it.       
02/19/2015 11:25:57.750        OFFICECL (0x768)        0x19c4                Click-To-Run        amecy        Medium        Descriptor::Load: Reading Bootstrapper value from descriptor: 15.0       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run        an8z1        Medium        CCS::IsUpdateNeeded: Older installed culture found: Culture "de-de" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run        an8z1        Medium        CCS::IsUpdateNeeded: Older installed culture found: Culture "x-none" has version 15.0.4675.1003 while available version is 15.0.4693.1002. Update available!       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run Telemetry        amce9        Medium        TaskUpdateDetection::Execute: Detection results: {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskState":"TASKSTATE_EXECUTING","OldestPackageVersion":"15.0.4675.1003","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE","AvailableBuildNumber":"15.0.4693.1002","PackageUpdateAvailable":"1","CurrentClientVersion":"15.0.4675.1000","RequiredClientVersion":"15.0.4446.1000"}       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run        aoh6t        Medium        TaskUpdateDetection::Execute: Package update available! Oldest installed version 15.0.4675.1003, Available version 15.0.4693.1002, required client version 15.0.4446.1000.       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run Telemetry        amchi        Medium        TaskUpdateDetection::Execute: Update detection task succeeded, update is throttled. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run Telemetry        aoh6v        Medium        TaskUpdateDetection::Execute: Update detection task succeeded. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","Duration":"736686","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"77176F9C-873B-4A7D-8051-EBEB52DDE8B0","TaskType":"UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0}","Scenario":"UPDATE"}       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEDETECTION:{77176F9C-873B-4A7D-8051-EBEB52DDE8B0} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (77176F9C-873B-4A7D-8051-EBEB52DDE8B0)       
02/19/2015 11:25:57.751        OFFICECL (0x768)        0x19c4                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {77176F9C-873B-4A7D-8051-EBEB52DDE8B0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.752        OFFICECL (0x768)        0x19c4                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{57173191-24E0-42E1-96F4-914AF8CFD1D5}}, queue for execution.       
02/19/2015 11:25:57.752        OFFICECL (0x768)        0x19c4                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 11:25:57.752        OFFICECL (0x768)        0x1634                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} is being scheduled to run in this process       
02/19/2015 11:25:57.752        OFFICECL (0x768)        0x1634                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 11:25:57.752        OFFICECL (0x768)        0x1634                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run        aoh66        Medium        Starting update download task.       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run Telemetry        amchk        Medium        TaskUpdateDownload::Execute: No version to download. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"57173191-24E0-42E1-96F4-914AF8CFD1D5","TaskType":"UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5}","Scenario":"UPDATE"}       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEDOWNLOAD:{57173191-24E0-42E1-96F4-914AF8CFD1D5} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (57173191-24E0-42E1-96F4-914AF8CFD1D5) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (57173191-24E0-42E1-96F4-914AF8CFD1D5)       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {57173191-24E0-42E1-96F4-914AF8CFD1D5} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}}, queue for execution.       
02/19/2015 11:25:57.753        OFFICECL (0x768)        0x1390                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 11:25:57.754        OFFICECL (0x768)        0xd68                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} is being scheduled to run in this process       
02/19/2015 11:25:57.754        OFFICECL (0x768)        0xd68                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 11:25:57.754        OFFICECL (0x768)        0xd68                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.755        OFFICECL (0x768)        0x338                Click-To-Run Telemetry        apmsl        Medium        TaskUpdateApply::Execute: No action needed. {"MachineID":"6612c6386f12e74da0a63de160e08642","SessionID":"0aff90aa-ad8c-4d05-96ac-1cbd4126e484","GeoID":"94","Ver":"15.0.4675.1003","ScenarioInstanceId":"6130BB58-8B32-47F1-9D9E-0AFD31193E64","InstallID":"0E8E44C0-F1AF-4CE0-A75A-8052F27D682A","TaskState":"TASKSTATE_EXECUTING","TaskId":"AA63EED2-70B9-4E21-952C-9CFB09EC37C0","TaskType":"UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0}","Scenario":"UPDATE"}       
02/19/2015 11:25:57.755        OFFICECL (0x768)        0x338                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task UPDATEAPPLY:{AA63EED2-70B9-4E21-952C-9CFB09EC37C0} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 11:25:57.755        OFFICECL (0x768)        0x338                Click-To-Run        apm4b        Medium        Task::DoHandleWorkerCompleteEvent - Setting Task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0) Task State to (TASKSTATE_COMPLETED)       
02/19/2015 11:25:57.755        OFFICECL (0x768)        0x338                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 11:25:57.755        OFFICECL (0x768)        0x338                Click-To-Run        apm4d        Medium        Task::HandleTaskStateCompleted - Handling TaskState (TASKSTATE_COMPLETED) for task (AA63EED2-70B9-4E21-952C-9CFB09EC37C0)       
02/19/2015 11:25:57.755        OFFICECL (0x768)        0x338                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AA63EED2-70B9-4E21-952C-9CFB09EC37C0} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.755        OFFICECL (0x768)        0x338                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{D1506E3F-4B2A-41D3-913B-FA3E889CE20D}}, queue for execution.       
02/19/2015 11:25:57.755        OFFICECL (0x768)        0x338                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 11:25:57.756        OFFICECL (0x768)        0x1a04                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} is being scheduled to run in this process       
02/19/2015 11:25:57.756        OFFICECL (0x768)        0x1a04                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 11:25:57.756        OFFICECL (0x768)        0x1a04                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.756        OFFICECL (0x768)        0x1744                Click-To-Run        ap5l5        Medium        TaskBranch::DoExecute - No condition value has been set.       
02/19/2015 11:25:57.756        OFFICECL (0x768)        0x1744                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 11:25:57.756        OFFICECL (0x768)        0x1744                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task BRANCH:{D1506E3F-4B2A-41D3-913B-FA3E889CE20D} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 11:25:57.756        OFFICECL (0x768)        0x1744                Click-To-Run        aozsm        Medium        TaskBranch::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} success event is handled by task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D}       
02/19/2015 11:25:57.756        OFFICECL (0x768)        0x1744                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {D1506E3F-4B2A-41D3-913B-FA3E889CE20D} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.757        OFFICECL (0x768)        0x1744                Click-To-Run        annu9        Medium        TaskGroup::HandleTaskStateCompleted - Found task {{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}}, queue for execution.       
02/19/2015 11:25:57.757        OFFICECL (0x768)        0x1744                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} is being scheduled to run in this process       
02/19/2015 11:25:57.757        OFFICECL (0x768)        0xf5c                Click-To-Run        annua        Medium        ProcessPool::QueueTaskItem - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} is being scheduled to run in this process       
02/19/2015 11:25:57.758        OFFICECL (0x768)        0xf5c                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task SCENARIO:{AC2F0D89-6518-48E9-A0D9-EF039C456034} completed with TaskState TASKSTATE_EXECUTING.       
02/19/2015 11:25:57.758        OFFICECL (0x768)        0xf5c                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {AC2F0D89-6518-48E9-A0D9-EF039C456034} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.758        OFFICECL (0x768)        0x4ec                Click-To-Run        ap5l5        Medium        TaskBranch::DoExecute - No condition value has been set.       
02/19/2015 11:25:57.758        OFFICECL (0x768)        0x4ec                Click-To-Run        apkpk        Monitorable        ScenarioController::CheckProcessPool - Failed to get/create ui process pool, and we are not the ui handler. Cannot process event       
02/19/2015 11:25:57.758        OFFICECL (0x768)        0x4ec                Click-To-Run        annvj        Medium        Worker::TaskExecutionThreadProc - Task BRANCH:{DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} completed with TaskState TASKSTATE_COMPLETED.       
02/19/2015 11:25:57.758        OFFICECL (0x768)        0x4ec                Click-To-Run        aozsm        Medium        TaskBranch::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} success event is handled by task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79}       
02/19/2015 11:25:57.758        OFFICECL (0x768)        0x4ec                Click-To-Run        annu6        Medium        TaskGroup::DoHandleWorkerCompleteEvent - Task {DAFEBB5A-6C48-4AE3-91E6-81841AB52C79} complete event is handled by task {AC2F0D89-6518-48E9-A0D9-EF039C456034}       
02/19/2015 11:25:57.759        OFFICECL (0x768)        0x4ec                Click-To-Run        apm4o        Medium        TaskGroup::Finalize - Finalizing task AC2F0D89-6518-48E9-A0D9-EF039C456034.       
02/19/2015 11:25:57.759        OFFICECL (0x768)        0x4ec                Click-To-Run        annt0        Medium        ExecutionContext::ResetExecutingScenario - Reset executing scenario       
02/19/2015 11:25:57.759        OFFICECL (0x768)        0x7c0                Click-To-Run        ati21        Medium        SystemProcessPool::WaitOnScenarioReset - Scenario is reset.

Datei heißt (erstellt um 10:13 Uhr, also kurz nach dem log eins drüber):
MpSigStub
Inhalt:
Code:

----------------------------------------------------------------------------------
Command:    MpSigStub.exe /program q:\47cb40c8953bed595ba0692745a2ba62\MpMiniSigStub.exe  WD /q
Start time: 19.02.2015 10:13 (version 11.1.4958.0)

=================================== ProductSearch ==================================

Failed to get MpTriggerErrorHeartbeatReport address for product WD (Win7). (error 0x8007007f).
            Microsoft Windows Defender (Windows 7):
    Status: Active                               
    Product: 6.1.7601.18170                       
    Engine: 1.1.11400.0                           
 Signatures: 1.193.42.0                           

================================ PackageDiscovery ================================

Package files discovered:
q:\47cb40c8953bed595ba0692745a2ba62\1.193.42.0_to_1.193.217.0_mpasdlta.vdm._p (?.?.?.?)

              AS BDD:   
      Engine: Not included
  AS base VDM: Not included
  AV base VDM: Not included
 AS delta VDM: 1.193.217.0
 AV delta VDM: Not included

================================ PatchApplication ================================

Patched mpasdlta.vdm to 1.193.217.0

================================= MpUpdateEngine =================================

Package files for the engine update:
q:\47cb40c8953bed595ba0692745a2ba62\1.193.42.0_to_1.193.217.0_mpasdlta.vdm._p (?.?.?.?)
q:\47cb40c8953bed595ba0692745a2ba62\mpasdlta.vdm (1.193.217.0)

Updated from q:\47cb40c8953bed595ba0692745a2ba62 (0x0)

================================= ValidateUpdate =================================

MpSigStub successfully updated Microsoft Windows Defender (Windows 7) using the AS BDD package.

              Original:  Updated to:
 AS delta VDM: 1.193.42.0  1.193.217.0

Set DeltaUpdateFailure to 0
Set BddUpdateFailure to 0
Deleted q:\47cb40c8953bed595ba0692745a2ba62\1.193.42.0_to_1.193.217.0_mpasdlta.vdm._p
Deleted q:\47cb40c8953bed595ba0692745a2ba62\mpasdlta.vdm
End time: 19.02.2015 10:13
----------------------------------------------------------------------------------

Datei heißt (erstell um 10:10 Uhr):
officeclicktorun.exe_c2ruidll(20150219101055768)
Inhalt:
Keiner

Datei heißt (erstellt um 10:10 Uhr):
officeclicktorun.exe_streamserver(20150219101055768)
Inhalt:
Keiner

Das sind jetzt alle .log Dateien die heute erstellt wurden seid mein Rechner an ist. (Habe gestern Windows Temp vollständig geleert).
Außerdem ist noch eine Datei: fwtsqmfile00.sqm im Ordner, wenn ich sie im Editor öffne wird mir aber nur Kryptik angezeigt.

Vielen Dank schonmal für die Hilfe!

schrauber 19.02.2015 14:13

hi,

Sieht nach WIndows Update/Microsoft Update aus.

zufällig 19.02.2015 14:37

Ist doch aber nicht normal, dass es mir meinen Temp Ordner zuspammt oder?!

schrauber 19.02.2015 19:32

Naja, zuspammen. Wieviele Logs sind es? Und wie groß sind die?

zufällig 19.02.2015 20:18

Zwischen 3 und 150kb pro log.
Heute waren es bisher 19, gestern waren es 15, vorgestern waren es 17.

Als ich "frisch" in Temp geschaut habe, waren es 4000 irgendwas.

Ich glaube nach jedem Neustart/Start fängt er wieder an mit den Logs.
Tante Google hat leider bisher wenig ausgespuckt darüber, genau deswegen stört es mich ja. Umso mehr, wenn es nur ein Microsoft update Ding ist, dann müsste es ja (relativ) oft vorkommen und auch einfacher zu finden sein.

Kann man nicht anhand der Datei herausfinden wer sie erstellt hat?
Oder eine "Ordnerüberwachung" was Dateien reinschreibt?

schrauber 20.02.2015 10:33

Du kannst sie löschen, und dann mit procmon schauen wer sie wann warum erstellt.


Alle Zeitangaben in WEZ +1. Es ist jetzt 18:57 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131