VirtualBox

Ticket #10970: VBoxService.log

File VBoxService.log, 197.8 KB (added by maxchen, 12 years ago)
Line 
1VBoxService 4.1.22 r80657 (verbosity: 4) win.x86 (Sep 7 2012 18:01:00) release log
200:00:00.000 main Log opened 2012-09-21T11:52:54.073700800Z
300:00:00.000 main OS Product: Windows XP Professional
400:00:00.000 main OS Release: 5.1.2600
500:00:00.000 main Executable: C:\XP\system32\VBoxService.exe
600:00:00.000 main Process ID: 624
700:00:00.000 main Package type: WINDOWS_32BITS_GENERIC
800:00:00.000 main Guest Property: /VirtualBox/GuestAdd/VBoxService/--control-procs-max-kept not found
900:00:00.000 main Guest Property: /VirtualBox/GuestAdd/VBoxService/--timesync-interval not found
1000:00:00.000 main Guest Property: /VirtualBox/GuestAdd/VBoxService/--timesync-min-adjust not found
1100:00:00.000 main Guest Property: /VirtualBox/GuestAdd/VBoxService/--timesync-latency-factor not found
1200:00:00.000 main Guest Property: /VirtualBox/GuestAdd/VBoxService/--timesync-max-latency not found
1300:00:00.000 main Guest Property: /VirtualBox/GuestAdd/VBoxService/--timesync-set-threshold not found
1400:00:00.000 main Guest Property: /VirtualBox/GuestAdd/VBoxService/--timesync-set-start not found
1500:00:00.000 main Guest Property: /VirtualBox/GuestAdd/VBoxService/--timesync-set-on-restore not found
1600:00:00.000 main 4.1.22 r80657 started. Verbose level = 4
1700:00:00.000 main Starting service dispatcher ...
1800:00:00.000 Registering service control handler ...
1900:00:00.010 Service control handler registered.
2000:00:00.010 Setting VBoxService status to 30
2100:00:00.010 Initializing services ...
2200:00:00.010 Service client ID: 0x34
2300:00:00.010 VBoxServiceTimeSyncInit: Initially 100144 (100ns) units per 100144 (100 ns) units interval, disabled=1
2400:00:00.010 VMInfo: Property Service Client ID: 0x35
2500:00:00.010 VBoxServiceBalloonInit
2600:00:00.010 MemBalloon: New balloon size 0 MB (R0 memory)
2700:00:00.010 VBoxServiceVMStatsInit
2800:00:00.010 VBoxStatsInit: New statistics interval 0 seconds
2900:00:00.010 VBoxStatsInit: gCtx.pfnNtQuerySystemInformation = 7c90d910
3000:00:00.010 VBoxStatsInit: gCtx.GlobalMemoryStatusEx = 7c81f97a
3100:00:00.010 VBoxStatsInit: gCtx.pfnGetPerformanceInfo= 76bf3e41
3200:00:00.010 VBoxServicePageSharingInit
3300:00:00.010 Starting services ...
3400:00:00.010 Starting service 'control' ...
3500:00:00.010 control Waiting for host msg ...
3600:00:00.010 Starting service 'timesync' ...
3700:00:00.010 Starting service 'vminfo' ...
3800:00:00.010 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:52:35.788000000Z (MinAdjust: 200 ms)
3900:00:00.010 Starting service 'memballoon' ...
4000:00:00.010 vminfo Writing guest property "/VirtualBox/GuestInfo/OS/Product" = "Windows XP Professional"
4100:00:00.010 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:52:54.083715200Z => -18 295 715 200 ns drift
4200:00:00.010 timesync VBoxServiceTimeSyncAdjust: Drift=-18295ms
4300:00:00.010 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=100144, NewTA=90130, DiffNew=10014, DiffMax=50072
4400:00:00.010 Starting service 'vmstats' ...
4500:00:00.010 vminfo Writing guest property "/VirtualBox/GuestInfo/OS/Release" = "5.1.2600"
4600:00:00.010 vminfo Writing guest property "/VirtualBox/GuestInfo/OS/Version" = ""
4700:00:00.020 vminfo Writing guest property "/VirtualBox/GuestInfo/OS/ServicePack" = "3"
4800:00:00.020 Starting service 'pagesharing' ...
4900:00:00.020 vminfo Writing guest property "/VirtualBox/GuestAdd/Version" = "4.1.22"
5000:00:00.020 vminfo Writing guest property "/VirtualBox/GuestAdd/VersionExt" = "4.1.22"
5100:00:00.020 All services started.
5200:00:00.020 Setting service status to: 4
5300:00:00.020 vminfo Writing guest property "/VirtualBox/GuestAdd/Revision" = "80657"
5400:00:00.020 pagesharing VBoxServicePageSharingWorkerProcess: enabled=0
5500:00:00.020 vminfo Writing guest property "/VirtualBox/GuestAdd/InstallDir" = "C:/Program Files/Oracle/VirtualBox Guest Additions"
5600:00:00.030 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxControl.exe" = "4.1.22r80657"
5700:00:00.030 Setting VBoxService status to 50
5800:00:00.030 Waiting in main thread
5900:00:00.030 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxHook.dll" = "4.1.22r80657"
6000:00:00.030 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxDisp.dll" = "4.1.22r80657"
6100:00:00.030 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxMRXNP.dll" = "4.1.22r80657"
6200:00:00.030 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxService.exe" = "4.1.22r80657"
6300:00:00.030 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxTray.exe" = "4.1.22r80657"
6400:00:00.060 vminfo GetFileVersionInfoSize(C:\XP\system32/VBoxGINA.dll) -> 1812 / VERR_NO_DATA
6500:00:00.060 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxGINA.dll" = "-"
6600:00:00.070 vminfo GetFileVersionInfoSize(C:\XP\system32/VBoxCredProv.dll) -> 1812 / VERR_NO_DATA
6700:00:00.070 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxCredProv.dll" = "-"
6800:00:00.070 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxOGLarrayspu.dll" = "4.1.22r80657"
6900:00:00.070 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxOGLcrutil.dll" = "4.1.22r80657"
7000:00:00.080 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxOGLerrorspu.dll" = "4.1.22r80657"
7100:00:00.080 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxOGLpackspu.dll" = "4.1.22r80657"
7200:00:00.090 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxOGLpassthroughspu.dll" = "4.1.22r80657"
7300:00:00.090 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxOGLfeedbackspu.dll" = "4.1.22r80657"
7400:00:00.090 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxOGL.dll" = "4.1.22r80657"
7500:00:00.090 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxGuest.sys" = "4.1.22r80657"
7600:00:00.100 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxMouse.sys" = "4.1.22r80657"
7700:00:00.100 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxSF.sys" = "4.1.22r80657"
7800:00:00.100 vminfo Writing guest property "/VirtualBox/GuestAdd/Components/VBoxVideo.sys" = "4.1.22r80657"
7900:00:00.100 vminfo Found 2 sessions
8000:00:00.100 vminfo Handling session 0
8100:00:00.100 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
8200:00:00.110 vminfo Handling session 1
8300:00:00.110 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
8400:00:00.110 vminfo Found 0 unique logged-in user(s)
8500:00:00.110 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
8600:00:10.014 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:52:45.787000000Z (MinAdjust: 200 ms)
8700:00:10.014 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:03.087702200Z => -17 300 702 200 ns drift
8800:00:10.014 timesync VBoxServiceTimeSyncAdjust: Drift=-17300ms
8900:00:10.014 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=90130, NewTA=81117, DiffNew=9013, DiffMax=50072
9000:00:10.124 vminfo Found 5 sessions
9100:00:10.124 vminfo Handling session 0
9200:00:10.124 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
9300:00:10.124 vminfo Handling session 1
9400:00:10.124 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
9500:00:10.124 vminfo Handling session 2
9600:00:10.124 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
9700:00:10.124 vminfo Handling session 3
9800:00:10.124 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
9900:00:10.124 vminfo Handling session 4
10000:00:10.124 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
10100:00:10.124 vminfo Found 0 unique logged-in user(s)
10200:00:10.124 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
10300:00:20.019 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:52:55.792000000Z (MinAdjust: 200 ms)
10400:00:20.019 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:11.191290500Z => -15 399 290 500 ns drift
10500:00:20.019 timesync VBoxServiceTimeSyncAdjust: Drift=-15399ms
10600:00:20.019 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=81117, NewTA=73006, DiffNew=8111, DiffMax=50072
10700:00:20.129 vminfo Found 5 sessions
10800:00:20.129 vminfo Handling session 0
10900:00:20.129 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
11000:00:20.129 vminfo Handling session 1
11100:00:20.129 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
11200:00:20.129 vminfo Handling session 2
11300:00:20.129 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
11400:00:20.129 vminfo Handling session 3
11500:00:20.129 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
11600:00:20.129 vminfo Handling session 4
11700:00:20.129 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
11800:00:20.129 vminfo Found 0 unique logged-in user(s)
11900:00:20.129 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
12000:00:30.023 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:53:05.796000000Z (MinAdjust: 200 ms)
12100:00:30.023 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:18.484589900Z => -12 688 589 900 ns drift
12200:00:30.023 timesync VBoxServiceTimeSyncAdjust: Drift=-12688ms
12300:00:30.023 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=73006, NewTA=65706, DiffNew=7300, DiffMax=50072
12400:00:30.133 vminfo Found 5 sessions
12500:00:30.133 vminfo Handling session 0
12600:00:30.133 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
12700:00:30.133 vminfo Handling session 1
12800:00:30.133 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
12900:00:30.133 vminfo Handling session 2
13000:00:30.133 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
13100:00:30.133 vminfo Handling session 3
13200:00:30.133 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
13300:00:30.133 vminfo Handling session 4
13400:00:30.133 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
13500:00:30.133 vminfo Found 0 unique logged-in user(s)
13600:00:30.133 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
13700:00:40.027 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:53:15.801000000Z (MinAdjust: 200 ms)
13800:00:40.027 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:25.048619300Z => -9 247 619 300 ns drift
13900:00:40.027 timesync VBoxServiceTimeSyncAdjust: Drift=-9247ms
14000:00:40.027 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=65706, NewTA=59136, DiffNew=6570, DiffMax=50072
14100:00:40.138 vminfo Found 5 sessions
14200:00:40.138 vminfo Handling session 0
14300:00:40.138 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
14400:00:40.138 vminfo Handling session 1
14500:00:40.138 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
14600:00:40.138 vminfo Handling session 2
14700:00:40.138 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
14800:00:40.138 vminfo Handling session 3
14900:00:40.138 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
15000:00:40.138 vminfo Handling session 4
15100:00:40.138 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
15200:00:40.138 vminfo Found 0 unique logged-in user(s)
15300:00:40.138 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
15400:00:50.032 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:53:25.805000000Z (MinAdjust: 200 ms)
15500:00:50.032 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:30.956305700Z => -5 151 305 700 ns drift
15600:00:50.032 timesync VBoxServiceTimeSyncAdjust: Drift=-5151ms
15700:00:50.032 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=59136, NewTA=53223, DiffNew=5913, DiffMax=50072
15800:00:50.142 vminfo Found 5 sessions
15900:00:50.142 vminfo Handling session 0
16000:00:50.142 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
16100:00:50.142 vminfo Handling session 1
16200:00:50.142 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
16300:00:50.142 vminfo Handling session 2
16400:00:50.142 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
16500:00:50.142 vminfo Handling session 3
16600:00:50.142 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
16700:00:50.142 vminfo Handling session 4
16800:00:50.142 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
16900:00:50.142 vminfo Found 0 unique logged-in user(s)
17000:00:50.142 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
17100:01:00.026 pagesharing VBoxServicePageSharingWorkerProcess: enabled=0
17200:01:00.036 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:53:35.809000000Z (MinAdjust: 200 ms)
17300:01:00.036 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:36.273283400Z => -464 283 400 ns drift
17400:01:00.036 timesync VBoxServiceTimeSyncAdjust: Drift=-464ms
17500:01:00.036 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=53223, NewTA=50072, DiffNew=50072, DiffMax=50072
17600:01:00.146 vminfo Found 5 sessions
17700:01:00.146 vminfo Handling session 0
17800:01:00.146 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
17900:01:00.146 vminfo Handling session 1
18000:01:00.146 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
18100:01:00.146 vminfo Handling session 2
18200:01:00.146 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
18300:01:00.146 vminfo Handling session 3
18400:01:00.146 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
18500:01:00.146 vminfo Handling session 4
18600:01:00.146 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
18700:01:00.146 vminfo Found 0 unique logged-in user(s)
18800:01:00.146 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
18900:01:10.041 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:53:45.814000000Z (MinAdjust: 100 ms)
19000:01:10.041 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:41.275476200Z => 4 538 523 800 ns drift
19100:01:10.041 timesync VBoxServiceTimeSyncAdjust: Drift=4538ms
19200:01:10.041 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=50072, NewTA=55079, DiffNew=5007, DiffMax=50072
19300:01:10.151 vminfo Found 5 sessions
19400:01:10.151 vminfo Handling session 0
19500:01:10.151 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
19600:01:10.151 vminfo Handling session 1
19700:01:10.151 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
19800:01:10.151 vminfo Handling session 2
19900:01:10.151 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
20000:01:10.151 vminfo Handling session 3
20100:01:10.151 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
20200:01:10.151 vminfo Handling session 4
20300:01:10.151 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
20400:01:10.151 vminfo Found 0 unique logged-in user(s)
20500:01:10.151 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
20600:01:20.045 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:53:55.818000000Z (MinAdjust: 100 ms)
20700:01:20.045 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:46.777868300Z => 9 040 131 700 ns drift
20800:01:20.045 timesync VBoxServiceTimeSyncAdjust: Drift=9040ms
20900:01:20.045 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=55079, NewTA=60586, DiffNew=5507, DiffMax=50072
21000:01:20.155 vminfo Found 5 sessions
21100:01:20.155 vminfo Handling session 0
21200:01:20.155 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
21300:01:20.155 vminfo Handling session 1
21400:01:20.155 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
21500:01:20.155 vminfo Handling session 2
21600:01:20.155 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
21700:01:20.155 vminfo Handling session 3
21800:01:20.155 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
21900:01:20.155 vminfo Handling session 4
22000:01:20.155 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
22100:01:20.155 vminfo Found 0 unique logged-in user(s)
22200:01:20.155 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
22300:01:30.049 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:54:05.822000000Z (MinAdjust: 100 ms)
22400:01:30.049 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:52.830409700Z => 12 991 590 300 ns drift
22500:01:30.049 timesync VBoxServiceTimeSyncAdjust: Drift=12991ms
22600:01:30.049 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=60586, NewTA=66644, DiffNew=6058, DiffMax=50072
22700:01:30.159 vminfo Found 5 sessions
22800:01:30.159 vminfo Handling session 0
22900:01:30.159 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
23000:01:30.159 vminfo Handling session 1
23100:01:30.159 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
23200:01:30.159 vminfo Handling session 2
23300:01:30.159 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
23400:01:30.159 vminfo Handling session 3
23500:01:30.159 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
23600:01:30.159 vminfo Handling session 4
23700:01:30.159 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
23800:01:30.159 vminfo Found 0 unique logged-in user(s)
23900:01:30.159 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
24000:01:40.054 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:54:15.827000000Z (MinAdjust: 100 ms)
24100:01:40.054 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:53:59.488145300Z => 16 338 854 700 ns drift
24200:01:40.054 timesync VBoxServiceTimeSyncAdjust: Drift=16338ms
24300:01:40.054 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=66644, NewTA=73308, DiffNew=6664, DiffMax=50072
24400:01:40.164 vminfo Found 5 sessions
24500:01:40.164 vminfo Handling session 0
24600:01:40.164 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
24700:01:40.164 vminfo Handling session 1
24800:01:40.164 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
24900:01:40.164 vminfo Handling session 2
25000:01:40.164 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
25100:01:40.164 vminfo Handling session 3
25200:01:40.164 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
25300:01:40.164 vminfo Handling session 4
25400:01:40.164 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
25500:01:40.164 vminfo Found 0 unique logged-in user(s)
25600:01:40.164 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
25700:01:50.058 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:54:25.831000000Z (MinAdjust: 100 ms)
25800:01:50.058 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:54:06.811614500Z => 19 019 385 500 ns drift
25900:01:50.058 timesync VBoxServiceTimeSyncAdjust: Drift=19019ms
26000:01:50.058 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=73308, NewTA=80638, DiffNew=7330, DiffMax=50072
26100:01:50.168 vminfo Found 5 sessions
26200:01:50.168 vminfo Handling session 0
26300:01:50.168 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
26400:01:50.168 vminfo Handling session 1
26500:01:50.168 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
26600:01:50.168 vminfo Handling session 2
26700:01:50.168 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
26800:01:50.168 vminfo Handling session 3
26900:01:50.168 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
27000:01:50.168 vminfo Handling session 4
27100:01:50.168 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
27200:01:50.168 vminfo Found 0 unique logged-in user(s)
27300:01:50.168 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
27400:02:00.032 pagesharing VBoxServicePageSharingWorkerProcess: enabled=0
27500:02:00.062 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:54:35.835000000Z (MinAdjust: 100 ms)
27600:02:00.062 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:54:14.867350700Z => 20 967 649 300 ns drift
27700:02:00.062 timesync VBoxServiceTimeSyncAdjust: Drift=20967ms
27800:02:00.062 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=80638, NewTA=88701, DiffNew=8063, DiffMax=50072
27900:02:00.173 vminfo Found 5 sessions
28000:02:00.173 vminfo Handling session 0
28100:02:00.173 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
28200:02:00.173 vminfo Handling session 1
28300:02:00.173 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
28400:02:00.173 vminfo Handling session 2
28500:02:00.173 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
28600:02:00.173 vminfo Handling session 3
28700:02:00.173 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
28800:02:00.173 vminfo Handling session 4
28900:02:00.173 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
29000:02:00.173 vminfo Found 0 unique logged-in user(s)
29100:02:00.173 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
29200:02:10.067 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:54:45.840000000Z (MinAdjust: 100 ms)
29300:02:10.067 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:54:23.728580600Z => 22 111 419 400 ns drift
29400:02:10.067 timesync VBoxServiceTimeSyncAdjust: Drift=22111ms
29500:02:10.067 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=88701, NewTA=97571, DiffNew=8870, DiffMax=50072
29600:02:10.177 vminfo Found 5 sessions
29700:02:10.177 vminfo Handling session 0
29800:02:10.177 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
29900:02:10.177 vminfo Handling session 1
30000:02:10.177 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
30100:02:10.177 vminfo Handling session 2
30200:02:10.177 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
30300:02:10.177 vminfo Handling session 3
30400:02:10.177 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
30500:02:10.177 vminfo Handling session 4
30600:02:10.177 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
30700:02:10.177 vminfo Found 0 unique logged-in user(s)
30800:02:10.177 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
30900:02:20.071 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:54:55.844000000Z (MinAdjust: 100 ms)
31000:02:20.071 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:54:33.475923500Z => 22 368 076 500 ns drift
31100:02:20.071 timesync VBoxServiceTimeSyncAdjust: Drift=22368ms
31200:02:20.071 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=97571, NewTA=107328, DiffNew=9757, DiffMax=50072
31300:02:20.181 vminfo Found 5 sessions
31400:02:20.181 vminfo Handling session 0
31500:02:20.181 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
31600:02:20.181 vminfo Handling session 1
31700:02:20.181 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
31800:02:20.181 vminfo Handling session 2
31900:02:20.181 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
32000:02:20.181 vminfo Handling session 3
32100:02:20.181 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
32200:02:20.181 vminfo Handling session 4
32300:02:20.181 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
32400:02:20.181 vminfo Found 0 unique logged-in user(s)
32500:02:20.181 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
32600:02:30.076 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:55:05.849000000Z (MinAdjust: 100 ms)
32700:02:30.076 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:54:44.197990700Z => 21 651 009 300 ns drift
32800:02:30.076 timesync VBoxServiceTimeSyncAdjust: Drift=21651ms
32900:02:30.076 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=107328, NewTA=118060, DiffNew=10732, DiffMax=50072
33000:02:30.186 vminfo Found 5 sessions
33100:02:30.186 vminfo Handling session 0
33200:02:30.186 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
33300:02:30.186 vminfo Handling session 1
33400:02:30.186 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
33500:02:30.186 vminfo Handling session 2
33600:02:30.186 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
33700:02:30.186 vminfo Handling session 3
33800:02:30.186 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
33900:02:30.186 vminfo Handling session 4
34000:02:30.186 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
34100:02:30.186 vminfo Found 0 unique logged-in user(s)
34200:02:30.186 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
34300:02:40.080 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:55:15.853000000Z (MinAdjust: 100 ms)
34400:02:40.080 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:54:55.992184700Z => 19 860 815 300 ns drift
34500:02:40.080 timesync VBoxServiceTimeSyncAdjust: Drift=19860ms
34600:02:40.080 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=118060, NewTA=129866, DiffNew=11806, DiffMax=50072
34700:02:40.190 vminfo Found 5 sessions
34800:02:40.190 vminfo Handling session 0
34900:02:40.190 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
35000:02:40.190 vminfo Handling session 1
35100:02:40.190 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
35200:02:40.190 vminfo Handling session 2
35300:02:40.190 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
35400:02:40.190 vminfo Handling session 3
35500:02:40.190 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
35600:02:40.190 vminfo Handling session 4
35700:02:40.190 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
35800:02:40.190 vminfo Found 0 unique logged-in user(s)
35900:02:40.190 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
36000:02:50.084 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:55:25.857000000Z (MinAdjust: 100 ms)
36100:02:50.084 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:55:08.965798100Z => 16 891 201 900 ns drift
36200:02:50.084 timesync VBoxServiceTimeSyncAdjust: Drift=16891ms
36300:02:50.084 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=129866, NewTA=142852, DiffNew=12986, DiffMax=50072
36400:02:50.195 vminfo Found 5 sessions
36500:02:50.195 vminfo Handling session 0
36600:02:50.195 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
36700:02:50.195 vminfo Handling session 1
36800:02:50.195 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
36900:02:50.195 vminfo Handling session 2
37000:02:50.195 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
37100:02:50.195 vminfo Handling session 3
37200:02:50.195 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
37300:02:50.195 vminfo Handling session 4
37400:02:50.195 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
37500:02:50.195 vminfo Found 0 unique logged-in user(s)
37600:02:50.195 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
37700:03:00.039 pagesharing VBoxServicePageSharingWorkerProcess: enabled=0
37800:03:00.089 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:55:35.862000000Z (MinAdjust: 100 ms)
37900:03:00.089 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:55:23.236712900Z => 12 625 287 100 ns drift
38000:03:00.089 timesync VBoxServiceTimeSyncAdjust: Drift=12625ms
38100:03:00.089 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=142852, NewTA=150216, DiffNew=50072, DiffMax=50072
38200:03:00.199 vminfo Found 5 sessions
38300:03:00.199 vminfo Handling session 0
38400:03:00.199 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
38500:03:00.199 vminfo Handling session 1
38600:03:00.199 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
38700:03:00.199 vminfo Handling session 2
38800:03:00.199 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
38900:03:00.199 vminfo Handling session 3
39000:03:00.199 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
39100:03:00.199 vminfo Handling session 4
39200:03:00.199 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
39300:03:00.199 vminfo Found 0 unique logged-in user(s)
39400:03:00.199 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
39500:03:10.093 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:55:45.866000000Z (MinAdjust: 100 ms)
39600:03:10.093 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:55:38.243291300Z => 7 622 708 700 ns drift
39700:03:10.093 timesync VBoxServiceTimeSyncAdjust: Drift=7622ms
39800:03:10.093 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=150216, NewTA=150216, DiffNew=50072, DiffMax=50072
39900:03:10.203 vminfo Found 5 sessions
40000:03:10.203 vminfo Handling session 0
40100:03:10.203 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
40200:03:10.203 vminfo Handling session 1
40300:03:10.203 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
40400:03:10.203 vminfo Handling session 2
40500:03:10.203 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
40600:03:10.203 vminfo Handling session 3
40700:03:10.203 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
40800:03:10.203 vminfo Handling session 4
40900:03:10.203 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
41000:03:10.203 vminfo Found 0 unique logged-in user(s)
41100:03:10.203 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
41200:03:13.628 main Control handler: Control=0xe, EventType=0x3
41300:03:13.628 main Control handler: A session connected to the remote terminal (Session=1, Event=0x3)
41400:03:13.638 vminfo Found 5 sessions
41500:03:13.638 vminfo Handling session 0
41600:03:13.638 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
41700:03:13.638 vminfo Handling session 1
41800:03:13.638 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
41900:03:13.638 vminfo Handling session 2
42000:03:13.638 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
42100:03:13.638 vminfo Handling session 3
42200:03:13.638 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
42300:03:13.638 vminfo Handling session 4
42400:03:13.638 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
42500:03:13.638 vminfo Found 0 unique logged-in user(s)
42600:03:13.638 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
42700:03:19.136 main Control handler: Control=0xe, EventType=0x1
42800:03:19.136 main Control handler: A session was connected to the console terminal (Session=0, Event=0x1)
42900:03:19.136 vminfo Found 6 sessions
43000:03:19.136 vminfo Handling session 0
43100:03:19.136 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
43200:03:19.136 vminfo Session LogonType=10 is supported -- looking up SID + type ...
43300:03:19.136 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
43400:03:19.156 vminfo Account User=ChenDT, WTSConnectState=1 (4)
43500:03:19.156 vminfo Account User=ChenDT is not logged in
43600:03:19.156 vminfo Handling session 1
43700:03:19.156 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
43800:03:19.156 vminfo Handling session 2
43900:03:19.156 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
44000:03:19.156 vminfo Handling session 3
44100:03:19.156 main Control handler: Control=0xe, EventType=0x4
44200:03:19.156 main Control handler: A session was disconnected from the remote terminal (Session=1, Event=0x4)
44300:03:19.226 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
44400:03:19.226 vminfo Handling session 4
44500:03:19.226 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
44600:03:19.226 vminfo Handling session 5
44700:03:19.226 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
44800:03:19.226 vminfo Found 0 unique logged-in user(s)
44900:03:19.226 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
45000:03:19.276 vminfo Found 6 sessions
45100:03:19.276 vminfo Handling session 0
45200:03:19.276 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
45300:03:19.276 vminfo Session LogonType=10 is supported -- looking up SID + type ...
45400:03:19.276 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
45500:03:19.276 vminfo Account User=ChenDT, WTSConnectState=4 (4)
45600:03:19.276 vminfo Account User=ChenDT using TCS/RDP, state=4
45700:03:19.276 vminfo Account User=ChenDT is logged in
45800:03:19.276 main Control handler: Control=0xe, EventType=0x2
45900:03:19.276 main Control handler: A session was disconnected from the console terminal (Session=0, Event=0x2)
46000:03:19.276 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
46100:03:19.276 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
46200:03:19.276 vminfo Error: Unable to open process with PID=0, error=87
46300:03:19.276 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
46400:03:19.276 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
46500:03:19.276 vminfo PID=264: \SystemRoot\System32\smss.exe
46600:03:19.276 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
46700:03:19.276 vminfo PID=336: \??\C:\XP\system32\csrss.exe
46800:03:19.276 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
46900:03:19.276 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
47000:03:19.276 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
47100:03:19.276 vminfo PID=460: C:\XP\system32\services.exe
47200:03:19.276 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
47300:03:19.276 vminfo PID=472: C:\XP\system32\lsass.exe
47400:03:19.276 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
47500:03:19.276 vminfo PID=624: C:\XP\system32\VBoxService.exe
47600:03:19.276 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
47700:03:19.276 vminfo PID=672: C:\XP\system32\svchost.exe
47800:03:19.276 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
47900:03:19.276 vminfo PID=736: C:\XP\system32\svchost.exe
48000:03:19.276 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
48100:03:19.276 vminfo PID=816: C:\XP\system32\svchost.exe
48200:03:19.276 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
48300:03:19.286 vminfo PID=868: C:\XP\system32\svchost.exe
48400:03:19.286 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
48500:03:19.286 vminfo PID=960: C:\XP\system32\spoolsv.exe
48600:03:19.286 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
48700:03:19.286 vminfo PID=1064: C:\XP\system32\svchost.exe
48800:03:19.286 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
48900:03:19.286 vminfo PID=1456: C:\XP\system32\wuauclt.exe
49000:03:19.286 vminfo PID=1712: (Interactive: false) 0:999 <-> 0:52808
49100:03:19.286 vminfo PID=1712: \??\C:\XP\system32\csrss.exe
49200:03:19.286 vminfo PID=1740: (Interactive: false) 0:999 <-> 0:52808
49300:03:19.286 vminfo PID=1740: \??\C:\XP\system32\winlogon.exe
49400:03:19.286 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
49500:03:19.286 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
49600:03:19.286 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
49700:03:19.286 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
49800:03:19.286 vminfo Session 1 has 0 processes total
49900:03:19.286 vminfo Adding new user=ChenDT (session 1) with 0 processes
50000:03:19.286 vminfo Handling session 1
50100:03:19.286 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
50200:03:19.286 vminfo Handling session 2
50300:03:19.286 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
50400:03:19.286 vminfo Handling session 3
50500:03:19.286 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
50600:03:19.286 vminfo Handling session 4
50700:03:19.286 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
50800:03:19.286 vminfo Handling session 5
50900:03:19.286 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
51000:03:19.286 vminfo Found 1 unique logged-in user(s)
51100:03:19.286 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
51200:03:19.296 vminfo Found 6 sessions
51300:03:19.296 vminfo Handling session 0
51400:03:19.296 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
51500:03:19.296 vminfo Session LogonType=10 is supported -- looking up SID + type ...
51600:03:19.296 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
51700:03:19.296 vminfo Account User=ChenDT, WTSConnectState=4 (4)
51800:03:19.296 vminfo Account User=ChenDT using TCS/RDP, state=4
51900:03:19.296 vminfo Account User=ChenDT is logged in
52000:03:19.296 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
52100:03:19.296 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
52200:03:19.296 vminfo Error: Unable to open process with PID=0, error=87
52300:03:19.296 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
52400:03:19.296 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
52500:03:19.296 vminfo PID=264: \SystemRoot\System32\smss.exe
52600:03:19.296 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
52700:03:19.296 vminfo PID=336: \??\C:\XP\system32\csrss.exe
52800:03:19.296 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
52900:03:19.296 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
53000:03:19.296 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
53100:03:19.296 vminfo PID=460: C:\XP\system32\services.exe
53200:03:19.296 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
53300:03:19.296 vminfo PID=472: C:\XP\system32\lsass.exe
53400:03:19.296 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
53500:03:19.296 vminfo PID=624: C:\XP\system32\VBoxService.exe
53600:03:19.296 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
53700:03:19.296 vminfo PID=672: C:\XP\system32\svchost.exe
53800:03:19.296 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
53900:03:19.296 vminfo PID=736: C:\XP\system32\svchost.exe
54000:03:19.296 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
54100:03:19.296 vminfo PID=816: C:\XP\system32\svchost.exe
54200:03:19.296 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
54300:03:19.296 vminfo PID=868: C:\XP\system32\svchost.exe
54400:03:19.296 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
54500:03:19.296 vminfo PID=960: C:\XP\system32\spoolsv.exe
54600:03:19.296 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
54700:03:19.296 vminfo PID=1064: C:\XP\system32\svchost.exe
54800:03:19.296 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
54900:03:19.296 vminfo PID=1456: C:\XP\system32\wuauclt.exe
55000:03:19.296 vminfo PID=1712: (Interactive: false) 0:999 <-> 0:52808
55100:03:19.296 vminfo PID=1712: \??\C:\XP\system32\csrss.exe
55200:03:19.296 vminfo PID=1740: (Interactive: false) 0:999 <-> 0:52808
55300:03:19.296 vminfo PID=1740: \??\C:\XP\system32\winlogon.exe
55400:03:19.296 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
55500:03:19.296 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
55600:03:19.296 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
55700:03:19.296 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
55800:03:19.296 vminfo Session 1 has 0 processes total
55900:03:19.296 vminfo Adding new user=ChenDT (session 1) with 0 processes
56000:03:19.296 vminfo Handling session 1
56100:03:19.296 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
56200:03:19.296 vminfo Handling session 2
56300:03:19.296 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
56400:03:19.296 vminfo Handling session 3
56500:03:19.296 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
56600:03:19.296 vminfo Handling session 4
56700:03:19.296 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
56800:03:19.296 vminfo Handling session 5
56900:03:19.296 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
57000:03:19.296 vminfo Found 1 unique logged-in user(s)
57100:03:19.296 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
57200:03:19.397 main Control handler: Control=0xe, EventType=0x3
57300:03:19.397 main Control handler: A session connected to the remote terminal (Session=0, Event=0x3)
57400:03:19.397 vminfo Found 6 sessions
57500:03:19.397 vminfo Handling session 0
57600:03:19.607 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
57700:03:19.607 vminfo Session LogonType=10 is supported -- looking up SID + type ...
57800:03:19.607 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
57900:03:19.727 main Control handler: Control=0xe, EventType=0x5
58000:03:19.727 main Control handler: A user has logged on to a session (Session=0, Event=0x5)
58100:03:19.797 vminfo Cannot query WTS connection state for user=ChenDT, error=7007
58200:03:19.797 vminfo Account User=ChenDT is logged in
58300:03:19.797 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
58400:03:19.827 main Control handler: Control=0xe, EventType=0x1
58500:03:19.827 main Control handler: A session was connected to the console terminal (Session=2, Event=0x1)
58600:03:19.827 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
58700:03:19.827 vminfo Error: Unable to open process with PID=0, error=87
58800:03:19.827 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
58900:03:19.827 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
59000:03:19.827 vminfo PID=264: \SystemRoot\System32\smss.exe
59100:03:19.827 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
59200:03:19.827 vminfo PID=336: \??\C:\XP\system32\csrss.exe
59300:03:19.827 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
59400:03:19.827 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
59500:03:19.827 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
59600:03:19.827 vminfo PID=460: C:\XP\system32\services.exe
59700:03:19.827 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
59800:03:19.827 vminfo PID=472: C:\XP\system32\lsass.exe
59900:03:19.827 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
60000:03:19.827 vminfo PID=624: C:\XP\system32\VBoxService.exe
60100:03:19.827 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
60200:03:19.827 vminfo PID=672: C:\XP\system32\svchost.exe
60300:03:19.827 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
60400:03:19.827 vminfo PID=736: C:\XP\system32\svchost.exe
60500:03:19.827 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
60600:03:19.827 vminfo PID=816: C:\XP\system32\svchost.exe
60700:03:19.827 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
60800:03:19.827 vminfo PID=868: C:\XP\system32\svchost.exe
60900:03:19.827 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
61000:03:19.827 vminfo PID=960: C:\XP\system32\spoolsv.exe
61100:03:19.827 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
61200:03:19.827 vminfo PID=1064: C:\XP\system32\svchost.exe
61300:03:19.827 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
61400:03:19.827 vminfo PID=1456: C:\XP\system32\wuauclt.exe
61500:03:19.827 vminfo PID=1712: (Interactive: false) 0:999 <-> 0:52808
61600:03:19.827 vminfo PID=1740: (Interactive: false) 0:999 <-> 0:52808
61700:03:19.827 vminfo Error: Unable to open process with PID=1740, error=87
61800:03:19.827 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
61900:03:19.827 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
62000:03:19.827 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
62100:03:19.827 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
62200:03:19.827 vminfo Session 1 has 0 processes total
62300:03:19.827 vminfo Adding new user=ChenDT (session 1) with 0 processes
62400:03:19.827 vminfo Handling session 1
62500:03:19.827 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
62600:03:19.827 vminfo Handling session 2
62700:03:19.827 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
62800:03:19.827 vminfo Handling session 3
62900:03:19.827 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
63000:03:19.827 vminfo Handling session 4
63100:03:19.827 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
63200:03:19.827 vminfo Handling session 5
63300:03:19.827 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
63400:03:19.827 vminfo Found 1 unique logged-in user(s)
63500:03:19.827 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
63600:03:19.887 vminfo Found 6 sessions
63700:03:19.887 vminfo Handling session 0
63800:03:19.887 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
63900:03:19.887 vminfo Session LogonType=10 is supported -- looking up SID + type ...
64000:03:19.887 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
64100:03:19.977 vminfo No WinStation found for user=ChenDT
64200:03:19.977 vminfo Account User=ChenDT is logged in
64300:03:19.977 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
64400:03:19.977 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
64500:03:19.977 vminfo Error: Unable to open process with PID=0, error=87
64600:03:19.977 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
64700:03:19.977 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
64800:03:19.977 vminfo PID=264: \SystemRoot\System32\smss.exe
64900:03:19.977 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
65000:03:19.977 vminfo PID=336: \??\C:\XP\system32\csrss.exe
65100:03:19.977 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
65200:03:19.977 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
65300:03:19.977 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
65400:03:19.977 vminfo PID=460: C:\XP\system32\services.exe
65500:03:19.977 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
65600:03:19.977 vminfo PID=472: C:\XP\system32\lsass.exe
65700:03:19.977 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
65800:03:19.977 vminfo PID=624: C:\XP\system32\VBoxService.exe
65900:03:19.977 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
66000:03:19.977 vminfo PID=672: C:\XP\system32\svchost.exe
66100:03:19.977 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
66200:03:19.977 vminfo PID=736: C:\XP\system32\svchost.exe
66300:03:19.977 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
66400:03:19.977 vminfo PID=816: C:\XP\system32\svchost.exe
66500:03:19.977 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
66600:03:19.977 vminfo PID=868: C:\XP\system32\svchost.exe
66700:03:19.977 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
66800:03:19.977 vminfo PID=960: C:\XP\system32\spoolsv.exe
66900:03:19.977 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
67000:03:19.977 vminfo PID=1064: C:\XP\system32\svchost.exe
67100:03:19.977 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
67200:03:19.977 vminfo PID=1456: C:\XP\system32\wuauclt.exe
67300:03:19.977 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
67400:03:19.977 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
67500:03:19.977 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
67600:03:19.977 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
67700:03:19.977 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
67800:03:19.977 vminfo PID=2024: C:\XP\system32\rdpclip.exe
67900:03:19.977 vminfo PID=188: (Interactive: true ) 0:52808 <-> 0:52808
68000:03:19.977 vminfo PID=188: C:\XP\system32\userinit.exe
68100:03:19.977 vminfo Session 1 has 2 processes total
68200:03:19.977 vminfo Adding new user=ChenDT (session 1) with 2 processes
68300:03:19.977 vminfo Handling session 1
68400:03:19.977 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
68500:03:19.977 vminfo Handling session 2
68600:03:19.997 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
68700:03:19.997 vminfo Handling session 3
68800:03:19.997 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
68900:03:19.997 vminfo Handling session 4
69000:03:19.997 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
69100:03:19.997 vminfo Handling session 5
69200:03:19.997 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
69300:03:19.997 vminfo Found 1 unique logged-in user(s)
69400:03:19.997 vminfo User ChenDT has 2 processes (session 1)
69500:03:19.997 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
69600:03:20.098 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:55:55.871000000Z (MinAdjust: 100 ms)
69700:03:20.098 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:55:53.249869700Z => 2 621 130 300 ns drift
69800:03:20.098 timesync VBoxServiceTimeSyncAdjust: Drift=2621ms
69900:03:20.098 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=150216, NewTA=150216, DiffNew=50072, DiffMax=50072
70000:03:30.092 vminfo Found 6 sessions
70100:03:30.092 vminfo Handling session 0
70200:03:30.092 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
70300:03:30.092 vminfo Session LogonType=10 is supported -- looking up SID + type ...
70400:03:30.092 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
70500:03:30.092 vminfo No WinStation found for user=ChenDT
70600:03:30.092 vminfo Account User=ChenDT is logged in
70700:03:30.092 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
70800:03:30.092 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
70900:03:30.092 vminfo Error: Unable to open process with PID=0, error=87
71000:03:30.092 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
71100:03:30.092 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
71200:03:30.092 vminfo PID=264: \SystemRoot\System32\smss.exe
71300:03:30.092 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
71400:03:30.092 vminfo PID=336: \??\C:\XP\system32\csrss.exe
71500:03:30.092 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
71600:03:30.092 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
71700:03:30.092 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
71800:03:30.092 vminfo PID=460: C:\XP\system32\services.exe
71900:03:30.092 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
72000:03:30.092 vminfo PID=472: C:\XP\system32\lsass.exe
72100:03:30.092 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
72200:03:30.092 vminfo PID=624: C:\XP\system32\VBoxService.exe
72300:03:30.092 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
72400:03:30.092 vminfo PID=672: C:\XP\system32\svchost.exe
72500:03:30.092 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
72600:03:30.092 vminfo PID=736: C:\XP\system32\svchost.exe
72700:03:30.092 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
72800:03:30.092 vminfo PID=816: C:\XP\system32\svchost.exe
72900:03:30.092 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
73000:03:30.092 vminfo PID=868: C:\XP\system32\svchost.exe
73100:03:30.092 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
73200:03:30.092 vminfo PID=960: C:\XP\system32\spoolsv.exe
73300:03:30.092 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
73400:03:30.092 vminfo PID=1064: C:\XP\system32\svchost.exe
73500:03:30.092 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
73600:03:30.092 vminfo PID=1456: C:\XP\system32\wuauclt.exe
73700:03:30.092 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
73800:03:30.092 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
73900:03:30.092 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
74000:03:30.092 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
74100:03:30.092 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
74200:03:30.092 vminfo PID=2024: C:\XP\system32\rdpclip.exe
74300:03:30.092 vminfo PID=188: (Interactive: true ) 0:52808 <-> 0:52808
74400:03:30.092 vminfo PID=188: C:\XP\system32\userinit.exe
74500:03:30.092 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
74600:03:30.092 vminfo PID=304: C:\XP\Explorer.EXE
74700:03:30.092 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
74800:03:30.092 vminfo PID=272: C:\XP\system32\VBoxTray.exe
74900:03:30.092 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
75000:03:30.092 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
75100:03:30.092 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
75200:03:30.092 vminfo PID=780: C:\XP\system32\ctfmon.exe
75300:03:30.092 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
75400:03:30.092 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
75500:03:30.092 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
75600:03:30.092 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
75700:03:30.092 vminfo Session 1 has 8 processes total
75800:03:30.092 vminfo Adding new user=ChenDT (session 1) with 8 processes
75900:03:30.092 vminfo Handling session 1
76000:03:30.092 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
76100:03:30.092 vminfo Handling session 2
76200:03:30.092 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
76300:03:30.092 vminfo Handling session 3
76400:03:30.092 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
76500:03:30.092 vminfo Handling session 4
76600:03:30.092 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
76700:03:30.092 vminfo Handling session 5
76800:03:30.092 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
76900:03:30.092 vminfo Found 1 unique logged-in user(s)
77000:03:30.092 vminfo User ChenDT has 8 processes (session 1)
77100:03:30.092 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
77200:03:30.102 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:56:05.875000000Z (MinAdjust: 200 ms)
77300:03:30.102 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:56:08.256448100Z => -2 381 448 100 ns drift
77400:03:30.102 timesync VBoxServiceTimeSyncAdjust: Drift=-2381ms
77500:03:30.102 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=150216, NewTA=135195, DiffNew=15021, DiffMax=50072
77600:03:40.106 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:56:15.879000000Z (MinAdjust: 200 ms)
77700:03:40.106 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:56:21.762428600Z => -5 883 428 600 ns drift
77800:03:40.106 timesync VBoxServiceTimeSyncAdjust: Drift=-5883ms
77900:03:40.106 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=135195, NewTA=121676, DiffNew=13519, DiffMax=50072
78000:03:40.106 vminfo Found 6 sessions
78100:03:40.106 vminfo Handling session 0
78200:03:40.106 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
78300:03:40.106 vminfo Session LogonType=10 is supported -- looking up SID + type ...
78400:03:40.106 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
78500:03:40.106 vminfo No WinStation found for user=ChenDT
78600:03:40.106 vminfo Account User=ChenDT is logged in
78700:03:40.106 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
78800:03:40.106 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
78900:03:40.106 vminfo Error: Unable to open process with PID=0, error=87
79000:03:40.106 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
79100:03:40.106 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
79200:03:40.106 vminfo PID=264: \SystemRoot\System32\smss.exe
79300:03:40.106 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
79400:03:40.106 vminfo PID=336: \??\C:\XP\system32\csrss.exe
79500:03:40.106 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
79600:03:40.106 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
79700:03:40.106 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
79800:03:40.106 vminfo PID=460: C:\XP\system32\services.exe
79900:03:40.106 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
80000:03:40.106 vminfo PID=472: C:\XP\system32\lsass.exe
80100:03:40.106 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
80200:03:40.106 vminfo PID=624: C:\XP\system32\VBoxService.exe
80300:03:40.106 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
80400:03:40.106 vminfo PID=672: C:\XP\system32\svchost.exe
80500:03:40.106 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
80600:03:40.106 vminfo PID=736: C:\XP\system32\svchost.exe
80700:03:40.106 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
80800:03:40.106 vminfo PID=816: C:\XP\system32\svchost.exe
80900:03:40.106 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
81000:03:40.106 vminfo PID=868: C:\XP\system32\svchost.exe
81100:03:40.106 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
81200:03:40.106 vminfo PID=960: C:\XP\system32\spoolsv.exe
81300:03:40.106 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
81400:03:40.106 vminfo PID=1064: C:\XP\system32\svchost.exe
81500:03:40.106 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
81600:03:40.106 vminfo PID=1456: C:\XP\system32\wuauclt.exe
81700:03:40.106 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
81800:03:40.106 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
81900:03:40.106 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
82000:03:40.106 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
82100:03:40.106 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
82200:03:40.106 vminfo PID=2024: C:\XP\system32\rdpclip.exe
82300:03:40.106 vminfo PID=188: (Interactive: true ) 0:52808 <-> 0:52808
82400:03:40.106 vminfo PID=188: C:\XP\system32\userinit.exe
82500:03:40.106 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
82600:03:40.106 vminfo PID=304: C:\XP\Explorer.EXE
82700:03:40.106 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
82800:03:40.106 vminfo PID=272: C:\XP\system32\VBoxTray.exe
82900:03:40.106 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
83000:03:40.106 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
83100:03:40.106 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
83200:03:40.106 vminfo PID=780: C:\XP\system32\ctfmon.exe
83300:03:40.106 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
83400:03:40.106 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
83500:03:40.106 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
83600:03:40.106 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
83700:03:40.106 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
83800:03:40.106 vminfo PID=1108: C:\XP\system32\taskmgr.exe
83900:03:40.106 vminfo Session 1 has 9 processes total
84000:03:40.106 vminfo Adding new user=ChenDT (session 1) with 9 processes
84100:03:40.106 vminfo Handling session 1
84200:03:40.106 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
84300:03:40.106 vminfo Handling session 2
84400:03:40.106 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
84500:03:40.106 vminfo Handling session 3
84600:03:40.106 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
84700:03:40.106 vminfo Handling session 4
84800:03:40.106 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
84900:03:40.106 vminfo Handling session 5
85000:03:40.106 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
85100:03:40.106 vminfo Found 1 unique logged-in user(s)
85200:03:40.106 vminfo User ChenDT has 9 processes (session 1)
85300:03:40.106 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
85400:03:50.111 vminfo Found 6 sessions
85500:03:50.111 vminfo Handling session 0
85600:03:50.111 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
85700:03:50.111 vminfo Session LogonType=10 is supported -- looking up SID + type ...
85800:03:50.111 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
85900:03:50.111 vminfo No WinStation found for user=ChenDT
86000:03:50.111 vminfo Account User=ChenDT is logged in
86100:03:50.111 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
86200:03:50.111 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
86300:03:50.111 vminfo Error: Unable to open process with PID=0, error=87
86400:03:50.111 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
86500:03:50.111 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
86600:03:50.111 vminfo PID=264: \SystemRoot\System32\smss.exe
86700:03:50.111 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
86800:03:50.111 vminfo PID=336: \??\C:\XP\system32\csrss.exe
86900:03:50.111 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
87000:03:50.111 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
87100:03:50.111 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
87200:03:50.111 vminfo PID=460: C:\XP\system32\services.exe
87300:03:50.111 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
87400:03:50.111 vminfo PID=472: C:\XP\system32\lsass.exe
87500:03:50.111 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
87600:03:50.111 vminfo PID=624: C:\XP\system32\VBoxService.exe
87700:03:50.111 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
87800:03:50.111 vminfo PID=672: C:\XP\system32\svchost.exe
87900:03:50.111 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
88000:03:50.111 vminfo PID=736: C:\XP\system32\svchost.exe
88100:03:50.111 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
88200:03:50.111 vminfo PID=816: C:\XP\system32\svchost.exe
88300:03:50.111 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
88400:03:50.111 vminfo PID=868: C:\XP\system32\svchost.exe
88500:03:50.111 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
88600:03:50.111 vminfo PID=960: C:\XP\system32\spoolsv.exe
88700:03:50.111 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
88800:03:50.111 vminfo PID=1064: C:\XP\system32\svchost.exe
88900:03:50.111 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
89000:03:50.111 vminfo PID=1456: C:\XP\system32\wuauclt.exe
89100:03:50.111 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
89200:03:50.111 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
89300:03:50.111 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
89400:03:50.111 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
89500:03:50.111 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
89600:03:50.111 vminfo PID=2024: C:\XP\system32\rdpclip.exe
89700:03:50.111 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
89800:03:50.111 vminfo PID=304: C:\XP\Explorer.EXE
89900:03:50.111 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
90000:03:50.111 vminfo PID=272: C:\XP\system32\VBoxTray.exe
90100:03:50.111 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
90200:03:50.111 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
90300:03:50.111 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
90400:03:50.111 vminfo PID=780: C:\XP\system32\ctfmon.exe
90500:03:50.111 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
90600:03:50.111 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
90700:03:50.111 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
90800:03:50.111 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
90900:03:50.111 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
91000:03:50.111 vminfo PID=1108: C:\XP\system32\taskmgr.exe
91100:03:50.111 vminfo Session 1 has 8 processes total
91200:03:50.111 vminfo Adding new user=ChenDT (session 1) with 8 processes
91300:03:50.111 vminfo Handling session 1
91400:03:50.111 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
91500:03:50.111 vminfo Handling session 2
91600:03:50.111 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:56:25.890000000Z (MinAdjust: 200 ms)
91700:03:50.111 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:56:33.917861000Z => -8 027 861 000 ns drift
91800:03:50.111 timesync VBoxServiceTimeSyncAdjust: Drift=-8027ms
91900:03:50.111 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=121676, NewTA=109509, DiffNew=12167, DiffMax=50072
92000:03:50.111 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
92100:03:50.111 vminfo Handling session 3
92200:03:50.111 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
92300:03:50.111 vminfo Handling session 4
92400:03:50.111 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
92500:03:50.111 vminfo Handling session 5
92600:03:50.111 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
92700:03:50.111 vminfo Found 1 unique logged-in user(s)
92800:03:50.111 vminfo User ChenDT has 8 processes (session 1)
92900:03:50.111 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
93000:04:00.045 pagesharing VBoxServicePageSharingWorkerProcess: enabled=0
93100:04:00.115 vminfo Found 6 sessions
93200:04:00.115 vminfo Handling session 0
93300:04:00.115 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
93400:04:00.115 vminfo Session LogonType=10 is supported -- looking up SID + type ...
93500:04:00.115 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
93600:04:00.115 vminfo No WinStation found for user=ChenDT
93700:04:00.115 vminfo Account User=ChenDT is logged in
93800:04:00.115 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
93900:04:00.115 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
94000:04:00.115 vminfo Error: Unable to open process with PID=0, error=87
94100:04:00.115 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
94200:04:00.115 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
94300:04:00.115 vminfo PID=264: \SystemRoot\System32\smss.exe
94400:04:00.115 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
94500:04:00.115 vminfo PID=336: \??\C:\XP\system32\csrss.exe
94600:04:00.115 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
94700:04:00.115 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
94800:04:00.115 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
94900:04:00.115 vminfo PID=460: C:\XP\system32\services.exe
95000:04:00.115 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
95100:04:00.115 vminfo PID=472: C:\XP\system32\lsass.exe
95200:04:00.115 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
95300:04:00.115 vminfo PID=624: C:\XP\system32\VBoxService.exe
95400:04:00.115 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
95500:04:00.115 vminfo PID=672: C:\XP\system32\svchost.exe
95600:04:00.115 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
95700:04:00.115 vminfo PID=736: C:\XP\system32\svchost.exe
95800:04:00.115 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
95900:04:00.115 vminfo PID=816: C:\XP\system32\svchost.exe
96000:04:00.115 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
96100:04:00.115 vminfo PID=868: C:\XP\system32\svchost.exe
96200:04:00.115 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
96300:04:00.115 vminfo PID=960: C:\XP\system32\spoolsv.exe
96400:04:00.115 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
96500:04:00.115 vminfo PID=1064: C:\XP\system32\svchost.exe
96600:04:00.115 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
96700:04:00.115 vminfo PID=1456: C:\XP\system32\wuauclt.exe
96800:04:00.115 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
96900:04:00.115 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
97000:04:00.115 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
97100:04:00.115 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
97200:04:00.115 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
97300:04:00.115 vminfo PID=2024: C:\XP\system32\rdpclip.exe
97400:04:00.115 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
97500:04:00.115 vminfo PID=304: C:\XP\Explorer.EXE
97600:04:00.115 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
97700:04:00.115 vminfo PID=272: C:\XP\system32\VBoxTray.exe
97800:04:00.115 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
97900:04:00.115 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
98000:04:00.115 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
98100:04:00.115 vminfo PID=780: C:\XP\system32\ctfmon.exe
98200:04:00.115 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
98300:04:00.115 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
98400:04:00.115 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
98500:04:00.115 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
98600:04:00.115 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
98700:04:00.115 vminfo PID=1108: C:\XP\system32\taskmgr.exe
98800:04:00.115 vminfo Session 1 has 8 processes total
98900:04:00.115 vminfo Adding new user=ChenDT (session 1) with 8 processes
99000:04:00.115 vminfo Handling session 1
99100:04:00.115 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
99200:04:00.115 vminfo Handling session 2
99300:04:00.115 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
99400:04:00.115 vminfo Handling session 3
99500:04:00.115 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
99600:04:00.115 vminfo Handling session 4
99700:04:00.115 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
99800:04:00.115 vminfo Handling session 5
99900:04:00.115 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
100000:04:00.115 vminfo Found 1 unique logged-in user(s)
100100:04:00.115 vminfo User ChenDT has 8 processes (session 1)
100200:04:00.115 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
100300:04:00.115 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:56:35.896000000Z (MinAdjust: 200 ms)
100400:04:00.115 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:56:44.857810100Z => -8 961 810 100 ns drift
100500:04:00.115 timesync VBoxServiceTimeSyncAdjust: Drift=-8961ms
100600:04:00.115 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=109509, NewTA=98559, DiffNew=10950, DiffMax=50072
100700:04:04.571 main Control handler: Control=0xe, EventType=0x4
100800:04:04.571 main Control handler: A session was disconnected from the remote terminal (Session=0, Event=0x4)
100900:04:04.571 vminfo Found 6 sessions
101000:04:04.571 vminfo Handling session 0
101100:04:04.571 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
101200:04:04.571 vminfo Session LogonType=10 is supported -- looking up SID + type ...
101300:04:04.571 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
101400:04:04.571 vminfo No WinStation found for user=ChenDT
101500:04:04.571 vminfo Account User=ChenDT is logged in
101600:04:04.571 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
101700:04:04.571 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
101800:04:04.571 vminfo Error: Unable to open process with PID=0, error=87
101900:04:04.571 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
102000:04:04.571 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
102100:04:04.571 vminfo PID=264: \SystemRoot\System32\smss.exe
102200:04:04.571 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
102300:04:04.571 vminfo PID=336: \??\C:\XP\system32\csrss.exe
102400:04:04.571 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
102500:04:04.571 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
102600:04:04.571 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
102700:04:04.571 vminfo PID=460: C:\XP\system32\services.exe
102800:04:04.571 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
102900:04:04.571 vminfo PID=472: C:\XP\system32\lsass.exe
103000:04:04.571 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
103100:04:04.571 vminfo PID=624: C:\XP\system32\VBoxService.exe
103200:04:04.571 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
103300:04:04.571 vminfo PID=672: C:\XP\system32\svchost.exe
103400:04:04.571 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
103500:04:04.571 vminfo PID=736: C:\XP\system32\svchost.exe
103600:04:04.571 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
103700:04:04.571 vminfo PID=816: C:\XP\system32\svchost.exe
103800:04:04.571 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
103900:04:04.571 vminfo PID=868: C:\XP\system32\svchost.exe
104000:04:04.571 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
104100:04:04.571 vminfo PID=960: C:\XP\system32\spoolsv.exe
104200:04:04.571 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
104300:04:04.571 vminfo PID=1064: C:\XP\system32\svchost.exe
104400:04:04.571 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
104500:04:04.571 vminfo PID=1456: C:\XP\system32\wuauclt.exe
104600:04:04.571 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
104700:04:04.571 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
104800:04:04.571 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
104900:04:04.571 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
105000:04:04.571 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
105100:04:04.571 vminfo PID=2024: C:\XP\system32\rdpclip.exe
105200:04:04.571 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
105300:04:04.571 vminfo PID=304: C:\XP\Explorer.EXE
105400:04:04.571 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
105500:04:04.571 vminfo PID=272: C:\XP\system32\VBoxTray.exe
105600:04:04.571 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
105700:04:04.571 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
105800:04:04.571 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
105900:04:04.582 vminfo PID=780: C:\XP\system32\ctfmon.exe
106000:04:04.582 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
106100:04:04.582 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
106200:04:04.582 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
106300:04:04.582 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
106400:04:04.582 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
106500:04:04.582 vminfo PID=1108: C:\XP\system32\taskmgr.exe
106600:04:04.582 vminfo Session 1 has 8 processes total
106700:04:04.582 vminfo Adding new user=ChenDT (session 1) with 8 processes
106800:04:04.582 vminfo Handling session 1
106900:04:04.582 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
107000:04:04.582 vminfo Handling session 2
107100:04:04.582 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
107200:04:04.582 vminfo Handling session 3
107300:04:04.582 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
107400:04:04.582 vminfo Handling session 4
107500:04:04.582 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
107600:04:04.582 vminfo Handling session 5
107700:04:04.582 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
107800:04:04.582 vminfo Found 1 unique logged-in user(s)
107900:04:04.582 vminfo User ChenDT has 8 processes (session 1)
108000:04:04.582 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
108100:04:10.119 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:56:45.892000000Z (MinAdjust: 200 ms)
108200:04:10.119 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:56:54.703854200Z => -8 811 854 200 ns drift
108300:04:10.119 timesync VBoxServiceTimeSyncAdjust: Drift=-8811ms
108400:04:10.119 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=98559, NewTA=88704, DiffNew=9855, DiffMax=50072
108500:04:14.596 vminfo Found 6 sessions
108600:04:14.596 vminfo Handling session 0
108700:04:14.596 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
108800:04:14.596 vminfo Session LogonType=10 is supported -- looking up SID + type ...
108900:04:14.596 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
109000:04:14.596 vminfo No WinStation found for user=ChenDT
109100:04:14.596 vminfo Account User=ChenDT is logged in
109200:04:14.596 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
109300:04:14.596 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
109400:04:14.596 vminfo Error: Unable to open process with PID=0, error=87
109500:04:14.596 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
109600:04:14.596 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
109700:04:14.596 vminfo PID=264: \SystemRoot\System32\smss.exe
109800:04:14.596 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
109900:04:14.596 vminfo PID=336: \??\C:\XP\system32\csrss.exe
110000:04:14.596 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
110100:04:14.596 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
110200:04:14.596 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
110300:04:14.596 vminfo PID=460: C:\XP\system32\services.exe
110400:04:14.596 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
110500:04:14.596 vminfo PID=472: C:\XP\system32\lsass.exe
110600:04:14.596 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
110700:04:14.596 vminfo PID=624: C:\XP\system32\VBoxService.exe
110800:04:14.596 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
110900:04:14.596 vminfo PID=672: C:\XP\system32\svchost.exe
111000:04:14.596 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
111100:04:14.596 vminfo PID=736: C:\XP\system32\svchost.exe
111200:04:14.596 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
111300:04:14.596 vminfo PID=816: C:\XP\system32\svchost.exe
111400:04:14.596 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
111500:04:14.596 vminfo PID=868: C:\XP\system32\svchost.exe
111600:04:14.596 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
111700:04:14.596 vminfo PID=960: C:\XP\system32\spoolsv.exe
111800:04:14.596 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
111900:04:14.596 vminfo PID=1064: C:\XP\system32\svchost.exe
112000:04:14.596 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
112100:04:14.596 vminfo PID=1456: C:\XP\system32\wuauclt.exe
112200:04:14.596 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
112300:04:14.596 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
112400:04:14.596 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
112500:04:14.596 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
112600:04:14.596 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
112700:04:14.596 vminfo PID=2024: C:\XP\system32\rdpclip.exe
112800:04:14.596 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
112900:04:14.596 vminfo PID=304: C:\XP\Explorer.EXE
113000:04:14.596 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
113100:04:14.596 vminfo PID=272: C:\XP\system32\VBoxTray.exe
113200:04:14.596 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
113300:04:14.596 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
113400:04:14.596 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
113500:04:14.596 vminfo PID=780: C:\XP\system32\ctfmon.exe
113600:04:14.596 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
113700:04:14.596 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
113800:04:14.596 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
113900:04:14.596 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
114000:04:14.596 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
114100:04:14.596 vminfo PID=1108: C:\XP\system32\taskmgr.exe
114200:04:14.596 vminfo Session 1 has 8 processes total
114300:04:14.596 vminfo Adding new user=ChenDT (session 1) with 8 processes
114400:04:14.596 vminfo Handling session 1
114500:04:14.596 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
114600:04:14.596 vminfo Handling session 2
114700:04:14.596 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
114800:04:14.596 vminfo Handling session 3
114900:04:14.596 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
115000:04:14.596 vminfo Handling session 4
115100:04:14.596 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
115200:04:14.596 vminfo Handling session 5
115300:04:14.596 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
115400:04:14.596 vminfo Found 1 unique logged-in user(s)
115500:04:14.596 vminfo User ChenDT has 8 processes (session 1)
115600:04:14.596 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
115700:04:20.124 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:56:55.897000000Z (MinAdjust: 200 ms)
115800:04:20.124 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:57:03.565383800Z => -7 668 383 800 ns drift
115900:04:20.124 timesync VBoxServiceTimeSyncAdjust: Drift=-7668ms
116000:04:20.124 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=88704, NewTA=79834, DiffNew=8870, DiffMax=50072
116100:04:24.610 vminfo Found 6 sessions
116200:04:24.610 vminfo Handling session 0
116300:04:24.610 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
116400:04:24.610 vminfo Session LogonType=10 is supported -- looking up SID + type ...
116500:04:24.610 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
116600:04:24.610 vminfo No WinStation found for user=ChenDT
116700:04:24.610 vminfo Account User=ChenDT is logged in
116800:04:24.610 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
116900:04:24.610 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
117000:04:24.610 vminfo Error: Unable to open process with PID=0, error=87
117100:04:24.610 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
117200:04:24.610 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
117300:04:24.610 vminfo PID=264: \SystemRoot\System32\smss.exe
117400:04:24.610 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
117500:04:24.610 vminfo PID=336: \??\C:\XP\system32\csrss.exe
117600:04:24.610 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
117700:04:24.610 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
117800:04:24.610 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
117900:04:24.610 vminfo PID=460: C:\XP\system32\services.exe
118000:04:24.610 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
118100:04:24.610 vminfo PID=472: C:\XP\system32\lsass.exe
118200:04:24.610 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
118300:04:24.610 vminfo PID=624: C:\XP\system32\VBoxService.exe
118400:04:24.610 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
118500:04:24.610 vminfo PID=672: C:\XP\system32\svchost.exe
118600:04:24.610 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
118700:04:24.610 vminfo PID=736: C:\XP\system32\svchost.exe
118800:04:24.610 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
118900:04:24.610 vminfo PID=816: C:\XP\system32\svchost.exe
119000:04:24.610 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
119100:04:24.610 vminfo PID=868: C:\XP\system32\svchost.exe
119200:04:24.610 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
119300:04:24.610 vminfo PID=960: C:\XP\system32\spoolsv.exe
119400:04:24.610 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
119500:04:24.610 vminfo PID=1064: C:\XP\system32\svchost.exe
119600:04:24.610 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
119700:04:24.610 vminfo PID=1456: C:\XP\system32\wuauclt.exe
119800:04:24.610 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
119900:04:24.610 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
120000:04:24.610 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
120100:04:24.610 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
120200:04:24.610 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
120300:04:24.610 vminfo PID=2024: C:\XP\system32\rdpclip.exe
120400:04:24.610 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
120500:04:24.610 vminfo PID=304: C:\XP\Explorer.EXE
120600:04:24.610 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
120700:04:24.610 vminfo PID=272: C:\XP\system32\VBoxTray.exe
120800:04:24.610 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
120900:04:24.610 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
121000:04:24.610 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
121100:04:24.610 vminfo PID=780: C:\XP\system32\ctfmon.exe
121200:04:24.610 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
121300:04:24.610 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
121400:04:24.610 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
121500:04:24.610 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
121600:04:24.610 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
121700:04:24.610 vminfo PID=1108: C:\XP\system32\taskmgr.exe
121800:04:24.610 vminfo Session 1 has 8 processes total
121900:04:24.610 vminfo Adding new user=ChenDT (session 1) with 8 processes
122000:04:24.610 vminfo Handling session 1
122100:04:24.610 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
122200:04:24.610 vminfo Handling session 2
122300:04:24.610 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
122400:04:24.610 vminfo Handling session 3
122500:04:24.610 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
122600:04:24.610 vminfo Handling session 4
122700:04:24.610 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
122800:04:24.610 vminfo Handling session 5
122900:04:24.610 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
123000:04:24.610 vminfo Found 1 unique logged-in user(s)
123100:04:24.610 vminfo User ChenDT has 8 processes (session 1)
123200:04:24.610 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
123300:04:30.128 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:57:05.901000000Z (MinAdjust: 200 ms)
123400:04:30.128 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:57:11.540800400Z => -5 639 800 400 ns drift
123500:04:30.128 timesync VBoxServiceTimeSyncAdjust: Drift=-5639ms
123600:04:30.128 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=79834, NewTA=71851, DiffNew=7983, DiffMax=50072
123700:04:34.625 vminfo Found 6 sessions
123800:04:34.625 vminfo Handling session 0
123900:04:34.625 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
124000:04:34.625 vminfo Session LogonType=10 is supported -- looking up SID + type ...
124100:04:34.625 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
124200:04:34.625 vminfo No WinStation found for user=ChenDT
124300:04:34.625 vminfo Account User=ChenDT is logged in
124400:04:34.625 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
124500:04:34.625 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
124600:04:34.625 vminfo Error: Unable to open process with PID=0, error=87
124700:04:34.625 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
124800:04:34.625 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
124900:04:34.625 vminfo PID=264: \SystemRoot\System32\smss.exe
125000:04:34.625 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
125100:04:34.625 vminfo PID=336: \??\C:\XP\system32\csrss.exe
125200:04:34.625 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
125300:04:34.625 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
125400:04:34.625 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
125500:04:34.625 vminfo PID=460: C:\XP\system32\services.exe
125600:04:34.625 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
125700:04:34.625 vminfo PID=472: C:\XP\system32\lsass.exe
125800:04:34.625 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
125900:04:34.625 vminfo PID=624: C:\XP\system32\VBoxService.exe
126000:04:34.625 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
126100:04:34.625 vminfo PID=672: C:\XP\system32\svchost.exe
126200:04:34.625 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
126300:04:34.625 vminfo PID=736: C:\XP\system32\svchost.exe
126400:04:34.625 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
126500:04:34.625 vminfo PID=816: C:\XP\system32\svchost.exe
126600:04:34.625 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
126700:04:34.625 vminfo PID=868: C:\XP\system32\svchost.exe
126800:04:34.625 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
126900:04:34.625 vminfo PID=960: C:\XP\system32\spoolsv.exe
127000:04:34.625 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
127100:04:34.625 vminfo PID=1064: C:\XP\system32\svchost.exe
127200:04:34.625 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
127300:04:34.625 vminfo PID=1456: C:\XP\system32\wuauclt.exe
127400:04:34.625 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
127500:04:34.625 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
127600:04:34.625 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
127700:04:34.625 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
127800:04:34.625 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
127900:04:34.625 vminfo PID=2024: C:\XP\system32\rdpclip.exe
128000:04:34.625 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
128100:04:34.625 vminfo PID=304: C:\XP\Explorer.EXE
128200:04:34.625 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
128300:04:34.625 vminfo PID=272: C:\XP\system32\VBoxTray.exe
128400:04:34.625 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
128500:04:34.625 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
128600:04:34.625 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
128700:04:34.625 vminfo PID=780: C:\XP\system32\ctfmon.exe
128800:04:34.625 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
128900:04:34.625 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
129000:04:34.625 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
129100:04:34.625 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
129200:04:34.625 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
129300:04:34.625 vminfo PID=1108: C:\XP\system32\taskmgr.exe
129400:04:34.625 vminfo Session 1 has 8 processes total
129500:04:34.625 vminfo Adding new user=ChenDT (session 1) with 8 processes
129600:04:34.625 vminfo Handling session 1
129700:04:34.625 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
129800:04:34.625 vminfo Handling session 2
129900:04:34.625 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
130000:04:34.625 vminfo Handling session 3
130100:04:34.625 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
130200:04:34.625 vminfo Handling session 4
130300:04:34.625 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
130400:04:34.625 vminfo Handling session 5
130500:04:34.625 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
130600:04:34.625 vminfo Found 1 unique logged-in user(s)
130700:04:34.625 vminfo User ChenDT has 8 processes (session 1)
130800:04:34.625 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
130900:04:40.133 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:57:15.906000000Z (MinAdjust: 200 ms)
131000:04:40.133 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:57:18.718715300Z => -2 812 715 300 ns drift
131100:04:40.133 timesync VBoxServiceTimeSyncAdjust: Drift=-2812ms
131200:04:40.133 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=71851, NewTA=64666, DiffNew=7185, DiffMax=50072
131300:04:44.639 vminfo Found 6 sessions
131400:04:44.639 vminfo Handling session 0
131500:04:44.639 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
131600:04:44.639 vminfo Session LogonType=10 is supported -- looking up SID + type ...
131700:04:44.639 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
131800:04:44.639 vminfo No WinStation found for user=ChenDT
131900:04:44.639 vminfo Account User=ChenDT is logged in
132000:04:44.639 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
132100:04:44.639 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
132200:04:44.639 vminfo Error: Unable to open process with PID=0, error=87
132300:04:44.639 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
132400:04:44.639 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
132500:04:44.639 vminfo PID=264: \SystemRoot\System32\smss.exe
132600:04:44.639 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
132700:04:44.639 vminfo PID=336: \??\C:\XP\system32\csrss.exe
132800:04:44.639 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
132900:04:44.639 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
133000:04:44.639 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
133100:04:44.639 vminfo PID=460: C:\XP\system32\services.exe
133200:04:44.639 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
133300:04:44.639 vminfo PID=472: C:\XP\system32\lsass.exe
133400:04:44.639 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
133500:04:44.639 vminfo PID=624: C:\XP\system32\VBoxService.exe
133600:04:44.639 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
133700:04:44.639 vminfo PID=672: C:\XP\system32\svchost.exe
133800:04:44.639 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
133900:04:44.639 vminfo PID=736: C:\XP\system32\svchost.exe
134000:04:44.639 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
134100:04:44.639 vminfo PID=816: C:\XP\system32\svchost.exe
134200:04:44.639 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
134300:04:44.639 vminfo PID=868: C:\XP\system32\svchost.exe
134400:04:44.639 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
134500:04:44.639 vminfo PID=960: C:\XP\system32\spoolsv.exe
134600:04:44.639 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
134700:04:44.639 vminfo PID=1064: C:\XP\system32\svchost.exe
134800:04:44.639 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
134900:04:44.639 vminfo PID=1456: C:\XP\system32\wuauclt.exe
135000:04:44.639 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
135100:04:44.639 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
135200:04:44.639 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
135300:04:44.639 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
135400:04:44.639 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
135500:04:44.639 vminfo PID=2024: C:\XP\system32\rdpclip.exe
135600:04:44.639 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
135700:04:44.639 vminfo PID=304: C:\XP\Explorer.EXE
135800:04:44.639 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
135900:04:44.639 vminfo PID=272: C:\XP\system32\VBoxTray.exe
136000:04:44.639 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
136100:04:44.639 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
136200:04:44.639 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
136300:04:44.639 vminfo PID=780: C:\XP\system32\ctfmon.exe
136400:04:44.639 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
136500:04:44.639 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
136600:04:44.639 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
136700:04:44.639 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
136800:04:44.639 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
136900:04:44.639 vminfo PID=1108: C:\XP\system32\taskmgr.exe
137000:04:44.639 vminfo Session 1 has 8 processes total
137100:04:44.639 vminfo Adding new user=ChenDT (session 1) with 8 processes
137200:04:44.639 vminfo Handling session 1
137300:04:44.639 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
137400:04:44.639 vminfo Handling session 2
137500:04:44.639 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
137600:04:44.639 vminfo Handling session 3
137700:04:44.639 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
137800:04:44.639 vminfo Handling session 4
137900:04:44.639 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
138000:04:44.639 vminfo Handling session 5
138100:04:44.639 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
138200:04:44.639 vminfo Found 1 unique logged-in user(s)
138300:04:44.639 vminfo User ChenDT has 8 processes (session 1)
138400:04:44.639 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
138500:04:50.137 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:57:25.910000000Z (MinAdjust: 100 ms)
138600:04:50.137 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:57:25.178848700Z => 731 151 300 ns drift
138700:04:50.137 timesync VBoxServiceTimeSyncAdjust: Drift=731ms
138800:04:50.137 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=64666, NewTA=71132, DiffNew=6466, DiffMax=50072
138900:04:54.654 vminfo Found 6 sessions
139000:04:54.654 vminfo Handling session 0
139100:04:54.654 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
139200:04:54.654 vminfo Session LogonType=10 is supported -- looking up SID + type ...
139300:04:54.654 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
139400:04:54.654 vminfo No WinStation found for user=ChenDT
139500:04:54.654 vminfo Account User=ChenDT is logged in
139600:04:54.654 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
139700:04:54.654 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
139800:04:54.654 vminfo Error: Unable to open process with PID=0, error=87
139900:04:54.654 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
140000:04:54.654 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
140100:04:54.654 vminfo PID=264: \SystemRoot\System32\smss.exe
140200:04:54.654 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
140300:04:54.654 vminfo PID=336: \??\C:\XP\system32\csrss.exe
140400:04:54.654 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
140500:04:54.654 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
140600:04:54.654 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
140700:04:54.654 vminfo PID=460: C:\XP\system32\services.exe
140800:04:54.654 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
140900:04:54.654 vminfo PID=472: C:\XP\system32\lsass.exe
141000:04:54.654 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
141100:04:54.654 vminfo PID=624: C:\XP\system32\VBoxService.exe
141200:04:54.654 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
141300:04:54.654 vminfo PID=672: C:\XP\system32\svchost.exe
141400:04:54.654 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
141500:04:54.654 vminfo PID=736: C:\XP\system32\svchost.exe
141600:04:54.654 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
141700:04:54.654 vminfo PID=816: C:\XP\system32\svchost.exe
141800:04:54.654 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
141900:04:54.654 vminfo PID=868: C:\XP\system32\svchost.exe
142000:04:54.654 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
142100:04:54.654 vminfo PID=960: C:\XP\system32\spoolsv.exe
142200:04:54.654 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
142300:04:54.654 vminfo PID=1064: C:\XP\system32\svchost.exe
142400:04:54.654 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
142500:04:54.654 vminfo PID=1456: C:\XP\system32\wuauclt.exe
142600:04:54.654 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
142700:04:54.654 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
142800:04:54.654 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
142900:04:54.654 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
143000:04:54.654 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
143100:04:54.654 vminfo PID=2024: C:\XP\system32\rdpclip.exe
143200:04:54.654 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
143300:04:54.654 vminfo PID=304: C:\XP\Explorer.EXE
143400:04:54.654 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
143500:04:54.654 vminfo PID=272: C:\XP\system32\VBoxTray.exe
143600:04:54.654 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
143700:04:54.654 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
143800:04:54.654 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
143900:04:54.654 vminfo PID=780: C:\XP\system32\ctfmon.exe
144000:04:54.654 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
144100:04:54.654 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
144200:04:54.654 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
144300:04:54.654 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
144400:04:54.654 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
144500:04:54.654 vminfo PID=1108: C:\XP\system32\taskmgr.exe
144600:04:54.654 vminfo Session 1 has 8 processes total
144700:04:54.654 vminfo Adding new user=ChenDT (session 1) with 8 processes
144800:04:54.654 vminfo Handling session 1
144900:04:54.654 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
145000:04:54.654 vminfo Handling session 2
145100:04:54.654 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
145200:04:54.654 vminfo Handling session 3
145300:04:54.654 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
145400:04:54.654 vminfo Handling session 4
145500:04:54.654 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
145600:04:54.654 vminfo Handling session 5
145700:04:54.654 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
145800:04:54.654 vminfo Found 1 unique logged-in user(s)
145900:04:54.654 vminfo User ChenDT has 8 processes (session 1)
146000:04:54.654 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
146100:05:00.051 pagesharing VBoxServicePageSharingWorkerProcess: enabled=0
146200:05:00.141 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:57:35.914000000Z (MinAdjust: 100 ms)
146300:05:00.141 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:57:32.284935500Z => 3 629 064 500 ns drift
146400:05:00.141 timesync VBoxServiceTimeSyncAdjust: Drift=3629ms
146500:05:00.141 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=71132, NewTA=78245, DiffNew=7113, DiffMax=50072
146600:05:04.668 vminfo Found 6 sessions
146700:05:04.668 vminfo Handling session 0
146800:05:04.668 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
146900:05:04.668 vminfo Session LogonType=10 is supported -- looking up SID + type ...
147000:05:04.668 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
147100:05:04.668 vminfo No WinStation found for user=ChenDT
147200:05:04.668 vminfo Account User=ChenDT is logged in
147300:05:04.668 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
147400:05:04.668 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
147500:05:04.668 vminfo Error: Unable to open process with PID=0, error=87
147600:05:04.668 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
147700:05:04.668 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
147800:05:04.668 vminfo PID=264: \SystemRoot\System32\smss.exe
147900:05:04.668 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
148000:05:04.668 vminfo PID=336: \??\C:\XP\system32\csrss.exe
148100:05:04.668 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
148200:05:04.668 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
148300:05:04.668 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
148400:05:04.668 vminfo PID=460: C:\XP\system32\services.exe
148500:05:04.668 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
148600:05:04.668 vminfo PID=472: C:\XP\system32\lsass.exe
148700:05:04.668 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
148800:05:04.668 vminfo PID=624: C:\XP\system32\VBoxService.exe
148900:05:04.668 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
149000:05:04.668 vminfo PID=672: C:\XP\system32\svchost.exe
149100:05:04.668 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
149200:05:04.668 vminfo PID=736: C:\XP\system32\svchost.exe
149300:05:04.668 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
149400:05:04.668 vminfo PID=816: C:\XP\system32\svchost.exe
149500:05:04.668 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
149600:05:04.668 vminfo PID=868: C:\XP\system32\svchost.exe
149700:05:04.668 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
149800:05:04.668 vminfo PID=960: C:\XP\system32\spoolsv.exe
149900:05:04.668 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
150000:05:04.668 vminfo PID=1064: C:\XP\system32\svchost.exe
150100:05:04.668 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
150200:05:04.668 vminfo PID=1456: C:\XP\system32\wuauclt.exe
150300:05:04.668 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
150400:05:04.668 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
150500:05:04.668 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
150600:05:04.668 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
150700:05:04.668 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
150800:05:04.668 vminfo PID=2024: C:\XP\system32\rdpclip.exe
150900:05:04.668 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
151000:05:04.668 vminfo PID=304: C:\XP\Explorer.EXE
151100:05:04.668 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
151200:05:04.668 vminfo PID=272: C:\XP\system32\VBoxTray.exe
151300:05:04.668 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
151400:05:04.668 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
151500:05:04.668 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
151600:05:04.668 vminfo PID=780: C:\XP\system32\ctfmon.exe
151700:05:04.668 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
151800:05:04.668 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
151900:05:04.668 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
152000:05:04.668 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
152100:05:04.668 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
152200:05:04.668 vminfo PID=1108: C:\XP\system32\taskmgr.exe
152300:05:04.668 vminfo Session 1 has 8 processes total
152400:05:04.668 vminfo Adding new user=ChenDT (session 1) with 8 processes
152500:05:04.668 vminfo Handling session 1
152600:05:04.668 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
152700:05:04.668 vminfo Handling session 2
152800:05:04.668 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
152900:05:04.668 vminfo Handling session 3
153000:05:04.668 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
153100:05:04.668 vminfo Handling session 4
153200:05:04.668 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
153300:05:04.668 vminfo Handling session 5
153400:05:04.668 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
153500:05:04.668 vminfo Found 1 unique logged-in user(s)
153600:05:04.668 vminfo User ChenDT has 8 processes (session 1)
153700:05:04.668 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
153800:05:10.146 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:57:45.919000000Z (MinAdjust: 100 ms)
153900:05:10.146 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:57:40.101611000Z => 5 817 389 000 ns drift
154000:05:10.146 timesync VBoxServiceTimeSyncAdjust: Drift=5817ms
154100:05:10.146 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=78245, NewTA=86069, DiffNew=7824, DiffMax=50072
154200:05:14.682 vminfo Found 6 sessions
154300:05:14.682 vminfo Handling session 0
154400:05:14.682 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
154500:05:14.682 vminfo Session LogonType=10 is supported -- looking up SID + type ...
154600:05:14.682 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
154700:05:14.682 vminfo No WinStation found for user=ChenDT
154800:05:14.682 vminfo Account User=ChenDT is logged in
154900:05:14.682 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
155000:05:14.682 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
155100:05:14.682 vminfo Error: Unable to open process with PID=0, error=87
155200:05:14.682 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
155300:05:14.682 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
155400:05:14.682 vminfo PID=264: \SystemRoot\System32\smss.exe
155500:05:14.682 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
155600:05:14.682 vminfo PID=336: \??\C:\XP\system32\csrss.exe
155700:05:14.682 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
155800:05:14.682 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
155900:05:14.682 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
156000:05:14.682 vminfo PID=460: C:\XP\system32\services.exe
156100:05:14.682 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
156200:05:14.682 vminfo PID=472: C:\XP\system32\lsass.exe
156300:05:14.682 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
156400:05:14.682 vminfo PID=624: C:\XP\system32\VBoxService.exe
156500:05:14.682 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
156600:05:14.682 vminfo PID=672: C:\XP\system32\svchost.exe
156700:05:14.682 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
156800:05:14.682 vminfo PID=736: C:\XP\system32\svchost.exe
156900:05:14.682 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
157000:05:14.682 vminfo PID=816: C:\XP\system32\svchost.exe
157100:05:14.682 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
157200:05:14.682 vminfo PID=868: C:\XP\system32\svchost.exe
157300:05:14.682 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
157400:05:14.682 vminfo PID=960: C:\XP\system32\spoolsv.exe
157500:05:14.682 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
157600:05:14.682 vminfo PID=1064: C:\XP\system32\svchost.exe
157700:05:14.682 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
157800:05:14.682 vminfo PID=1456: C:\XP\system32\wuauclt.exe
157900:05:14.682 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
158000:05:14.682 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
158100:05:14.682 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
158200:05:14.682 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
158300:05:14.682 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
158400:05:14.682 vminfo PID=2024: C:\XP\system32\rdpclip.exe
158500:05:14.682 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
158600:05:14.682 vminfo PID=304: C:\XP\Explorer.EXE
158700:05:14.682 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
158800:05:14.682 vminfo PID=272: C:\XP\system32\VBoxTray.exe
158900:05:14.682 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
159000:05:14.682 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
159100:05:14.682 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
159200:05:14.682 vminfo PID=780: C:\XP\system32\ctfmon.exe
159300:05:14.682 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
159400:05:14.682 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
159500:05:14.682 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
159600:05:14.682 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
159700:05:14.682 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
159800:05:14.682 vminfo PID=1108: C:\XP\system32\taskmgr.exe
159900:05:14.682 vminfo Session 1 has 8 processes total
160000:05:14.682 vminfo Adding new user=ChenDT (session 1) with 8 processes
160100:05:14.682 vminfo Handling session 1
160200:05:14.682 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
160300:05:14.682 vminfo Handling session 2
160400:05:14.682 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
160500:05:14.682 vminfo Handling session 3
160600:05:14.682 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
160700:05:14.682 vminfo Handling session 4
160800:05:14.682 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
160900:05:14.682 vminfo Handling session 5
161000:05:14.682 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
161100:05:14.682 vminfo Found 1 unique logged-in user(s)
161200:05:14.682 vminfo User ChenDT has 8 processes (session 1)
161300:05:14.682 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
161400:05:20.150 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:57:55.923000000Z (MinAdjust: 100 ms)
161500:05:20.150 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:57:48.699904100Z => 7 223 095 900 ns drift
161600:05:20.150 timesync VBoxServiceTimeSyncAdjust: Drift=7223ms
161700:05:20.150 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=86069, NewTA=94675, DiffNew=8606, DiffMax=50072
161800:05:24.697 vminfo Found 6 sessions
161900:05:24.697 vminfo Handling session 0
162000:05:24.697 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
162100:05:24.697 vminfo Session LogonType=10 is supported -- looking up SID + type ...
162200:05:24.697 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
162300:05:24.697 vminfo No WinStation found for user=ChenDT
162400:05:24.697 vminfo Account User=ChenDT is logged in
162500:05:24.697 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
162600:05:24.697 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
162700:05:24.697 vminfo Error: Unable to open process with PID=0, error=87
162800:05:24.697 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
162900:05:24.697 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
163000:05:24.697 vminfo PID=264: \SystemRoot\System32\smss.exe
163100:05:24.697 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
163200:05:24.697 vminfo PID=336: \??\C:\XP\system32\csrss.exe
163300:05:24.697 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
163400:05:24.697 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
163500:05:24.697 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
163600:05:24.697 vminfo PID=460: C:\XP\system32\services.exe
163700:05:24.697 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
163800:05:24.697 vminfo PID=472: C:\XP\system32\lsass.exe
163900:05:24.697 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
164000:05:24.697 vminfo PID=624: C:\XP\system32\VBoxService.exe
164100:05:24.697 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
164200:05:24.697 vminfo PID=672: C:\XP\system32\svchost.exe
164300:05:24.697 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
164400:05:24.697 vminfo PID=736: C:\XP\system32\svchost.exe
164500:05:24.697 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
164600:05:24.697 vminfo PID=816: C:\XP\system32\svchost.exe
164700:05:24.697 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
164800:05:24.697 vminfo PID=868: C:\XP\system32\svchost.exe
164900:05:24.697 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
165000:05:24.697 vminfo PID=960: C:\XP\system32\spoolsv.exe
165100:05:24.697 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
165200:05:24.697 vminfo PID=1064: C:\XP\system32\svchost.exe
165300:05:24.697 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
165400:05:24.697 vminfo PID=1456: C:\XP\system32\wuauclt.exe
165500:05:24.697 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
165600:05:24.697 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
165700:05:24.697 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
165800:05:24.697 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
165900:05:24.697 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
166000:05:24.697 vminfo PID=2024: C:\XP\system32\rdpclip.exe
166100:05:24.697 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
166200:05:24.697 vminfo PID=304: C:\XP\Explorer.EXE
166300:05:24.697 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
166400:05:24.697 vminfo PID=272: C:\XP\system32\VBoxTray.exe
166500:05:24.697 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
166600:05:24.697 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
166700:05:24.697 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
166800:05:24.697 vminfo PID=780: C:\XP\system32\ctfmon.exe
166900:05:24.697 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
167000:05:24.697 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
167100:05:24.697 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
167200:05:24.697 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
167300:05:24.697 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
167400:05:24.697 vminfo PID=1108: C:\XP\system32\taskmgr.exe
167500:05:24.697 vminfo Session 1 has 8 processes total
167600:05:24.697 vminfo Adding new user=ChenDT (session 1) with 8 processes
167700:05:24.697 vminfo Handling session 1
167800:05:24.697 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
167900:05:24.697 vminfo Handling session 2
168000:05:24.697 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
168100:05:24.697 vminfo Handling session 3
168200:05:24.697 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
168300:05:24.697 vminfo Handling session 4
168400:05:24.697 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
168500:05:24.697 vminfo Handling session 5
168600:05:24.697 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
168700:05:24.697 vminfo Found 1 unique logged-in user(s)
168800:05:24.697 vminfo User ChenDT has 8 processes (session 1)
168900:05:24.697 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
169000:05:30.155 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:58:05.928000000Z (MinAdjust: 100 ms)
169100:05:30.155 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:57:58.157936600Z => 7 770 063 400 ns drift
169200:05:30.155 timesync VBoxServiceTimeSyncAdjust: Drift=7770ms
169300:05:30.155 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=94675, NewTA=104142, DiffNew=9467, DiffMax=50072
169400:05:34.701 vminfo Found 6 sessions
169500:05:34.701 vminfo Handling session 0
169600:05:34.701 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
169700:05:34.701 vminfo Session LogonType=10 is supported -- looking up SID + type ...
169800:05:34.701 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
169900:05:34.701 vminfo No WinStation found for user=ChenDT
170000:05:34.701 vminfo Account User=ChenDT is logged in
170100:05:34.701 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
170200:05:34.701 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
170300:05:34.701 vminfo Error: Unable to open process with PID=0, error=87
170400:05:34.701 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
170500:05:34.701 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
170600:05:34.701 vminfo PID=264: \SystemRoot\System32\smss.exe
170700:05:34.701 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
170800:05:34.701 vminfo PID=336: \??\C:\XP\system32\csrss.exe
170900:05:34.701 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
171000:05:34.701 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
171100:05:34.701 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
171200:05:34.701 vminfo PID=460: C:\XP\system32\services.exe
171300:05:34.701 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
171400:05:34.701 vminfo PID=472: C:\XP\system32\lsass.exe
171500:05:34.701 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
171600:05:34.701 vminfo PID=624: C:\XP\system32\VBoxService.exe
171700:05:34.701 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
171800:05:34.701 vminfo PID=672: C:\XP\system32\svchost.exe
171900:05:34.701 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
172000:05:34.701 vminfo PID=736: C:\XP\system32\svchost.exe
172100:05:34.701 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
172200:05:34.701 vminfo PID=816: C:\XP\system32\svchost.exe
172300:05:34.701 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
172400:05:34.701 vminfo PID=868: C:\XP\system32\svchost.exe
172500:05:34.701 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
172600:05:34.701 vminfo PID=960: C:\XP\system32\spoolsv.exe
172700:05:34.701 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
172800:05:34.701 vminfo PID=1064: C:\XP\system32\svchost.exe
172900:05:34.701 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
173000:05:34.701 vminfo PID=1456: C:\XP\system32\wuauclt.exe
173100:05:34.701 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
173200:05:34.701 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
173300:05:34.701 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
173400:05:34.701 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
173500:05:34.701 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
173600:05:34.701 vminfo PID=2024: C:\XP\system32\rdpclip.exe
173700:05:34.701 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
173800:05:34.701 vminfo PID=304: C:\XP\Explorer.EXE
173900:05:34.701 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
174000:05:34.701 vminfo PID=272: C:\XP\system32\VBoxTray.exe
174100:05:34.701 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
174200:05:34.701 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
174300:05:34.701 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
174400:05:34.701 vminfo PID=780: C:\XP\system32\ctfmon.exe
174500:05:34.701 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
174600:05:34.701 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
174700:05:34.701 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
174800:05:34.701 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
174900:05:34.701 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
175000:05:34.701 vminfo PID=1108: C:\XP\system32\taskmgr.exe
175100:05:34.701 vminfo Session 1 has 8 processes total
175200:05:34.701 vminfo Adding new user=ChenDT (session 1) with 8 processes
175300:05:34.701 vminfo Handling session 1
175400:05:34.701 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
175500:05:34.701 vminfo Handling session 2
175600:05:34.701 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
175700:05:34.701 vminfo Handling session 3
175800:05:34.701 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
175900:05:34.701 vminfo Handling session 4
176000:05:34.701 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
176100:05:34.701 vminfo Handling session 5
176200:05:34.701 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
176300:05:34.701 vminfo Found 1 unique logged-in user(s)
176400:05:34.701 vminfo User ChenDT has 8 processes (session 1)
176500:05:34.701 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
176600:05:40.159 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:58:15.932000000Z (MinAdjust: 100 ms)
176700:05:40.159 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:58:08.561722400Z => 7 370 277 600 ns drift
176800:05:40.159 timesync VBoxServiceTimeSyncAdjust: Drift=7370ms
176900:05:40.159 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=104142, NewTA=114556, DiffNew=10414, DiffMax=50072
177000:05:44.715 vminfo Found 6 sessions
177100:05:44.715 vminfo Handling session 0
177200:05:44.715 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
177300:05:44.715 vminfo Session LogonType=10 is supported -- looking up SID + type ...
177400:05:44.715 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
177500:05:44.715 vminfo No WinStation found for user=ChenDT
177600:05:44.715 vminfo Account User=ChenDT is logged in
177700:05:44.715 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
177800:05:44.715 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
177900:05:44.715 vminfo Error: Unable to open process with PID=0, error=87
178000:05:44.715 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
178100:05:44.715 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
178200:05:44.715 vminfo PID=264: \SystemRoot\System32\smss.exe
178300:05:44.715 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
178400:05:44.715 vminfo PID=336: \??\C:\XP\system32\csrss.exe
178500:05:44.715 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
178600:05:44.715 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
178700:05:44.715 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
178800:05:44.715 vminfo PID=460: C:\XP\system32\services.exe
178900:05:44.715 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
179000:05:44.715 vminfo PID=472: C:\XP\system32\lsass.exe
179100:05:44.715 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
179200:05:44.715 vminfo PID=624: C:\XP\system32\VBoxService.exe
179300:05:44.715 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
179400:05:44.715 vminfo PID=672: C:\XP\system32\svchost.exe
179500:05:44.715 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
179600:05:44.715 vminfo PID=736: C:\XP\system32\svchost.exe
179700:05:44.715 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
179800:05:44.715 vminfo PID=816: C:\XP\system32\svchost.exe
179900:05:44.715 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
180000:05:44.715 vminfo PID=868: C:\XP\system32\svchost.exe
180100:05:44.715 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
180200:05:44.715 vminfo PID=960: C:\XP\system32\spoolsv.exe
180300:05:44.715 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
180400:05:44.715 vminfo PID=1064: C:\XP\system32\svchost.exe
180500:05:44.715 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
180600:05:44.715 vminfo PID=1456: C:\XP\system32\wuauclt.exe
180700:05:44.715 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
180800:05:44.715 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
180900:05:44.715 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
181000:05:44.715 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
181100:05:44.715 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
181200:05:44.715 vminfo PID=2024: C:\XP\system32\rdpclip.exe
181300:05:44.715 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
181400:05:44.715 vminfo PID=304: C:\XP\Explorer.EXE
181500:05:44.715 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
181600:05:44.715 vminfo PID=272: C:\XP\system32\VBoxTray.exe
181700:05:44.715 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
181800:05:44.715 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
181900:05:44.715 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
182000:05:44.715 vminfo PID=780: C:\XP\system32\ctfmon.exe
182100:05:44.715 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
182200:05:44.715 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
182300:05:44.715 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
182400:05:44.715 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
182500:05:44.715 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
182600:05:44.715 vminfo PID=1108: C:\XP\system32\taskmgr.exe
182700:05:44.715 vminfo Session 1 has 8 processes total
182800:05:44.715 vminfo Adding new user=ChenDT (session 1) with 8 processes
182900:05:44.715 vminfo Handling session 1
183000:05:44.715 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
183100:05:44.715 vminfo Handling session 2
183200:05:44.715 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
183300:05:44.715 vminfo Handling session 3
183400:05:44.715 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
183500:05:44.715 vminfo Handling session 4
183600:05:44.715 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
183700:05:44.715 vminfo Handling session 5
183800:05:44.715 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
183900:05:44.715 vminfo Found 1 unique logged-in user(s)
184000:05:44.715 vminfo User ChenDT has 8 processes (session 1)
184100:05:44.715 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
184200:05:50.163 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:58:25.936000000Z (MinAdjust: 100 ms)
184300:05:50.163 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:58:20.005866800Z => 5 930 133 200 ns drift
184400:05:50.163 timesync VBoxServiceTimeSyncAdjust: Drift=5930ms
184500:05:50.163 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=114556, NewTA=126011, DiffNew=11455, DiffMax=50072
184600:05:54.730 vminfo Found 6 sessions
184700:05:54.730 vminfo Handling session 0
184800:05:54.730 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
184900:05:54.730 vminfo Session LogonType=10 is supported -- looking up SID + type ...
185000:05:54.730 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
185100:05:54.730 vminfo No WinStation found for user=ChenDT
185200:05:54.730 vminfo Account User=ChenDT is logged in
185300:05:54.730 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
185400:05:54.730 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
185500:05:54.730 vminfo Error: Unable to open process with PID=0, error=87
185600:05:54.730 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
185700:05:54.730 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
185800:05:54.730 vminfo PID=264: \SystemRoot\System32\smss.exe
185900:05:54.730 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
186000:05:54.730 vminfo PID=336: \??\C:\XP\system32\csrss.exe
186100:05:54.730 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
186200:05:54.730 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
186300:05:54.730 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
186400:05:54.730 vminfo PID=460: C:\XP\system32\services.exe
186500:05:54.730 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
186600:05:54.730 vminfo PID=472: C:\XP\system32\lsass.exe
186700:05:54.730 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
186800:05:54.730 vminfo PID=624: C:\XP\system32\VBoxService.exe
186900:05:54.730 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
187000:05:54.730 vminfo PID=672: C:\XP\system32\svchost.exe
187100:05:54.730 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
187200:05:54.730 vminfo PID=736: C:\XP\system32\svchost.exe
187300:05:54.730 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
187400:05:54.730 vminfo PID=816: C:\XP\system32\svchost.exe
187500:05:54.730 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
187600:05:54.730 vminfo PID=868: C:\XP\system32\svchost.exe
187700:05:54.730 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
187800:05:54.730 vminfo PID=960: C:\XP\system32\spoolsv.exe
187900:05:54.730 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
188000:05:54.730 vminfo PID=1064: C:\XP\system32\svchost.exe
188100:05:54.730 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
188200:05:54.730 vminfo PID=1456: C:\XP\system32\wuauclt.exe
188300:05:54.730 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
188400:05:54.730 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
188500:05:54.730 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
188600:05:54.730 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
188700:05:54.730 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
188800:05:54.730 vminfo PID=2024: C:\XP\system32\rdpclip.exe
188900:05:54.730 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
189000:05:54.730 vminfo PID=304: C:\XP\Explorer.EXE
189100:05:54.730 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
189200:05:54.730 vminfo PID=272: C:\XP\system32\VBoxTray.exe
189300:05:54.730 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
189400:05:54.730 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
189500:05:54.730 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
189600:05:54.730 vminfo PID=780: C:\XP\system32\ctfmon.exe
189700:05:54.730 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
189800:05:54.730 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
189900:05:54.730 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
190000:05:54.730 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
190100:05:54.730 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
190200:05:54.730 vminfo PID=1108: C:\XP\system32\taskmgr.exe
190300:05:54.730 vminfo Session 1 has 8 processes total
190400:05:54.730 vminfo Adding new user=ChenDT (session 1) with 8 processes
190500:05:54.730 vminfo Handling session 1
190600:05:54.730 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
190700:05:54.730 vminfo Handling session 2
190800:05:54.730 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
190900:05:54.730 vminfo Handling session 3
191000:05:54.730 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
191100:05:54.730 vminfo Handling session 4
191200:05:54.730 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
191300:05:54.730 vminfo Handling session 5
191400:05:54.730 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
191500:05:54.730 vminfo Found 1 unique logged-in user(s)
191600:05:54.730 vminfo User ChenDT has 8 processes (session 1)
191700:05:54.730 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
191800:06:00.058 pagesharing VBoxServicePageSharingWorkerProcess: enabled=0
191900:06:00.168 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:58:35.941000000Z (MinAdjust: 100 ms)
192000:06:00.168 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:58:32.594365700Z => 3 346 634 300 ns drift
192100:06:00.168 timesync VBoxServiceTimeSyncAdjust: Drift=3346ms
192200:06:00.168 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=126011, NewTA=138612, DiffNew=12601, DiffMax=50072
192300:06:04.744 vminfo Found 6 sessions
192400:06:04.744 vminfo Handling session 0
192500:06:04.744 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
192600:06:04.744 vminfo Session LogonType=10 is supported -- looking up SID + type ...
192700:06:04.744 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
192800:06:04.744 vminfo No WinStation found for user=ChenDT
192900:06:04.744 vminfo Account User=ChenDT is logged in
193000:06:04.744 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
193100:06:04.744 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
193200:06:04.744 vminfo Error: Unable to open process with PID=0, error=87
193300:06:04.744 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
193400:06:04.744 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
193500:06:04.744 vminfo PID=264: \SystemRoot\System32\smss.exe
193600:06:04.744 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
193700:06:04.744 vminfo PID=336: \??\C:\XP\system32\csrss.exe
193800:06:04.744 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
193900:06:04.744 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
194000:06:04.744 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
194100:06:04.744 vminfo PID=460: C:\XP\system32\services.exe
194200:06:04.744 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
194300:06:04.744 vminfo PID=472: C:\XP\system32\lsass.exe
194400:06:04.744 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
194500:06:04.744 vminfo PID=624: C:\XP\system32\VBoxService.exe
194600:06:04.744 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
194700:06:04.744 vminfo PID=672: C:\XP\system32\svchost.exe
194800:06:04.744 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
194900:06:04.744 vminfo PID=736: C:\XP\system32\svchost.exe
195000:06:04.744 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
195100:06:04.744 vminfo PID=816: C:\XP\system32\svchost.exe
195200:06:04.744 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
195300:06:04.744 vminfo PID=868: C:\XP\system32\svchost.exe
195400:06:04.744 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
195500:06:04.744 vminfo PID=960: C:\XP\system32\spoolsv.exe
195600:06:04.744 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
195700:06:04.744 vminfo PID=1064: C:\XP\system32\svchost.exe
195800:06:04.744 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
195900:06:04.744 vminfo PID=1456: C:\XP\system32\wuauclt.exe
196000:06:04.744 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
196100:06:04.744 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
196200:06:04.744 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
196300:06:04.744 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
196400:06:04.744 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
196500:06:04.744 vminfo PID=2024: C:\XP\system32\rdpclip.exe
196600:06:04.744 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
196700:06:04.744 vminfo PID=304: C:\XP\Explorer.EXE
196800:06:04.744 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
196900:06:04.744 vminfo PID=272: C:\XP\system32\VBoxTray.exe
197000:06:04.744 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
197100:06:04.744 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
197200:06:04.744 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
197300:06:04.744 vminfo PID=780: C:\XP\system32\ctfmon.exe
197400:06:04.744 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
197500:06:04.744 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
197600:06:04.744 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
197700:06:04.744 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
197800:06:04.744 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
197900:06:04.744 vminfo PID=1108: C:\XP\system32\taskmgr.exe
198000:06:04.744 vminfo Session 1 has 8 processes total
198100:06:04.744 vminfo Adding new user=ChenDT (session 1) with 8 processes
198200:06:04.744 vminfo Handling session 1
198300:06:04.744 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
198400:06:04.744 vminfo Handling session 2
198500:06:04.744 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
198600:06:04.744 vminfo Handling session 3
198700:06:04.744 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
198800:06:04.744 vminfo Handling session 4
198900:06:04.744 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
199000:06:04.744 vminfo Handling session 5
199100:06:04.744 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
199200:06:04.744 vminfo Found 1 unique logged-in user(s)
199300:06:04.744 vminfo User ChenDT has 8 processes (session 1)
199400:06:04.744 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
199500:06:10.172 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:58:45.945000000Z (MinAdjust: 200 ms)
199600:06:10.172 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:58:46.441704500Z => -496 704 500 ns drift
199700:06:10.172 timesync VBoxServiceTimeSyncAdjust: Drift=-496ms
199800:06:10.172 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=138612, NewTA=124751, DiffNew=13861, DiffMax=50072
199900:06:14.759 vminfo Found 6 sessions
200000:06:14.759 vminfo Handling session 0
200100:06:14.759 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
200200:06:14.759 vminfo Session LogonType=10 is supported -- looking up SID + type ...
200300:06:14.759 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
200400:06:14.759 vminfo No WinStation found for user=ChenDT
200500:06:14.759 vminfo Account User=ChenDT is logged in
200600:06:14.759 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
200700:06:14.759 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
200800:06:14.759 vminfo Error: Unable to open process with PID=0, error=87
200900:06:14.759 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
201000:06:14.759 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
201100:06:14.759 vminfo PID=264: \SystemRoot\System32\smss.exe
201200:06:14.759 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
201300:06:14.759 vminfo PID=336: \??\C:\XP\system32\csrss.exe
201400:06:14.759 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
201500:06:14.759 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
201600:06:14.759 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
201700:06:14.759 vminfo PID=460: C:\XP\system32\services.exe
201800:06:14.759 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
201900:06:14.759 vminfo PID=472: C:\XP\system32\lsass.exe
202000:06:14.759 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
202100:06:14.759 vminfo PID=624: C:\XP\system32\VBoxService.exe
202200:06:14.759 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
202300:06:14.759 vminfo PID=672: C:\XP\system32\svchost.exe
202400:06:14.759 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
202500:06:14.759 vminfo PID=736: C:\XP\system32\svchost.exe
202600:06:14.759 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
202700:06:14.759 vminfo PID=816: C:\XP\system32\svchost.exe
202800:06:14.759 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
202900:06:14.759 vminfo PID=868: C:\XP\system32\svchost.exe
203000:06:14.759 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
203100:06:14.759 vminfo PID=960: C:\XP\system32\spoolsv.exe
203200:06:14.759 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
203300:06:14.759 vminfo PID=1064: C:\XP\system32\svchost.exe
203400:06:14.759 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
203500:06:14.759 vminfo PID=1456: C:\XP\system32\wuauclt.exe
203600:06:14.759 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
203700:06:14.759 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
203800:06:14.759 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
203900:06:14.759 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
204000:06:14.759 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
204100:06:14.759 vminfo PID=2024: C:\XP\system32\rdpclip.exe
204200:06:14.759 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
204300:06:14.759 vminfo PID=304: C:\XP\Explorer.EXE
204400:06:14.759 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
204500:06:14.759 vminfo PID=272: C:\XP\system32\VBoxTray.exe
204600:06:14.759 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
204700:06:14.759 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
204800:06:14.759 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
204900:06:14.759 vminfo PID=780: C:\XP\system32\ctfmon.exe
205000:06:14.759 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
205100:06:14.759 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
205200:06:14.759 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
205300:06:14.759 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
205400:06:14.759 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
205500:06:14.759 vminfo PID=1108: C:\XP\system32\taskmgr.exe
205600:06:14.759 vminfo Session 1 has 8 processes total
205700:06:14.759 vminfo Adding new user=ChenDT (session 1) with 8 processes
205800:06:14.759 vminfo Handling session 1
205900:06:14.759 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
206000:06:14.759 vminfo Handling session 2
206100:06:14.759 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
206200:06:14.759 vminfo Handling session 3
206300:06:14.759 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
206400:06:14.759 vminfo Handling session 4
206500:06:14.759 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
206600:06:14.759 vminfo Handling session 5
206700:06:14.759 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
206800:06:14.759 vminfo Found 1 unique logged-in user(s)
206900:06:14.759 vminfo User ChenDT has 8 processes (session 1)
207000:06:14.759 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
207100:06:20.176 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:58:55.950000000Z (MinAdjust: 200 ms)
207200:06:20.176 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:58:58.904329400Z => -2 954 329 400 ns drift
207300:06:20.176 timesync VBoxServiceTimeSyncAdjust: Drift=-2954ms
207400:06:20.176 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=124751, NewTA=112276, DiffNew=12475, DiffMax=50072
207500:06:24.773 vminfo Found 6 sessions
207600:06:24.773 vminfo Handling session 0
207700:06:24.773 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
207800:06:24.773 vminfo Session LogonType=10 is supported -- looking up SID + type ...
207900:06:24.773 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
208000:06:24.773 vminfo No WinStation found for user=ChenDT
208100:06:24.773 vminfo Account User=ChenDT is logged in
208200:06:24.773 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
208300:06:24.773 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
208400:06:24.773 vminfo Error: Unable to open process with PID=0, error=87
208500:06:24.773 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
208600:06:24.773 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
208700:06:24.773 vminfo PID=264: \SystemRoot\System32\smss.exe
208800:06:24.773 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
208900:06:24.773 vminfo PID=336: \??\C:\XP\system32\csrss.exe
209000:06:24.773 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
209100:06:24.773 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
209200:06:24.773 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
209300:06:24.773 vminfo PID=460: C:\XP\system32\services.exe
209400:06:24.773 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
209500:06:24.773 vminfo PID=472: C:\XP\system32\lsass.exe
209600:06:24.773 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
209700:06:24.773 vminfo PID=624: C:\XP\system32\VBoxService.exe
209800:06:24.773 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
209900:06:24.773 vminfo PID=672: C:\XP\system32\svchost.exe
210000:06:24.773 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
210100:06:24.773 vminfo PID=736: C:\XP\system32\svchost.exe
210200:06:24.773 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
210300:06:24.773 vminfo PID=816: C:\XP\system32\svchost.exe
210400:06:24.773 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
210500:06:24.773 vminfo PID=868: C:\XP\system32\svchost.exe
210600:06:24.773 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
210700:06:24.773 vminfo PID=960: C:\XP\system32\spoolsv.exe
210800:06:24.773 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
210900:06:24.773 vminfo PID=1064: C:\XP\system32\svchost.exe
211000:06:24.773 vminfo PID=1456: (Interactive: false) 0:999 <-> 0:52808
211100:06:24.773 vminfo PID=1456: C:\XP\system32\wuauclt.exe
211200:06:24.773 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
211300:06:24.773 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
211400:06:24.773 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
211500:06:24.773 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
211600:06:24.773 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
211700:06:24.773 vminfo PID=2024: C:\XP\system32\rdpclip.exe
211800:06:24.773 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
211900:06:24.773 vminfo PID=304: C:\XP\Explorer.EXE
212000:06:24.773 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
212100:06:24.773 vminfo PID=272: C:\XP\system32\VBoxTray.exe
212200:06:24.773 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
212300:06:24.773 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
212400:06:24.773 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
212500:06:24.773 vminfo PID=780: C:\XP\system32\ctfmon.exe
212600:06:24.773 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
212700:06:24.773 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
212800:06:24.773 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
212900:06:24.773 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
213000:06:24.773 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
213100:06:24.773 vminfo PID=1108: C:\XP\system32\taskmgr.exe
213200:06:24.773 vminfo Session 1 has 8 processes total
213300:06:24.773 vminfo Adding new user=ChenDT (session 1) with 8 processes
213400:06:24.773 vminfo Handling session 1
213500:06:24.773 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
213600:06:24.773 vminfo Handling session 2
213700:06:24.773 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
213800:06:24.773 vminfo Handling session 3
213900:06:24.773 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
214000:06:24.773 vminfo Handling session 4
214100:06:24.773 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
214200:06:24.773 vminfo Handling session 5
214300:06:24.773 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
214400:06:24.773 vminfo Found 1 unique logged-in user(s)
214500:06:24.773 vminfo User ChenDT has 8 processes (session 1)
214600:06:24.773 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
214700:06:30.181 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:59:05.954000000Z (MinAdjust: 200 ms)
214800:06:30.181 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:59:10.120701800Z => -4 166 701 800 ns drift
214900:06:30.181 timesync VBoxServiceTimeSyncAdjust: Drift=-4166ms
215000:06:30.181 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=112276, NewTA=101049, DiffNew=11227, DiffMax=50072
215100:06:34.787 vminfo Found 6 sessions
215200:06:34.787 vminfo Handling session 0
215300:06:34.787 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
215400:06:34.787 vminfo Session LogonType=10 is supported -- looking up SID + type ...
215500:06:34.787 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
215600:06:34.787 vminfo No WinStation found for user=ChenDT
215700:06:34.787 vminfo Account User=ChenDT is logged in
215800:06:34.787 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
215900:06:34.787 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
216000:06:34.787 vminfo Error: Unable to open process with PID=0, error=87
216100:06:34.787 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
216200:06:34.787 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
216300:06:34.787 vminfo PID=264: \SystemRoot\System32\smss.exe
216400:06:34.787 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
216500:06:34.787 vminfo PID=336: \??\C:\XP\system32\csrss.exe
216600:06:34.787 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
216700:06:34.787 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
216800:06:34.787 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
216900:06:34.787 vminfo PID=460: C:\XP\system32\services.exe
217000:06:34.787 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
217100:06:34.787 vminfo PID=472: C:\XP\system32\lsass.exe
217200:06:34.787 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
217300:06:34.787 vminfo PID=624: C:\XP\system32\VBoxService.exe
217400:06:34.787 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
217500:06:34.787 vminfo PID=672: C:\XP\system32\svchost.exe
217600:06:34.787 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
217700:06:34.787 vminfo PID=736: C:\XP\system32\svchost.exe
217800:06:34.787 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
217900:06:34.787 vminfo PID=816: C:\XP\system32\svchost.exe
218000:06:34.787 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
218100:06:34.787 vminfo PID=868: C:\XP\system32\svchost.exe
218200:06:34.787 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
218300:06:34.787 vminfo PID=960: C:\XP\system32\spoolsv.exe
218400:06:34.787 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
218500:06:34.787 vminfo PID=1064: C:\XP\system32\svchost.exe
218600:06:34.787 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
218700:06:34.787 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
218800:06:34.787 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
218900:06:34.787 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
219000:06:34.787 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
219100:06:34.787 vminfo PID=2024: C:\XP\system32\rdpclip.exe
219200:06:34.787 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
219300:06:34.787 vminfo PID=304: C:\XP\Explorer.EXE
219400:06:34.787 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
219500:06:34.787 vminfo PID=272: C:\XP\system32\VBoxTray.exe
219600:06:34.787 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
219700:06:34.787 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
219800:06:34.787 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
219900:06:34.787 vminfo PID=780: C:\XP\system32\ctfmon.exe
220000:06:34.787 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
220100:06:34.787 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
220200:06:34.787 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
220300:06:34.787 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
220400:06:34.787 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
220500:06:34.787 vminfo PID=1108: C:\XP\system32\taskmgr.exe
220600:06:34.787 vminfo Session 1 has 8 processes total
220700:06:34.787 vminfo Adding new user=ChenDT (session 1) with 8 processes
220800:06:34.787 vminfo Handling session 1
220900:06:34.787 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
221000:06:34.787 vminfo Handling session 2
221100:06:34.787 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
221200:06:34.787 vminfo Handling session 3
221300:06:34.787 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
221400:06:34.787 vminfo Handling session 4
221500:06:34.787 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
221600:06:34.787 vminfo Handling session 5
221700:06:34.787 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
221800:06:34.787 vminfo Found 1 unique logged-in user(s)
221900:06:34.787 vminfo User ChenDT has 8 processes (session 1)
222000:06:34.787 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
222100:06:40.185 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:59:15.958000000Z (MinAdjust: 200 ms)
222200:06:40.185 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:59:20.215496900Z => -4 257 496 900 ns drift
222300:06:40.185 timesync VBoxServiceTimeSyncAdjust: Drift=-4257ms
222400:06:40.185 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=101049, NewTA=90945, DiffNew=10104, DiffMax=50072
222500:06:44.802 vminfo Found 6 sessions
222600:06:44.802 vminfo Handling session 0
222700:06:44.802 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
222800:06:44.802 vminfo Session LogonType=10 is supported -- looking up SID + type ...
222900:06:44.802 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
223000:06:44.802 vminfo No WinStation found for user=ChenDT
223100:06:44.802 vminfo Account User=ChenDT is logged in
223200:06:44.802 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
223300:06:44.802 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
223400:06:44.802 vminfo Error: Unable to open process with PID=0, error=87
223500:06:44.802 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
223600:06:44.802 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
223700:06:44.802 vminfo PID=264: \SystemRoot\System32\smss.exe
223800:06:44.802 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
223900:06:44.802 vminfo PID=336: \??\C:\XP\system32\csrss.exe
224000:06:44.802 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
224100:06:44.802 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
224200:06:44.802 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
224300:06:44.802 vminfo PID=460: C:\XP\system32\services.exe
224400:06:44.802 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
224500:06:44.802 vminfo PID=472: C:\XP\system32\lsass.exe
224600:06:44.802 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
224700:06:44.802 vminfo PID=624: C:\XP\system32\VBoxService.exe
224800:06:44.802 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
224900:06:44.802 vminfo PID=672: C:\XP\system32\svchost.exe
225000:06:44.802 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
225100:06:44.802 vminfo PID=736: C:\XP\system32\svchost.exe
225200:06:44.802 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
225300:06:44.802 vminfo PID=816: C:\XP\system32\svchost.exe
225400:06:44.802 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
225500:06:44.802 vminfo PID=868: C:\XP\system32\svchost.exe
225600:06:44.802 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
225700:06:44.802 vminfo PID=960: C:\XP\system32\spoolsv.exe
225800:06:44.802 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
225900:06:44.802 vminfo PID=1064: C:\XP\system32\svchost.exe
226000:06:44.802 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
226100:06:44.802 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
226200:06:44.802 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
226300:06:44.802 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
226400:06:44.802 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
226500:06:44.802 vminfo PID=2024: C:\XP\system32\rdpclip.exe
226600:06:44.802 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
226700:06:44.802 vminfo PID=304: C:\XP\Explorer.EXE
226800:06:44.802 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
226900:06:44.802 vminfo PID=272: C:\XP\system32\VBoxTray.exe
227000:06:44.802 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
227100:06:44.802 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
227200:06:44.802 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
227300:06:44.802 vminfo PID=780: C:\XP\system32\ctfmon.exe
227400:06:44.802 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
227500:06:44.802 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
227600:06:44.802 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
227700:06:44.802 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
227800:06:44.802 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
227900:06:44.802 vminfo PID=1108: C:\XP\system32\taskmgr.exe
228000:06:44.802 vminfo Session 1 has 8 processes total
228100:06:44.802 vminfo Adding new user=ChenDT (session 1) with 8 processes
228200:06:44.802 vminfo Handling session 1
228300:06:44.802 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
228400:06:44.802 vminfo Handling session 2
228500:06:44.802 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
228600:06:44.802 vminfo Handling session 3
228700:06:44.802 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
228800:06:44.802 vminfo Handling session 4
228900:06:44.802 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
229000:06:44.802 vminfo Handling session 5
229100:06:44.802 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
229200:06:44.802 vminfo Found 1 unique logged-in user(s)
229300:06:44.802 vminfo User ChenDT has 8 processes (session 1)
229400:06:44.802 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
229500:06:50.190 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:59:25.963000000Z (MinAdjust: 200 ms)
229600:06:50.190 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:59:29.300902400Z => -3 337 902 400 ns drift
229700:06:50.190 timesync VBoxServiceTimeSyncAdjust: Drift=-3337ms
229800:06:50.190 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=90945, NewTA=81851, DiffNew=9094, DiffMax=50072
229900:06:54.816 vminfo Found 6 sessions
230000:06:54.816 vminfo Handling session 0
230100:06:54.816 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
230200:06:54.816 vminfo Session LogonType=10 is supported -- looking up SID + type ...
230300:06:54.816 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
230400:06:54.816 vminfo No WinStation found for user=ChenDT
230500:06:54.816 vminfo Account User=ChenDT is logged in
230600:06:54.816 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
230700:06:54.816 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
230800:06:54.816 vminfo Error: Unable to open process with PID=0, error=87
230900:06:54.816 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
231000:06:54.816 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
231100:06:54.816 vminfo PID=264: \SystemRoot\System32\smss.exe
231200:06:54.816 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
231300:06:54.816 vminfo PID=336: \??\C:\XP\system32\csrss.exe
231400:06:54.816 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
231500:06:54.816 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
231600:06:54.816 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
231700:06:54.816 vminfo PID=460: C:\XP\system32\services.exe
231800:06:54.816 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
231900:06:54.816 vminfo PID=472: C:\XP\system32\lsass.exe
232000:06:54.816 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
232100:06:54.816 vminfo PID=624: C:\XP\system32\VBoxService.exe
232200:06:54.816 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
232300:06:54.816 vminfo PID=672: C:\XP\system32\svchost.exe
232400:06:54.816 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
232500:06:54.816 vminfo PID=736: C:\XP\system32\svchost.exe
232600:06:54.816 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
232700:06:54.816 vminfo PID=816: C:\XP\system32\svchost.exe
232800:06:54.816 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
232900:06:54.816 vminfo PID=868: C:\XP\system32\svchost.exe
233000:06:54.816 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
233100:06:54.816 vminfo PID=960: C:\XP\system32\spoolsv.exe
233200:06:54.816 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
233300:06:54.816 vminfo PID=1064: C:\XP\system32\svchost.exe
233400:06:54.816 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
233500:06:54.816 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
233600:06:54.816 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
233700:06:54.816 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
233800:06:54.816 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
233900:06:54.816 vminfo PID=2024: C:\XP\system32\rdpclip.exe
234000:06:54.816 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
234100:06:54.816 vminfo PID=304: C:\XP\Explorer.EXE
234200:06:54.816 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
234300:06:54.816 vminfo PID=272: C:\XP\system32\VBoxTray.exe
234400:06:54.816 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
234500:06:54.816 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
234600:06:54.816 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
234700:06:54.816 vminfo PID=780: C:\XP\system32\ctfmon.exe
234800:06:54.816 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
234900:06:54.816 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
235000:06:54.816 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
235100:06:54.816 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
235200:06:54.816 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
235300:06:54.816 vminfo PID=1108: C:\XP\system32\taskmgr.exe
235400:06:54.816 vminfo Session 1 has 8 processes total
235500:06:54.816 vminfo Adding new user=ChenDT (session 1) with 8 processes
235600:06:54.816 vminfo Handling session 1
235700:06:54.816 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
235800:06:54.816 vminfo Handling session 2
235900:06:54.816 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
236000:06:54.816 vminfo Handling session 3
236100:06:54.816 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
236200:06:54.816 vminfo Handling session 4
236300:06:54.816 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
236400:06:54.816 vminfo Handling session 5
236500:06:54.816 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
236600:06:54.816 vminfo Found 1 unique logged-in user(s)
236700:06:54.816 vminfo User ChenDT has 8 processes (session 1)
236800:06:54.816 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
236900:07:00.064 pagesharing VBoxServicePageSharingWorkerProcess: enabled=0
237000:07:00.194 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:59:35.967000000Z (MinAdjust: 200 ms)
237100:07:00.194 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:59:37.477817300Z => -1 510 817 300 ns drift
237200:07:00.194 timesync VBoxServiceTimeSyncAdjust: Drift=-1510ms
237300:07:00.194 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=81851, NewTA=73666, DiffNew=8185, DiffMax=50072
237400:07:04.831 vminfo Found 6 sessions
237500:07:04.831 vminfo Handling session 0
237600:07:04.831 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
237700:07:04.831 vminfo Session LogonType=10 is supported -- looking up SID + type ...
237800:07:04.831 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
237900:07:04.831 vminfo No WinStation found for user=ChenDT
238000:07:04.831 vminfo Account User=ChenDT is logged in
238100:07:04.831 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
238200:07:04.831 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
238300:07:04.831 vminfo Error: Unable to open process with PID=0, error=87
238400:07:04.831 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
238500:07:04.831 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
238600:07:04.831 vminfo PID=264: \SystemRoot\System32\smss.exe
238700:07:04.831 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
238800:07:04.831 vminfo PID=336: \??\C:\XP\system32\csrss.exe
238900:07:04.831 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
239000:07:04.831 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
239100:07:04.831 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
239200:07:04.831 vminfo PID=460: C:\XP\system32\services.exe
239300:07:04.831 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
239400:07:04.831 vminfo PID=472: C:\XP\system32\lsass.exe
239500:07:04.831 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
239600:07:04.831 vminfo PID=624: C:\XP\system32\VBoxService.exe
239700:07:04.831 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
239800:07:04.831 vminfo PID=672: C:\XP\system32\svchost.exe
239900:07:04.831 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
240000:07:04.831 vminfo PID=736: C:\XP\system32\svchost.exe
240100:07:04.831 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
240200:07:04.831 vminfo PID=816: C:\XP\system32\svchost.exe
240300:07:04.831 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
240400:07:04.831 vminfo PID=868: C:\XP\system32\svchost.exe
240500:07:04.831 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
240600:07:04.831 vminfo PID=960: C:\XP\system32\spoolsv.exe
240700:07:04.831 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
240800:07:04.831 vminfo PID=1064: C:\XP\system32\svchost.exe
240900:07:04.831 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
241000:07:04.831 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
241100:07:04.831 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
241200:07:04.831 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
241300:07:04.831 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
241400:07:04.831 vminfo PID=2024: C:\XP\system32\rdpclip.exe
241500:07:04.831 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
241600:07:04.831 vminfo PID=304: C:\XP\Explorer.EXE
241700:07:04.831 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
241800:07:04.831 vminfo PID=272: C:\XP\system32\VBoxTray.exe
241900:07:04.831 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
242000:07:04.831 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
242100:07:04.831 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
242200:07:04.831 vminfo PID=780: C:\XP\system32\ctfmon.exe
242300:07:04.831 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
242400:07:04.831 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
242500:07:04.831 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
242600:07:04.831 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
242700:07:04.831 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
242800:07:04.831 vminfo PID=1108: C:\XP\system32\taskmgr.exe
242900:07:04.831 vminfo Session 1 has 8 processes total
243000:07:04.831 vminfo Adding new user=ChenDT (session 1) with 8 processes
243100:07:04.831 vminfo Handling session 1
243200:07:04.831 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
243300:07:04.831 vminfo Handling session 2
243400:07:04.831 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
243500:07:04.831 vminfo Handling session 3
243600:07:04.831 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
243700:07:04.831 vminfo Handling session 4
243800:07:04.831 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
243900:07:04.831 vminfo Handling session 5
244000:07:04.831 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
244100:07:04.831 vminfo Found 1 unique logged-in user(s)
244200:07:04.831 vminfo User ChenDT has 8 processes (session 1)
244300:07:04.831 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
244400:07:10.198 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:59:45.971000000Z (MinAdjust: 100 ms)
244500:07:10.198 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:59:44.837050700Z => 1 133 949 300 ns drift
244600:07:10.198 timesync VBoxServiceTimeSyncAdjust: Drift=1133ms
244700:07:10.198 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=73666, NewTA=81032, DiffNew=7366, DiffMax=50072
244800:07:12.281 main Control handler: Control=0xe, EventType=0x3
244900:07:12.281 main Control handler: A session connected to the remote terminal (Session=3, Event=0x3)
245000:07:12.281 vminfo Found 6 sessions
245100:07:12.281 vminfo Handling session 0
245200:07:12.281 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
245300:07:12.281 vminfo Session LogonType=10 is supported -- looking up SID + type ...
245400:07:12.291 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
245500:07:12.291 vminfo No WinStation found for user=ChenDT
245600:07:12.291 vminfo Account User=ChenDT is logged in
245700:07:12.291 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
245800:07:12.291 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
245900:07:12.291 vminfo Error: Unable to open process with PID=0, error=87
246000:07:12.291 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
246100:07:12.291 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
246200:07:12.291 vminfo PID=264: \SystemRoot\System32\smss.exe
246300:07:12.291 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
246400:07:12.291 vminfo PID=336: \??\C:\XP\system32\csrss.exe
246500:07:12.291 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
246600:07:12.291 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
246700:07:12.291 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
246800:07:12.291 vminfo PID=460: C:\XP\system32\services.exe
246900:07:12.291 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
247000:07:12.291 vminfo PID=472: C:\XP\system32\lsass.exe
247100:07:12.291 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
247200:07:12.291 vminfo PID=624: C:\XP\system32\VBoxService.exe
247300:07:12.291 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
247400:07:12.291 vminfo PID=672: C:\XP\system32\svchost.exe
247500:07:12.291 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
247600:07:12.291 vminfo PID=736: C:\XP\system32\svchost.exe
247700:07:12.291 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
247800:07:12.291 vminfo PID=816: C:\XP\system32\svchost.exe
247900:07:12.291 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
248000:07:12.291 vminfo PID=868: C:\XP\system32\svchost.exe
248100:07:12.291 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
248200:07:12.291 vminfo PID=960: C:\XP\system32\spoolsv.exe
248300:07:12.291 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
248400:07:12.291 vminfo PID=1064: C:\XP\system32\svchost.exe
248500:07:12.291 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
248600:07:12.291 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
248700:07:12.291 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
248800:07:12.291 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
248900:07:12.291 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
249000:07:12.291 vminfo PID=2024: C:\XP\system32\rdpclip.exe
249100:07:12.291 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
249200:07:12.291 vminfo PID=304: C:\XP\Explorer.EXE
249300:07:12.291 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
249400:07:12.291 vminfo PID=272: C:\XP\system32\VBoxTray.exe
249500:07:12.291 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
249600:07:12.291 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
249700:07:12.291 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
249800:07:12.291 vminfo PID=780: C:\XP\system32\ctfmon.exe
249900:07:12.291 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
250000:07:12.291 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
250100:07:12.291 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
250200:07:12.291 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
250300:07:12.291 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
250400:07:12.291 vminfo PID=1108: C:\XP\system32\taskmgr.exe
250500:07:12.291 vminfo PID=1672: (Interactive: false) 0:999 <-> 0:52808
250600:07:12.291 vminfo PID=1672: \??\C:\XP\system32\csrss.exe
250700:07:12.291 vminfo PID=1700: (Interactive: false) 0:999 <-> 0:52808
250800:07:12.291 vminfo PID=1700: \??\C:\XP\system32\winlogon.exe
250900:07:12.291 vminfo Session 1 has 8 processes total
251000:07:12.291 vminfo Adding new user=ChenDT (session 1) with 8 processes
251100:07:12.291 vminfo Handling session 1
251200:07:12.291 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
251300:07:12.291 vminfo Handling session 2
251400:07:12.291 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
251500:07:12.291 vminfo Handling session 3
251600:07:12.291 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
251700:07:12.291 vminfo Handling session 4
251800:07:12.291 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
251900:07:12.291 vminfo Handling session 5
252000:07:12.291 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
252100:07:12.291 vminfo Found 1 unique logged-in user(s)
252200:07:12.291 vminfo User ChenDT has 8 processes (session 1)
252300:07:12.291 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
252400:07:16.407 main Control handler: Control=0xe, EventType=0x4
252500:07:16.407 main Control handler: A session was disconnected from the remote terminal (Session=3, Event=0x4)
252600:07:16.407 vminfo Found 7 sessions
252700:07:16.407 vminfo Handling session 0
252800:07:16.407 vminfo Session data: Name=ChenDT, Session=3, LogonID=0,205608, LogonType=10
252900:07:16.407 vminfo Session LogonType=10 is supported -- looking up SID + type ...
253000:07:16.407 vminfo Account User=ChenDT, Session=3, LogonID=0,205608, AuthPkg=NTLM, Domain=EMAIL
253100:07:16.407 vminfo Account User=ChenDT, WTSConnectState=4 (4)
253200:07:16.407 vminfo Account User=ChenDT using TCS/RDP, state=4
253300:07:16.407 vminfo Account User=ChenDT is logged in
253400:07:16.407 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
253500:07:16.417 vminfo PID=0: (Interactive: false) 0:0 <-> 0:205608
253600:07:16.417 vminfo Error: Unable to open process with PID=0, error=87
253700:07:16.417 vminfo PID=4: (Interactive: false) 0:999 <-> 0:205608
253800:07:16.417 vminfo PID=264: (Interactive: false) 0:999 <-> 0:205608
253900:07:16.417 vminfo PID=264: \SystemRoot\System32\smss.exe
254000:07:16.417 vminfo PID=336: (Interactive: false) 0:999 <-> 0:205608
254100:07:16.417 vminfo PID=336: \??\C:\XP\system32\csrss.exe
254200:07:16.417 vminfo PID=360: (Interactive: false) 0:999 <-> 0:205608
254300:07:16.417 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
254400:07:16.417 vminfo PID=460: (Interactive: false) 0:999 <-> 0:205608
254500:07:16.417 vminfo PID=460: C:\XP\system32\services.exe
254600:07:16.417 vminfo PID=472: (Interactive: false) 0:999 <-> 0:205608
254700:07:16.417 vminfo PID=472: C:\XP\system32\lsass.exe
254800:07:16.417 vminfo PID=624: (Interactive: false) 0:999 <-> 0:205608
254900:07:16.417 vminfo PID=624: C:\XP\system32\VBoxService.exe
255000:07:16.417 vminfo PID=672: (Interactive: false) 0:999 <-> 0:205608
255100:07:16.417 vminfo PID=672: C:\XP\system32\svchost.exe
255200:07:16.417 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:205608
255300:07:16.417 vminfo PID=736: C:\XP\system32\svchost.exe
255400:07:16.417 vminfo PID=816: (Interactive: false) 0:999 <-> 0:205608
255500:07:16.417 vminfo PID=816: C:\XP\system32\svchost.exe
255600:07:16.417 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:205608
255700:07:16.417 vminfo PID=868: C:\XP\system32\svchost.exe
255800:07:16.417 vminfo PID=960: (Interactive: false) 0:999 <-> 0:205608
255900:07:16.417 vminfo PID=960: C:\XP\system32\spoolsv.exe
256000:07:16.417 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:205608
256100:07:16.417 vminfo PID=1064: C:\XP\system32\svchost.exe
256200:07:16.417 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:205608
256300:07:16.417 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
256400:07:16.417 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:205608
256500:07:16.417 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
256600:07:16.417 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:205608
256700:07:16.417 vminfo PID=2024: C:\XP\system32\rdpclip.exe
256800:07:16.417 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:205608
256900:07:16.417 vminfo PID=304: C:\XP\Explorer.EXE
257000:07:16.417 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:205608
257100:07:16.417 vminfo PID=272: C:\XP\system32\VBoxTray.exe
257200:07:16.417 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:205608
257300:07:16.417 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
257400:07:16.417 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:205608
257500:07:16.417 vminfo PID=780: C:\XP\system32\ctfmon.exe
257600:07:16.417 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:205608
257700:07:16.417 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
257800:07:16.417 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:205608
257900:07:16.417 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
258000:07:16.417 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:205608
258100:07:16.417 vminfo PID=1108: C:\XP\system32\taskmgr.exe
258200:07:16.417 vminfo PID=1672: (Interactive: false) 0:999 <-> 0:205608
258300:07:16.417 vminfo PID=1672: \??\C:\XP\system32\csrss.exe
258400:07:16.417 vminfo PID=1700: (Interactive: false) 0:999 <-> 0:205608
258500:07:16.417 vminfo PID=1700: \??\C:\XP\system32\winlogon.exe
258600:07:16.417 vminfo Session 3 has 0 processes total
258700:07:16.417 vminfo Adding new user=ChenDT (session 3) with 0 processes
258800:07:16.417 vminfo Handling session 1
258900:07:16.417 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
259000:07:16.417 vminfo Session LogonType=10 is supported -- looking up SID + type ...
259100:07:16.417 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
259200:07:16.417 vminfo No WinStation found for user=ChenDT
259300:07:16.417 vminfo Account User=ChenDT is logged in
259400:07:16.417 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
259500:07:16.417 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
259600:07:16.417 vminfo Error: Unable to open process with PID=0, error=87
259700:07:16.417 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
259800:07:16.417 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
259900:07:16.417 vminfo PID=264: \SystemRoot\System32\smss.exe
260000:07:16.417 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
260100:07:16.417 vminfo PID=336: \??\C:\XP\system32\csrss.exe
260200:07:16.417 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
260300:07:16.417 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
260400:07:16.417 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
260500:07:16.417 vminfo PID=460: C:\XP\system32\services.exe
260600:07:16.417 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
260700:07:16.417 vminfo PID=472: C:\XP\system32\lsass.exe
260800:07:16.417 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
260900:07:16.417 vminfo PID=624: C:\XP\system32\VBoxService.exe
261000:07:16.417 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
261100:07:16.417 vminfo PID=672: C:\XP\system32\svchost.exe
261200:07:16.417 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
261300:07:16.417 vminfo PID=736: C:\XP\system32\svchost.exe
261400:07:16.417 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
261500:07:16.417 vminfo PID=816: C:\XP\system32\svchost.exe
261600:07:16.417 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
261700:07:16.417 vminfo PID=868: C:\XP\system32\svchost.exe
261800:07:16.417 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
261900:07:16.417 vminfo PID=960: C:\XP\system32\spoolsv.exe
262000:07:16.417 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
262100:07:16.417 vminfo PID=1064: C:\XP\system32\svchost.exe
262200:07:16.417 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
262300:07:16.417 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
262400:07:16.417 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
262500:07:16.417 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
262600:07:16.417 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
262700:07:16.417 vminfo PID=2024: C:\XP\system32\rdpclip.exe
262800:07:16.417 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
262900:07:16.417 vminfo PID=304: C:\XP\Explorer.EXE
263000:07:16.417 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
263100:07:16.417 vminfo PID=272: C:\XP\system32\VBoxTray.exe
263200:07:16.417 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
263300:07:16.417 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
263400:07:16.417 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
263500:07:16.417 vminfo PID=780: C:\XP\system32\ctfmon.exe
263600:07:16.417 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
263700:07:16.417 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
263800:07:16.417 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
263900:07:16.417 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
264000:07:16.417 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
264100:07:16.417 vminfo PID=1108: C:\XP\system32\taskmgr.exe
264200:07:16.417 vminfo PID=1672: (Interactive: false) 0:999 <-> 0:52808
264300:07:16.417 vminfo PID=1672: \??\C:\XP\system32\csrss.exe
264400:07:16.417 vminfo PID=1700: (Interactive: false) 0:999 <-> 0:52808
264500:07:16.417 vminfo PID=1700: \??\C:\XP\system32\winlogon.exe
264600:07:16.417 vminfo Session 1 has 8 processes total
264700:07:16.417 vminfo Handling session 2
264800:07:16.417 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
264900:07:16.417 vminfo Handling session 3
265000:07:16.417 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
265100:07:16.417 vminfo Handling session 4
265200:07:16.417 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
265300:07:16.417 vminfo Handling session 5
265400:07:16.417 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
265500:07:16.417 vminfo Handling session 6
265600:07:16.417 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
265700:07:16.417 vminfo Found 1 unique logged-in user(s)
265800:07:16.417 vminfo cUsersInList: 0, pszUserList: <NULL>, rc=VINF_SUCCESS
265900:07:16.798 main Control handler: Control=0xe, EventType=0x3
266000:07:16.798 main Control handler: A session connected to the remote terminal (Session=0, Event=0x3)
266100:07:16.828 vminfo Found 6 sessions
266200:07:16.828 vminfo Handling session 0
266300:07:16.828 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
266400:07:16.828 vminfo Session LogonType=10 is supported -- looking up SID + type ...
266500:07:16.828 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
266600:07:16.838 vminfo No WinStation found for user=ChenDT
266700:07:16.838 vminfo Account User=ChenDT is logged in
266800:07:16.838 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
266900:07:16.838 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
267000:07:16.838 vminfo Error: Unable to open process with PID=0, error=87
267100:07:16.838 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
267200:07:16.838 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
267300:07:16.838 vminfo PID=264: \SystemRoot\System32\smss.exe
267400:07:16.838 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
267500:07:16.838 vminfo PID=336: \??\C:\XP\system32\csrss.exe
267600:07:16.838 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
267700:07:16.838 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
267800:07:16.838 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
267900:07:16.838 vminfo PID=460: C:\XP\system32\services.exe
268000:07:16.838 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
268100:07:16.838 vminfo PID=472: C:\XP\system32\lsass.exe
268200:07:16.838 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
268300:07:16.838 vminfo PID=624: C:\XP\system32\VBoxService.exe
268400:07:16.838 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
268500:07:16.838 vminfo PID=672: C:\XP\system32\svchost.exe
268600:07:16.838 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
268700:07:16.838 vminfo PID=736: C:\XP\system32\svchost.exe
268800:07:16.838 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
268900:07:16.838 vminfo PID=816: C:\XP\system32\svchost.exe
269000:07:16.838 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
269100:07:16.838 vminfo PID=868: C:\XP\system32\svchost.exe
269200:07:16.838 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
269300:07:16.838 vminfo PID=960: C:\XP\system32\spoolsv.exe
269400:07:16.838 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
269500:07:16.838 vminfo PID=1064: C:\XP\system32\svchost.exe
269600:07:16.838 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
269700:07:16.838 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
269800:07:16.838 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
269900:07:16.838 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
270000:07:16.838 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
270100:07:16.838 vminfo PID=2024: C:\XP\system32\rdpclip.exe
270200:07:16.838 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
270300:07:16.838 vminfo PID=304: C:\XP\Explorer.EXE
270400:07:16.838 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
270500:07:16.838 vminfo PID=272: C:\XP\system32\VBoxTray.exe
270600:07:16.838 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
270700:07:16.838 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
270800:07:16.838 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
270900:07:16.838 vminfo PID=780: C:\XP\system32\ctfmon.exe
271000:07:16.838 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
271100:07:16.838 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
271200:07:16.838 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
271300:07:16.838 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
271400:07:16.838 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
271500:07:16.838 vminfo PID=1108: C:\XP\system32\taskmgr.exe
271600:07:16.838 vminfo Session 1 has 8 processes total
271700:07:16.838 vminfo Adding new user=ChenDT (session 1) with 8 processes
271800:07:16.838 vminfo Handling session 1
271900:07:16.838 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
272000:07:16.838 vminfo Handling session 2
272100:07:16.838 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
272200:07:16.838 vminfo Handling session 3
272300:07:16.838 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
272400:07:16.838 vminfo Handling session 4
272500:07:16.838 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
272600:07:16.838 vminfo Handling session 5
272700:07:16.848 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
272800:07:16.848 vminfo Found 1 unique logged-in user(s)
272900:07:16.848 vminfo User ChenDT has 8 processes (session 1)
273000:07:16.848 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
273100:07:20.203 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T11:59:55.976000000Z (MinAdjust: 100 ms)
273200:07:20.203 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T11:59:52.932147500Z => 3 043 852 500 ns drift
273300:07:20.203 timesync VBoxServiceTimeSyncAdjust: Drift=3043ms
273400:07:20.203 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=81032, NewTA=89135, DiffNew=8103, DiffMax=50072
273500:07:26.852 vminfo Found 6 sessions
273600:07:26.852 vminfo Handling session 0
273700:07:26.852 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
273800:07:26.852 vminfo Session LogonType=10 is supported -- looking up SID + type ...
273900:07:26.852 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
274000:07:26.852 vminfo No WinStation found for user=ChenDT
274100:07:26.852 vminfo Account User=ChenDT is logged in
274200:07:26.852 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
274300:07:26.852 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
274400:07:26.852 vminfo Error: Unable to open process with PID=0, error=87
274500:07:26.852 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
274600:07:26.852 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
274700:07:26.852 vminfo PID=264: \SystemRoot\System32\smss.exe
274800:07:26.852 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
274900:07:26.852 vminfo PID=336: \??\C:\XP\system32\csrss.exe
275000:07:26.852 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
275100:07:26.852 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
275200:07:26.852 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
275300:07:26.852 vminfo PID=460: C:\XP\system32\services.exe
275400:07:26.852 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
275500:07:26.852 vminfo PID=472: C:\XP\system32\lsass.exe
275600:07:26.852 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
275700:07:26.852 vminfo PID=624: C:\XP\system32\VBoxService.exe
275800:07:26.852 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
275900:07:26.852 vminfo PID=672: C:\XP\system32\svchost.exe
276000:07:26.852 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
276100:07:26.852 vminfo PID=736: C:\XP\system32\svchost.exe
276200:07:26.852 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
276300:07:26.852 vminfo PID=816: C:\XP\system32\svchost.exe
276400:07:26.852 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
276500:07:26.852 vminfo PID=868: C:\XP\system32\svchost.exe
276600:07:26.852 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
276700:07:26.852 vminfo PID=960: C:\XP\system32\spoolsv.exe
276800:07:26.852 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
276900:07:26.852 vminfo PID=1064: C:\XP\system32\svchost.exe
277000:07:26.852 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
277100:07:26.852 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
277200:07:26.852 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
277300:07:26.852 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
277400:07:26.852 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
277500:07:26.852 vminfo PID=2024: C:\XP\system32\rdpclip.exe
277600:07:26.852 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
277700:07:26.852 vminfo PID=304: C:\XP\Explorer.EXE
277800:07:26.852 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
277900:07:26.852 vminfo PID=272: C:\XP\system32\VBoxTray.exe
278000:07:26.852 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
278100:07:26.852 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
278200:07:26.852 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
278300:07:26.852 vminfo PID=780: C:\XP\system32\ctfmon.exe
278400:07:26.852 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
278500:07:26.852 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
278600:07:26.852 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
278700:07:26.852 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
278800:07:26.852 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
278900:07:26.852 vminfo PID=1108: C:\XP\system32\taskmgr.exe
279000:07:26.852 vminfo Session 1 has 8 processes total
279100:07:26.852 vminfo Adding new user=ChenDT (session 1) with 8 processes
279200:07:26.852 vminfo Handling session 1
279300:07:26.852 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
279400:07:26.852 vminfo Handling session 2
279500:07:26.852 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
279600:07:26.852 vminfo Handling session 3
279700:07:26.852 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
279800:07:26.852 vminfo Handling session 4
279900:07:26.852 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
280000:07:26.852 vminfo Handling session 5
280100:07:26.852 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
280200:07:26.852 vminfo Found 1 unique logged-in user(s)
280300:07:26.852 vminfo User ChenDT has 8 processes (session 1)
280400:07:26.852 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS
280500:07:30.207 timesync VBoxServiceTimeSyncWorker: Host: 2012-09-21T12:00:05.090000000Z (MinAdjust: 100 ms)
280600:07:30.207 timesync VBoxServiceTimeSyncWorker: Guest: - 2012-09-21T12:00:01.836734000Z => 3 253 266 000 ns drift
280700:07:30.207 timesync VBoxServiceTimeSyncAdjust: Drift=3253ms
280800:07:30.207 timesync VBoxServiceTimeSyncAdjust: OrgTA=100144, CurTA=89135, NewTA=98048, DiffNew=8913, DiffMax=50072
280900:07:36.867 vminfo Found 6 sessions
281000:07:36.867 vminfo Handling session 0
281100:07:36.867 vminfo Session data: Name=ChenDT, Session=1, LogonID=0,52808, LogonType=10
281200:07:36.867 vminfo Session LogonType=10 is supported -- looking up SID + type ...
281300:07:36.867 vminfo Account User=ChenDT, Session=1, LogonID=0,52808, AuthPkg=NTLM, Domain=EMAIL
281400:07:36.867 vminfo No WinStation found for user=ChenDT
281500:07:36.867 vminfo Account User=ChenDT is logged in
281600:07:36.867 vminfo Handling user=ChenDT, domain=EMAIL, package=NTLM
281700:07:36.867 vminfo PID=0: (Interactive: false) 0:0 <-> 0:52808
281800:07:36.867 vminfo Error: Unable to open process with PID=0, error=87
281900:07:36.867 vminfo PID=4: (Interactive: false) 0:999 <-> 0:52808
282000:07:36.867 vminfo PID=264: (Interactive: false) 0:999 <-> 0:52808
282100:07:36.867 vminfo PID=264: \SystemRoot\System32\smss.exe
282200:07:36.867 vminfo PID=336: (Interactive: false) 0:999 <-> 0:52808
282300:07:36.867 vminfo PID=336: \??\C:\XP\system32\csrss.exe
282400:07:36.867 vminfo PID=360: (Interactive: false) 0:999 <-> 0:52808
282500:07:36.867 vminfo PID=360: \??\C:\XP\system32\winlogon.exe
282600:07:36.867 vminfo PID=460: (Interactive: false) 0:999 <-> 0:52808
282700:07:36.867 vminfo PID=460: C:\XP\system32\services.exe
282800:07:36.867 vminfo PID=472: (Interactive: false) 0:999 <-> 0:52808
282900:07:36.867 vminfo PID=472: C:\XP\system32\lsass.exe
283000:07:36.867 vminfo PID=624: (Interactive: false) 0:999 <-> 0:52808
283100:07:36.867 vminfo PID=624: C:\XP\system32\VBoxService.exe
283200:07:36.867 vminfo PID=672: (Interactive: false) 0:999 <-> 0:52808
283300:07:36.867 vminfo PID=672: C:\XP\system32\svchost.exe
283400:07:36.867 vminfo PID=736: (Interactive: true ) 0:996 <-> 0:52808
283500:07:36.867 vminfo PID=736: C:\XP\system32\svchost.exe
283600:07:36.867 vminfo PID=816: (Interactive: false) 0:999 <-> 0:52808
283700:07:36.867 vminfo PID=816: C:\XP\system32\svchost.exe
283800:07:36.867 vminfo PID=868: (Interactive: true ) 0:996 <-> 0:52808
283900:07:36.867 vminfo PID=868: C:\XP\system32\svchost.exe
284000:07:36.867 vminfo PID=960: (Interactive: false) 0:999 <-> 0:52808
284100:07:36.867 vminfo PID=960: C:\XP\system32\spoolsv.exe
284200:07:36.867 vminfo PID=1064: (Interactive: true ) 0:997 <-> 0:52808
284300:07:36.867 vminfo PID=1064: C:\XP\system32\svchost.exe
284400:07:36.867 vminfo PID=1856: (Interactive: false) 0:999 <-> 0:52808
284500:07:36.867 vminfo PID=1856: \??\C:\XP\system32\csrss.exe
284600:07:36.867 vminfo PID=1880: (Interactive: false) 0:999 <-> 0:52808
284700:07:36.867 vminfo PID=1880: \??\C:\XP\system32\winlogon.exe
284800:07:36.867 vminfo PID=2024: (Interactive: true ) 0:52808 <-> 0:52808
284900:07:36.867 vminfo PID=2024: C:\XP\system32\rdpclip.exe
285000:07:36.867 vminfo PID=304: (Interactive: true ) 0:52808 <-> 0:52808
285100:07:36.867 vminfo PID=304: C:\XP\Explorer.EXE
285200:07:36.867 vminfo PID=272: (Interactive: true ) 0:52808 <-> 0:52808
285300:07:36.867 vminfo PID=272: C:\XP\system32\VBoxTray.exe
285400:07:36.867 vminfo PID=436: (Interactive: true ) 0:52808 <-> 0:52808
285500:07:36.867 vminfo PID=436: C:\Program Files\Google\Google Pinyin 2\GooglePinyinDaemon.exe
285600:07:36.867 vminfo PID=780: (Interactive: true ) 0:52808 <-> 0:52808
285700:07:36.867 vminfo PID=780: C:\XP\system32\ctfmon.exe
285800:07:36.867 vminfo PID=832: (Interactive: true ) 0:52808 <-> 0:52808
285900:07:36.877 vminfo PID=832: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
286000:07:36.877 vminfo PID=936: (Interactive: true ) 0:52808 <-> 0:52808
286100:07:36.877 vminfo PID=936: C:\Program Files\Google\Google Pinyin 2\GooglePinyinService.exe
286200:07:36.877 vminfo PID=1108: (Interactive: true ) 0:52808 <-> 0:52808
286300:07:36.877 vminfo PID=1108: C:\XP\system32\taskmgr.exe
286400:07:36.877 vminfo Session 1 has 8 processes total
286500:07:36.877 vminfo Adding new user=ChenDT (session 1) with 8 processes
286600:07:36.877 vminfo Handling session 1
286700:07:36.877 vminfo Session data: Name=ANONYMOUS LOGON, Session=0, LogonID=0,39940, LogonType=3
286800:07:36.877 vminfo Handling session 2
286900:07:36.877 vminfo Session data: Name=LOCAL SERVICE, Session=0, LogonID=0,997, LogonType=5
287000:07:36.877 vminfo Handling session 3
287100:07:36.877 vminfo Session data: Name=NETWORK SERVICE, Session=0, LogonID=0,996, LogonType=5
287200:07:36.877 vminfo Handling session 4
287300:07:36.877 vminfo Session data: Name=, Session=0, LogonID=0,27882, LogonType=0
287400:07:36.877 vminfo Handling session 5
287500:07:36.877 vminfo Session data: Name=EMAIL$, Session=0, LogonID=0,999, LogonType=0
287600:07:36.877 vminfo Found 1 unique logged-in user(s)
287700:07:36.877 vminfo User ChenDT has 8 processes (session 1)
287800:07:36.877 vminfo cUsersInList: 1, pszUserList: ChenDT, rc=VINF_SUCCESS

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy