bug#13149: 24.3.50; Emacs thinks file was changed outside Emacs, but it was not

unofficial mirror of bug-gnu-emacs@gnu.org 
 help / color / mirror / code / Atom feed

From: Dmitry Gutov <raaahh@gmail.com>
To: Paul Eggert <eggert@cs.ucla.edu>
Cc: 13149@debbugs.gnu.org
Subject: bug#13149: 24.3.50; Emacs thinks file was changed outside Emacs, but it was not
Date: Thu, 17 Jan 2013 14:32:56 +0400	[thread overview]
Message-ID: <50F7D358.9030100@gmail.com> (raw)
In-Reply-To: <50F64149.6010704@cs.ucla.edu>

[-- Attachment #1: Type: text/plain, Size: 4090 bytes --]

On 16.01.2013 9:57, Paul Eggert wrote:
> On 01/15/2013 03:44 PM, Dmitry Gutov wrote:
>> Maybe it's a sign of my system slowly falling apart.
>
> It does sound like a fairly serious issue of some sort.
> I did think of a patch (attached) but I'd rather not
> apply it if the system in question is merely experimental,
> since it introduces a race even on non-buggy systems.

I've been using the virtual machine to code Ruby for some time now, and 
I intend to continue doing it. It is replaceable, though, since all the 
important stuff is backed up.

Thank you for the patch, it works perfectly on the file mounted over 
vboxsf (but regarding applying it, see (*)).

I just now recompiled emacs-24 (revno 111176) again (bzr revert; make 
clean; make bootstrap) on the Ubuntu machine, and it seems to work fine 
now. Also recompiled the trunk a few times. The "sloppy" patch now works 
fine as well, aside from the need to explicitly set the variable. "fstat 
and lstat mismatch" is still there, though, so it's probably unrelated.
No idea what the problem was with my tests last time, I'm blaming space 
rays.

Looked at the VirtualBox bug reports, found just this one: 
https://www.virtualbox.org/ticket/10986, not much information there.

Some more about space rays:
1) I now have a version of Emacs compiled on a brand-new Fedora virtual 
machine from emacs-24 branch (revno 111185) that exhibits the problem. 
Just tested it simultaneously with Ubuntu, emacs-24 on Fedora is buggy, 
Ubuntu's is not. The following items (2 and 3) are from a few hours ago, 
when I tested Fedora machine exclusively.
2) Editing the file on a different disk on the host system (HDD vs SSD) 
makes no difference, the bug is present.
3) Process Monitor doesn't show any other processes accessing the file 
on the host machine other than VirtualBox.exe, SYSTEM and 
SearchProtocolHost.exe. The last one goes away if I stop the Windows 
Search service, but the problem stays. I'm attaching the exported event 
log for the open-modify-save scenario (file-access-log.csv) in case 
someone knowledgeable can see anything weird there (Eli?).

(*) I tried to work around the whole thing by instead sharing the 
directory in Windows the usual way and mounting it over CIFS (the 
package cifs-utils in Ubuntu). Yet again, emacs-24 works fine as-is (on 
both virtual machines, in this use case), but the trunk (revno 111517) 
exhibits the same buggy behavior I've been writing about.

And the "sloppy" patch helps (when the var is set), but the last one 
doesn't. See the instrumented output for the usual scenario with the 
last patch applied, below.

Can anyone confirm this? Mounting stuff over CIFS/Samba should be a 
relatively common situation.

If this is indeed reproducible, I think we need this to work without 
requiring the user to customize a variable.

find-file
dired.c:958: stat_mtime=1358411932.626214300
dired.c:958: stat_mtime=1358411932.626214300
fileio.c:3586: stat_mtime=1358411932.626214300
lread.c:1228: stat_mtime=1358194311.328310000
lread.c:1228: stat_mtime=1358411625.122214750
lread.c:1228: stat_mtime=1358194311.328310000
lread.c:1228: stat_mtime=1358411580.742214813
modify
fileio.c:5414: stat_mtime=1358411932.626214300
save
fileio.c:5414: stat_mtime=1358411932.626214300
fileio.c:5414: stat_mtime=1358411932.626214300
fileio.c:5025: stat_mtime=1358412092.606214085
fileio.c:5042: stat_mtime=1358412092.606214085
fileio.c:5072: stat_mtime=1358412092.606214085
dired.c:958: stat_mtime=1358412092.606214085
dired.c:958: stat_mtime=1358412092.606214085
modify again
fileio.c:5414: stat_mtime=1358412092.606214000
lread.c:1228: stat_mtime=1358194311.328310000
lread.c:1228: stat_mtime=1358411328.034215171
y
save
fileio.c:5414: stat_mtime=1358412092.606214000
yes
fileio.c:5414: stat_mtime=1358412092.606214000
y
fileio.c:5025: stat_mtime=1358412142.122214017
fileio.c:5042: stat_mtime=1358412142.122214017
dired.c:958: stat_mtime=1358412142.122214017
dired.c:958: stat_mtime=1358412142.122214017

No zeros or "fstat and lstat disagree" messages here, although I applied 
that patch, too.

[-- Attachment #2: file-access-log.csv --]
[-- Type: text/plain, Size: 125232 bytes --]

"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"9:50:25.9944537","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:25.9944932","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:25.9945225","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:25.9945369","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:25.9945566","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:25.9947480","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:25.9947862","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:25.9948095","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:25.9948253","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:25.9948437","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0004524","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0004903","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0005152","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0005291","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0005471","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0009802","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0010174","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0010404","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0010539","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0010716","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0034335","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0034753","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0035072","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0035227","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0035414","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0044578","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0044950","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0045183","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0045321","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0045496","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0049583","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0049948","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0050175","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0050313","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0050487","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0064304","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0065094","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0065353","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0065495","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0065679","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0074222","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0074587","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0074814","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0074952","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0075126","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0080282","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0080650","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0080877","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0081015","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0081189","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0089624","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0089985","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0090212","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0090350","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0090525","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0094415","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0094783","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0095010","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0095145","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0095319","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0104598","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0104993","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0105269","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0105414","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0105595","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0109419","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0109790","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0110021","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0110159","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0110330","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0110869","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0112066","VirtualBox.exe","4132","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:50:26.0112628","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:26.0112799","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, FileAttributes: A, AllocationSize: 184, EndOfFile: 180, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:26.0114213","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 0, Length: 180"
"9:50:26.0114348","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 180, Priority: Normal"
"9:50:26.0119149","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0129556","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:26.0129951","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:26.0139710","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:26.0140085","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:26.0149673","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0150061","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0150334","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0150472","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0150660","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0154997","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0155405","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0155855","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0156000","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0156184","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0163211","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0163668","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0164007","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0164161","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0164352","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0173579","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0173986","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0174305","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0174453","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0174647","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0181424","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0181793","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0182033","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0182171","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0182348","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0209506","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0209881","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0210131","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0210272","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0210450","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0214192","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0214557","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0214787","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0214925","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0215106","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0224296","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0224665","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0224898","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0225036","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0225214","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0229364","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0229729","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0229955","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0230090","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0230265","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0245016","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0245440","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0245759","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0245910","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0246101","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0314220","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0314585","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0314841","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0314979","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0315160","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0344481","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\s.test.rb","FAST IO DISALLOWED",""
"9:50:26.0344849","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\s.test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:26.0354421","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0354786","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0355033","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0355171","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0355349","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0389632","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0389997","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0390250","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0390388","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0390569","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0414678","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0415043","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0415273","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0415411","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0415589","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0439452","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0439827","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0440057","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0440195","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0440372","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0465508","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0465905","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0466205","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0466353","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0466540","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:27.6895525","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:50:27.6895617","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:27.6895686","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5328267","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:29.5328675","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:29.5338145","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:29.5338523","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:29.5338809","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:29.5338950","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5339144","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5340999","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:29.5341377","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:29.5341614","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:29.5341752","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5341956","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5346615","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:29.5347016","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.3465348","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3465746","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3466035","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3466183","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3466384","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3467896","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3468271","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3468508","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3468652","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3468833","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3476607","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3477054","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3477416","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3477570","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3477781","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3481694","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3482101","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3482407","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3482552","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3482739","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3488793","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3489191","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3489464","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3489608","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3489796","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3491861","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3492249","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3492518","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3492663","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3492857","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3497296","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3497668","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3497918","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3498056","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3498230","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3499388","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3499753","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3499986","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3500121","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3500298","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3504593","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3504961","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3505188","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3505326","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3505500","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3509551","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3509920","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3510156","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3510291","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3510469","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3511764","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3512129","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3512356","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3512494","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3512669","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3516825","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3517197","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3517427","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3517562","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3517746","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3518893","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3519262","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3519492","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3519627","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3519804","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3534256","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3534664","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3534946","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3535091","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3535275","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3589258","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3589643","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3589893","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3590031","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3590212","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3593763","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3594135","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3594361","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3594500","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3594674","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3628986","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3629358","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3629608","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3629743","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3629924","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3633981","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3634350","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3634580","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3634718","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3634889","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3674058","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3674426","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3674663","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3674798","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3674976","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3679109","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3679477","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3679701","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3679836","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3680010","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3680523","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3681779","VirtualBox.exe","4132","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:50:30.3682345","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.3682516","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, FileAttributes: A, AllocationSize: 184, EndOfFile: 180, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.3697441","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3697872","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3698187","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3698338","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3698526","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3750102","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 0, Length: 16 384"
"9:50:30.3750233","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 180, Priority: Normal"
"9:50:30.3757132","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 180, Length: 16 384"
"9:50:30.3757260","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","END OF FILE","Offset: 180, Length: 16 384, Priority: Normal"
"9:50:30.3794667","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4094159","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:30.4094524","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.4104250","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4104684","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4104964","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4105102","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4105290","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4108808","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4109173","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4109406","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4109544","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4109722","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4118860","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:30.4119228","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.4129465","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4129830","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4130063","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4130201","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4130379","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4134048","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4134407","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4134634","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4134768","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4134943","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4135544","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Overwritten"
"9:50:30.4136541","VirtualBox.exe","4132","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 0"
"9:50:30.4136866","VirtualBox.exe","4132","SetAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 0"
"9:50:30.4137113","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.4137271","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.4139116","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4139507","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4139763","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4139905","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4140086","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4140635","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4140901","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.4141036","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.4143522","VirtualBox.exe","4132","SetBasicInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 01.01.1601 4:00:00, LastAccessTime: 01.01.1601 4:00:00, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 01.01.1601 4:00:00, FileAttributes: n/a"
"9:50:30.4143877","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.4144012","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.4149654","VirtualBox.exe","4132","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 0"
"9:50:30.4149917","VirtualBox.exe","4132","SetAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 0"
"9:50:30.4150138","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.4150269","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.4153528","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4153712","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4158848","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4159226","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4159486","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4159627","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4159805","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4164596","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 55, Priority: Normal"
"9:50:30.4168581","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 55, Length: 124"
"9:50:30.4168729","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 55, Length: 124, Priority: Normal"
"9:50:30.4174697","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4175099","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4175395","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4175542","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4175825","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4179061","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4180495","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4180689","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4189337","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:30.4189711","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.4199287","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:30.4199655","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.4208934","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4209303","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4209539","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4209681","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4209858","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4213959","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4214344","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4214587","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4214728","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4214906","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3771603","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:32.3772018","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:32.3781146","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:32.3781527","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:32.3781813","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:32.3781955","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3782149","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3788449","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:32.3788830","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:32.3789071","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:32.3789218","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3789399","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3796101","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:32.3796472","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:32.3796706","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:32.3796847","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3797028","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3801336","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:32.3801710","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:32.3801944","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:32.3802085","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3802266","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:34.2783320","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:34.2783738","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:37.6897672","System","4","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 4 096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal"
"9:50:37.6897800","System","4","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 179"
"9:50:37.6897896","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:50:37.6898027","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:37.6898109","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4082357","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:38.4082749","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:38.4083035","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:38.4083179","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4083377","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4087878","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:38.4088256","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:38.4088500","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:38.4088644","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4088829","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4094419","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:38.4094800","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:38.4095037","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:38.4095181","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4095362","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4097602","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:38.4103573","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:38.4103918","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:38.4104070","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4104270","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3796518","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3796913","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3797202","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3797350","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3797544","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3799455","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3799839","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3800080","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3800221","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3800402","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3809125","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3809589","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3810020","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3810194","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3810398","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3811644","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3812049","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3812312","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3812460","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3812644","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3830124","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3830545","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3830847","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3830995","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3831183","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3859958","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3860369","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3860688","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3860836","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3861027","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3869228","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3869596","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3869826","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3869967","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3870148","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3882864","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3883328","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3883673","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3883827","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3884018","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3885202","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3885580","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3885817","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3885955","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3886136","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3894251","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3894619","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3894850","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3894991","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3895168","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3899519","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3899884","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3900111","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3900245","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3900430","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3910127","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3910508","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3910771","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3910916","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3911097","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3944959","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3945340","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3945590","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3945732","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3945912","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3947418","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3947787","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3948020","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3948158","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3948339","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3979587","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3979952","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3980182","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3980320","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3980498","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3984921","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3985332","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3985644","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3985795","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3985986","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4016971","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4017395","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4017717","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4017869","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4018059","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4020203","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4020604","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4020917","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4021065","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4021249","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4021805","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4023015","VirtualBox.exe","4132","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:50:40.4023570","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:40.4023741","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 184, EndOfFile: 179, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:40.4030364","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4030772","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4031081","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4031235","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4031423","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4069382","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 0, Length: 16 384"
"9:50:40.4069520","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 179, Priority: Normal"
"9:50:40.4079313","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 179, Length: 16 384"
"9:50:40.4079441","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","END OF FILE","Offset: 179, Length: 16 384, Priority: Normal"
"9:50:40.4143344","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4221061","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:40.4221459","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:40.4230019","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4230393","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4230656","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4230795","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4230979","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4234484","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4234849","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4235079","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4235214","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4235392","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4244868","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4245236","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4245470","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4245608","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4245782","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4249547","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4249909","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4250136","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4250271","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4250445","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.6887416","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:50:41.6887663","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.6887745","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8152121","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:41.8152562","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:41.8169552","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8169976","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8170305","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8170453","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8170647","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8176579","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8176954","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8177191","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8177329","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8177500","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8178147","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Overwritten"
"9:50:41.8179216","VirtualBox.exe","4132","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 0"
"9:50:41.8179555","VirtualBox.exe","4132","SetAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 0"
"9:50:41.8179969","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:41.8180147","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:41.8181403","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8181797","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8182060","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8182199","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8182379","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8182948","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8183208","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:41.8183343","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:41.8185921","VirtualBox.exe","4132","SetBasicInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 01.01.1601 4:00:00, LastAccessTime: 01.01.1601 4:00:00, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 01.01.1601 4:00:00, FileAttributes: n/a"
"9:50:41.8186309","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:41.8186450","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:41.8189314","VirtualBox.exe","4132","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 0"
"9:50:41.8189581","VirtualBox.exe","4132","SetAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 0"
"9:50:41.8189824","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:41.8189959","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:41.8191350","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8191567","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8196437","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8196834","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8197117","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8197262","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8197439","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8203582","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 66, Priority: Normal"
"9:50:41.8205884","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 66, Length: 113"
"9:50:41.8206025","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 66, Length: 113, Priority: Normal"
"9:50:41.8207363","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8207755","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8208028","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8208172","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8208455","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8210770","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8212144","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8221082","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:41.8221460","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:41.8231058","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:41.8231427","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:41.8246220","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8247151","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8247430","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8247572","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8247759","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8252445","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8252849","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8253145","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8253293","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8253481","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:43.6880596","System","4","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 4 096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal"
"9:50:43.6880863","System","4","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 179"
"9:50:43.6880988","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:50:43.6881076","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:43.6881155","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7433709","SearchProtocolHost.exe","4248","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Open Reparse Point, Open Requiring Oplock, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:51:40.7435156","SearchProtocolHost.exe","4248","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:51:40.7435771","SearchProtocolHost.exe","4248","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_REQUEST_FILTER_OPLOCK"
"9:51:40.7435939","SearchProtocolHost.exe","4248","QueryStandardInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 184, EndOfFile: 179, NumberOfLinks: 1, DeletePending: False, Directory: False"
"9:51:40.7436073","SearchProtocolHost.exe","4248","QueryBasicInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A"
"9:51:40.7436195","SearchProtocolHost.exe","4248","QueryFileInternalInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","IndexNumber: 0x1300000000b1c9"
"9:51:40.7436346","SearchProtocolHost.exe","4248","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","NOT REPARSE POINT","Control: FSCTL_GET_REPARSE_POINT"
"9:51:40.7436606","SearchProtocolHost.exe","4248","QuerySecurityFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","Information: Owner, Group, DACL"
"9:51:40.7436774","SearchProtocolHost.exe","4248","QuerySecurityFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Information: Owner, Group, DACL"
"9:51:40.7436991","SearchProtocolHost.exe","4248","QueryNameInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Name: \Users\gutov\Documents\Ruby\test.rb"
"9:51:40.7438701","SearchProtocolHost.exe","4248","QueryBasicInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A"
"9:51:40.7440023","SearchProtocolHost.exe","4248","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:51:40.7441213","SearchProtocolHost.exe","4248","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:51:40.7494739","SearchProtocolHost.exe","4248","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Read Control, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:51:40.7495094","SearchProtocolHost.exe","4248","QuerySecurityFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","Information: Owner"
"9:51:40.7495265","SearchProtocolHost.exe","4248","QuerySecurityFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Information: Owner"
"9:51:40.7495419","SearchProtocolHost.exe","4248","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7495600","SearchProtocolHost.exe","4248","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7502190","SearchProtocolHost.exe","4248","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7502420","SearchProtocolHost.exe","4248","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7502640","SearchProtocolHost.exe","4248","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:41.6880633","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:51:41.6880718","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:41.6880784","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""

next prev parent reply	other threads:[~2013-01-17 10:32 UTC|newest]

Thread overview: 68+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-12-11 21:51 bug#13149: 24.3.50; Emacs thinks file was changed outside Emacs, but it was not Drew Adams
2012-12-11 22:48 ` Dmitry Gutov
2012-12-11 22:54   ` Drew Adams
2013-01-14  5:10     ` Dmitry Gutov
2013-01-14 14:57       ` Dmitry Gutov
2013-01-14 17:02         ` Eli Zaretskii
2013-01-14 22:22           ` Dmitry Gutov
2013-01-14 18:28         ` Paul Eggert
2013-01-14 22:20           ` Dmitry Gutov
2013-01-15  6:45             ` Paul Eggert
2013-01-15  8:54               ` Dmitry Gutov
2013-01-15 17:31                 ` Paul Eggert
2013-01-15 21:38                   ` Dmitry Gutov
2013-01-15 21:47                     ` Paul Eggert
2013-01-15 22:11                       ` Dmitry Gutov
2013-01-15 22:38                         ` Paul Eggert
2013-01-15 23:09                           ` Dmitry Gutov
2013-01-15 23:44                             ` Dmitry Gutov
2013-01-16  5:57                               ` Paul Eggert
2013-01-17 10:32                                 ` Dmitry Gutov [this message]
2013-01-17 17:05                                   ` Eli Zaretskii
2013-01-18  4:15                                     ` Dmitry Gutov
2013-01-18  7:49                                       ` Eli Zaretskii
2013-01-17 21:14                                   ` Paul Eggert
2013-01-18  4:55                                     ` Dmitry Gutov
2013-01-18  5:26                                       ` Paul Eggert
2013-01-17 21:33                                   ` Paul Eggert
2013-01-18  4:36                                     ` Dmitry Gutov
2013-01-18  5:01                                       ` Paul Eggert
2013-01-18  5:10                                         ` Dmitry Gutov
2013-01-18  5:25                                           ` Paul Eggert
2013-01-18  5:54                                             ` Dmitry Gutov
2013-01-18  6:22                                               ` Dmitry Gutov
2013-01-18  7:56                                             ` Eli Zaretskii
2013-01-18 14:45                                               ` Dmitry Gutov
2013-01-18 21:35                                               ` Paul Eggert
2013-01-18 22:52                                                 ` Dmitry Gutov
2013-01-19  0:55                                                   ` Paul Eggert
2013-01-19  1:09                                                     ` Dmitry Gutov
2013-01-19  2:37                                                       ` Paul Eggert
2013-01-19  4:02                                                         ` Dmitry Gutov
2013-01-19  4:51                                                           ` Paul Eggert
     [not found]                                                             ` <DEB91990BBBB4255BFB466956EB54214@us.oracl!e.com>
     [not found]                                                             ` <DEB91990BBBB4255BFB466956EB54214@us.oracl!>
     [not found]                                                               ` <e.com@[87.69.4.28]>
     [not found]                                                                 ` <83wq! urc1u3.fsf@gnu.org>
     [not found]                                                             ` <DEB91990BBBB4255BFB466956! EB54214@us.oracl!>
     [not found]                                                             ` <DEB91990BBBB4255BFB466956EB54214@us.oracl! e.com>
2013-01-19  5:02                                                             ` Drew Adams
2013-02-01 16:32                                                               ` Drew Adams
2013-02-01 16:43                                                                 ` Drew Adams
2013-02-01 16:49                                                                   ` Drew Adams
2013-02-01 18:43                                                                 ` Eli Zaretskii
2013-02-01 19:19                                                                   ` Drew Adams
2013-02-01 19:36                                                                     ` Eli Zaretskii
2013-02-01 22:15                                                                       ` Drew Adams
2013-02-02  9:41                                                                         ` Eli Zaretskii
2013-02-02 16:06                                                                           ` Drew Adams
2013-02-01 19:38                                                                     ` Eli Zaretskii
2013-02-01 22:13                                                                       ` Drew Adams
2013-02-01 21:05                                                                 ` Paul Eggert
2013-02-01 22:14                                                                   ` Drew Adams
2013-02-01 22:22                                                                     ` Paul Eggert
2013-02-02  9:43                                                                       ` Eli Zaretskii
2013-03-19  8:39                                                                         ` Uwe Siart
2013-03-19 16:55                                                                           ` Eli Zaretskii
2013-03-19 17:50                                                                             ` Uwe Siart
2014-02-06  1:40                                                                             ` Lars Ingebrigtsen
2014-02-06  6:12                                                                               ` Drew Adams
2014-02-06  6:19                                                                               ` Eli Zaretskii
2013-02-02  9:38                                                                   ` Eli Zaretskii
2013-02-02 19:31                                                                     ` Paul Eggert
2013-01-18  7:57                                       ` Eli Zaretskii
2013-01-17 17:16                                 ` David Engster

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://www.gnu.org/software/emacs/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=50F7D358.9030100@gmail.com \
    --to=raaahh@gmail.com \
    --cc=13149@debbugs.gnu.org \
    --cc=eggert@cs.ucla.edu \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

Be sure your reply has a Subject: header at the top and a blank line before the message body.

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).