You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@vcl.apache.org by Roger Herling <Ro...@marist.edu> on 2010/05/10 19:32:32 UTC

Sysprep not running under windows 7

Sysprep doesn't run under windows 7 and uses newsid.exe instead Why is 
this happening?



Roger Herling
Sr. Desktop Administrator
Marist College
PH: 845-575-3347

Re: Sysprep not running under windows 7

Posted by Roger Herling <Ro...@marist.edu>.
Here is the vcld.log output for the image capture.  Am I missing something 
obvious here to get it to sysprerp?  When I create the image use sysprep 
is set to yes






2010-05-10 
12:02:32|7448|144:178|image|utils.pm:reservation_being_processed(9634)|computerloadlog 
'begin' entry does NOT exist for reservation 178
2010-05-10 
12:02:32|7448|144:178|image|utils.pm:reservation_being_processed(9686)|reservation 
is NOT currently being processed
2010-05-10 12:02:32|7448|144:178|image|vcld:main(276)|reservation 178 is 
NOT already being processed
2010-05-10 
12:02:32|7448|144:178|image|utils.pm:get_request_info(5354)|standalone 
affiliation found: Local
2010-05-10 
12:02:32|7448|144:178|image|utils.pm:get_management_node_info(6815)|management 
node info retrieved from database for vcl
2010-05-10 12:02:32|7448|144:178|image|vcld:main(281)|retrieved request 
information from database
2010-05-10 
12:02:32|7448|144:178|image|DataStructure.pm:is_parent_reservation(854)|returning 
true: parent reservation ID for this request: 178
2010-05-10 
12:02:33|7448|144:178|image|utils.pm:update_request_state(2186)|request 
144 state updated to: pending, laststate to: image
2010-05-10 
12:02:33|7448|144:178|image|utils.pm:insertloadlog(4710)|inserted 
computer=6, begin, beginning to process, state is image
2010-05-10 12:02:33|7448|144:178|image|vcld:make_new_child(509)|loaded 
VCL::image module
2010-05-10 12:02:33|9225|144:178|image|vcld:make_new_child(582)|vcld 
environment variable set to 0 for this process
2010-05-10 12:02:33|9225|144:178|image|Module.pm:new(132)|constructor 
called, class=VCL::image
2010-05-10 12:02:33|9225|144:178|image|Module.pm:new(154)|VCL::image 
object created
2010-05-10 12:02:33|7448|144:178|image|vcld:make_new_child(566)|current 
number of forked kids: 1
2010-05-10 12:02:33|9225|144:178|image|State.pm:initialize(85)|obtained a 
database handle for this state process, stored as $ENV{dbh}
2010-05-10 12:02:33|9225|144:178|image|State.pm:check_image_os(839)|no 
corrections need to be made to image OS: winvista
2010-05-10 
12:02:33|9225|144:178|image|DataStructure.pm:is_parent_reservation(854)|returning 
true: parent reservation ID for this request: 178
2010-05-10 
12:02:33|9225|144:178|image|utils.pm:rename_vcld_process(7863)|reservation 
count: 1
2010-05-10 
12:02:33|9225|144:178|image|utils.pm:rename_vcld_process(7882)|PARENTIMAGE: 
1
2010-05-10 
12:02:33|9225|144:178|image|utils.pm:rename_vcld_process(7883)|SUBIMAGE: 0
2010-05-10 
12:02:33|9225|144:178|image|utils.pm:rename_vcld_process(7901)|renamed 
process to 'vcld VCL::image 144:178 image imaging'
2010-05-10 
12:02:33|9225|144:178|image|DataStructure.pm:is_parent_reservation(854)|returning 
true: parent reservation ID for this request: 178
2010-05-10 
12:02:33|9225|144:178|image|DataStructure.pm:is_parent_reservation(854)|returning 
true: parent reservation ID for this request: 178
2010-05-10 12:02:33|9225|144:178|image|State.pm:initialize(121)|attempting 
to load provisioning module: VCL::Module::Provisioning::xCAT
2010-05-10 12:02:33|9225|144:178|image|xCAT.pm:initialize(110)|XCATROOT 
environment variable is not set, using /opt/xcat
2010-05-10 12:02:33|9225|144:178|image|xCAT.pm:initialize(128)|xCAT root 
path found: /opt/xcat
2010-05-10 12:02:33|9225|144:178|image|xCAT.pm:initialize(130)|xCAT module 
initialized
2010-05-10 
12:02:33|9225|144:178|image|State.pm:initialize(127)|VCL::Module::Provisioning::xCAT 
module loaded
2010-05-10 12:02:33|9225|144:178|image|Module.pm:new(132)|constructor 
called, class=VCL::Module::Provisioning::xCAT
2010-05-10 
12:02:33|9225|144:178|image|Module.pm:new(154)|VCL::Module::Provisioning::xCAT 
object created
2010-05-10 12:02:33|9225|144:178|image|xCAT.pm:initialize(110)|XCATROOT 
environment variable is not set, using /opt/xcat
2010-05-10 12:02:33|9225|144:178|image|xCAT.pm:initialize(128)|xCAT root 
path found: /opt/xcat
2010-05-10 12:02:33|9225|144:178|image|xCAT.pm:initialize(130)|xCAT module 
initialized
2010-05-10 
12:02:33|9225|144:178|image|State.pm:initialize(131)|VCL::Module::Provisioning::xCAT 
provisioner object created
2010-05-10 12:02:33|9225|144:178|image|State.pm:initialize(145)|attempting 
to load OS module: VCL::Module::OS::Windows::Version_6::Vista
2010-05-10 
12:02:33|9225|144:178|image|State.pm:initialize(151)|VCL::Module::OS::Windows::Version_6::Vista 
module loaded
2010-05-10 12:02:33|9225|144:178|image|Module.pm:new(132)|constructor 
called, class=VCL::Module::OS::Windows::Version_6::Vista
2010-05-10 
12:02:33|9225|144:178|image|Module.pm:new(154)|VCL::Module::OS::Windows::Version_6::Vista 
object created
2010-05-10 
12:02:33|9225|144:178|image|State.pm:initialize(154)|VCL::Module::OS::Windows::Version_6::Vista 
OS object created
2010-05-10 12:02:33|9225|144:178|image|State.pm:initialize(169)|returning 
1
2010-05-10 12:02:33|9225|144:178|image|vcld:make_new_child(591)|VCL::image 
object created and initialized
2010-05-10 12:02:34|9225|144:178|image|utils.pm:mail(1348)|SUCCESS -- 
Sending mail To: , VCL IMAGE Creation Started: 
winvista-Windows7FacStaff49-v0
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:does_image_exist(2699)|image OS 
install type: partimage
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:_get_image_repository_path(3175)|management 
node identifier argument was not specified
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:_get_image_repository_path(3197)|attempting 
to determine repository path for image on vcl.is.marist.edu:
|9225|144:178|image| image id: 49
|9225|144:178|image| OS name: winvista
|9225|144:178|image| OS type: windows
|9225|144:178|image| OS install type: partimage
|9225|144:178|image| OS source path: image
|9225|144:178|image| architecture: x86
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:_get_image_repository_path(3271)|returning 
repository path for vcl.is.marist.edu: /storage/x86/image/x86
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:does_image_exist(2709)|image 
repository path: /storage/x86/image/x86
2010-05-10 12:02:34|9225|144:178|image|utils.pm:run_command(9737)|executed 
command: du -c /storage/x86/image/x86/*winvista-Windows7FacStaff49-v0* 
2>&1 | grep total 2>&1, pid: 9231, exit status: 0, output:
|9225|144:178|image| 0 total
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:does_image_exist(2771)|image does NOT 
exist: winvista-Windows7FacStaff49-v0
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:_get_image_repository_path(3175)|management 
node identifier argument was not specified
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:_get_image_repository_path(3197)|attempting 
to determine repository path for image on vcl.is.marist.edu:
|9225|144:178|image| image id: 49
|9225|144:178|image| OS name: winvista
|9225|144:178|image| OS type: windows
|9225|144:178|image| OS install type: partimage
|9225|144:178|image| OS source path: image
|9225|144:178|image| architecture: x86
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:_get_image_repository_path(3271)|returning 
repository path for vcl.is.marist.edu: /storage/x86/image/x86
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:_get_image_template_path(3309)|returning 
image repository path: /opt/xcat/storage/x86/image/x86
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:does_image_exist(2783)|template 
repository path for winvista-Windows7FacStaff49-v0: 
/opt/xcat/storage/x86/image/x86
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:does_image_exist(2795)|template file 
does not exist: 
/opt/xcat/storage/x86/image/x86/winvista-Windows7FacStaff49-v0.tmpl
2010-05-10 
12:02:34|9225|144:178|image|xCAT.pm:does_image_exist(2835)|image 
winvista-Windows7FacStaff49-v0 does NOT exist on this management node
2010-05-10 12:02:34|9225|144:178|image|image.pm:process(145)|image 
winvista-Windows7FacStaff49-v0 does not exist in the repository
2010-05-10 
12:02:34|9225|144:178|image|DataStructure.pm:_automethod(697)|data 
structure updated: 
$self->request_data->{reservation}{178}{image}{lastupdate}
|9225|144:178|image| image_lastupdate = 2010-05-10 12:02:34
2010-05-10 
12:02:34|9225|144:178|image|DataStructure.pm:_automethod(697)|data 
structure updated: 
$self->request_data->{reservation}{178}{imagerevision}{datecreated}
|9225|144:178|image| imagerevision_date_created = 2010-05-10 12:02:34
2010-05-10 12:02:34|9225|144:178|image|image.pm:process(161)|calling 
provisioning module's capture() subroutine
2010-05-10 12:02:34|9225|144:178|image|xCAT.pm:capture(1076)|xCAT capture 
beginning: image=winvista-Windows7FacStaff49-v0, computer=node4
2010-05-10 
12:02:34|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/winxp_blade.key  -l root -p 
22 -x node4 'chown root currentimage.txt; chmod 777 currentimage.txt' 2>&1
2010-05-10 
12:02:35|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:02:35|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 
12:02:35|9225|144:178|image|utils.pm:write_currentimage_txt(6500)|updated 
ownership and permissions on currentimage.txt
2010-05-10 
12:02:35|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/winxp_blade.key  -l root -p 
22 -x node4 'echo -e 
"winvista-Windows7FacStaff49-v0\r\nid=49\r\nprettyname=Windows7FacStaff\r\nimagerevision_id=60\r\nimagerevision_datecreated=2010-05-10 
12:02:34\r\ncomputer_id=6\r\ncomputer_hostname=node4" > currentimage.txt & 
cat currentimage.txt' 2>&1
2010-05-10 
12:02:36|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| winvista-Windows7FacStaff49-v0
|9225|144:178|image| id=49
|9225|144:178|image| prettyname=Windows7FacStaff
|9225|144:178|image| imagerevision_id=60
|9225|144:178|image| imagerevision_datecreated=2010-05-10 12:02:34
|9225|144:178|image| computer_id=6
|9225|144:178|image| computer_hostname=node4
2010-05-10 12:02:36|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, 
"winvista-Windows7FacStaff49-v0...")
2010-05-10 
12:02:36|9225|144:178|image|utils.pm:write_currentimage_txt(6510)|created 
currentimage.txt file on node4:
|9225|144:178|image| winvista-Windows7FacStaff49-v0
|9225|144:178|image| id=49
|9225|144:178|image| prettyname=Windows7FacStaff
|9225|144:178|image| imagerevision_id=60
|9225|144:178|image| imagerevision_datecreated=2010-05-10 12:02:34
|9225|144:178|image| computer_id=6
|9225|144:178|image| computer_hostname=node4
2010-05-10 
12:02:36|9225|144:178|image|xCAT.pm:capture(1079)|currentimage.txt updated 
on node4
2010-05-10 12:02:36|9225|144:178|image|xCAT.pm:capture(1091)|calling OS 
module's pre_capture() subroutine
2010-05-10 12:02:36|9225|144:178|image|Vista.pm:pre_capture(100)|calling 
parent class pre_capture() subroutine
2010-05-10 
12:02:36|9225|144:178|image|Version_6.pm:pre_capture(112)|calling parent 
class pre_capture() subroutine
2010-05-10 
12:02:36|9225|144:178|image|Windows.pm:pre_capture(138)|beginning Windows 
image capture preparation tasks on node4
2010-05-10 
12:02:36|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'qwinsta.exe' 2>&1
2010-05-10 
12:02:36|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| SESSIONNAME USERNAME ID STATE TYPE DEVICE
|9225|144:178|image| >services 0 Disc
|9225|144:178|image| console 1 Conn
|9225|144:178|image| rdp-tcp 65536 Listen
2010-05-10 12:02:36|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "SESSIONNAME USERNAME ID STATE 
...")
2010-05-10 
12:02:36|9225|144:178|image|Windows.pm:set_password(1640)|setting password 
of root to cluster on node4
2010-05-10 
12:02:36|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'net user root 'cluster'' 2>&1
2010-05-10 
12:02:37|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| The command completed successfully.
2010-05-10 12:02:37|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "The command completed 
successf...")
2010-05-10 
12:02:37|9225|144:178|image|Windows.pm:set_password(1642)|password changed 
to 'cluster' for user 'root' on node4
2010-05-10 12:02:37|9225|144:178|image|Windows.pm:set_password(1656)|root 
account password changed, must also change sshd service credentials
2010-05-10 
12:02:37|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/sc.exe config sshd obj= ".\root" password= 
"cluster"' 2>&1
2010-05-10 12:02:38|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:02:38
2010-05-10 
12:02:38|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| [SC] ChangeServiceConfig SUCCESS
2010-05-10 12:02:38|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "[SC] ChangeServiceConfig 
SUCCE...")
2010-05-10 
12:02:38|9225|144:178|image|Windows.pm:set_service_credentials(3340)|changed 
logon credentials for 'sshd' service to root (cluster) on node4
2010-05-10 
12:02:38|9225|144:178|image|Windows.pm:set_password(1664)|changing 
passwords for scheduled tasks
2010-05-10 
12:02:38|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'schtasks.exe /Query /V /FO LIST' 2>&1
2010-05-10 
12:02:41|9225|144:178|image|Windows.pm:set_password(1666)|queried 
scheduled tasks on node4
2010-05-10 
12:02:41|9225|144:178|image|Windows.pm:set_password(1686)|password needs 
to be updated for scheduled task: 
\RealUpgradeLogonTaskS-1-5-21-327389955-2436460184-3870342087-1000
|9225|144:178|image| Run As User: root-PC\root
2010-05-10 
12:02:41|9225|144:178|image|Windows.pm:set_password(1686)|password needs 
to be updated for scheduled task: 
\RealUpgradeScheduledTaskS-1-5-21-327389955-2436460184-3870342087-1000
|9225|144:178|image| Run As User: root-PC\root
2010-05-10 
12:02:41|9225|144:178|image|Windows.pm:set_password(1686)|password needs 
to be updated for scheduled task: 
\WPD\SqmUpload_S-1-5-21-327389955-2436460184-3870342087-1000
|9225|144:178|image| Run As User: root-PC\root
2010-05-10 
12:02:41|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'schtasks.exe /Change /RP "cluster" /TN 
"\RealUpgradeLogonTaskS-1-5-21-327389955-2436460184-3870342087-1000"' 2>&1
2010-05-10 
12:02:42|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| SUCCESS: The parameters of scheduled task 
"\RealUpgradeLogonTaskS-1-5-21-327389955-2436460184-3870342087-1000" have 
been changed.
2010-05-10 12:02:42|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "SUCCESS: The parameters of 
sch...")
2010-05-10 
12:02:42|9225|144:178|image|Windows.pm:set_password(1694)|changed password 
for scheduled task: 
\RealUpgradeLogonTaskS-1-5-21-327389955-2436460184-3870342087-1000
2010-05-10 
12:02:42|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'schtasks.exe /Change /RP "cluster" /TN 
"\RealUpgradeScheduledTaskS-1-5-21-327389955-2436460184-3870342087-1000"' 
2>&1
2010-05-10 12:02:43|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:02:43
2010-05-10 
12:02:44|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| SUCCESS: The parameters of scheduled task 
"\RealUpgradeScheduledTaskS-1-5-21-327389955-2436460184-3870342087-1000" 
have been changed.
2010-05-10 12:02:44|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "SUCCESS: The parameters of 
sch...")
2010-05-10 
12:02:44|9225|144:178|image|Windows.pm:set_password(1694)|changed password 
for scheduled task: 
\RealUpgradeScheduledTaskS-1-5-21-327389955-2436460184-3870342087-1000
2010-05-10 
12:02:44|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'schtasks.exe /Change /RP "cluster" /TN 
"\WPD\SqmUpload_S-1-5-21-327389955-2436460184-3870342087-1000"' 2>&1
2010-05-10 
12:02:45|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| SUCCESS: The parameters of scheduled task 
"\WPD\SqmUpload_S-1-5-21-327389955-2436460184-3870342087-1000" have been 
changed.
2010-05-10 12:02:45|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "SUCCESS: The parameters of 
sch...")
2010-05-10 
12:02:45|9225|144:178|image|Windows.pm:set_password(1694)|changed password 
for scheduled task: 
\WPD\SqmUpload_S-1-5-21-327389955-2436460184-3870342087-1000
2010-05-10 
12:02:45|9225|144:178|image|Windows.pm:delete_user(1570)|attempting to 
delete user admin from node4
2010-05-10 
12:02:45|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'net user admin /DELETE' 2>&1
2010-05-10 
12:02:46|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| The user name could not be found.
|9225|144:178|image| More help is available by typing NET HELPMSG 2221.
2010-05-10 12:02:46|9225|144:178|image|utils.pm:run_ssh_command(6272)|SSH 
command executed on node4, command:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'net user admin /DELETE' 2>&1
|9225|144:178|image| returning (2, "The user name could not be fou...")
2010-05-10 12:02:46|9225|144:178|image|Windows.pm:delete_user(1575)|user 
admin was not deleted because user does not exist
2010-05-10 
12:02:46|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Documents\ and\ Settings/admin
2010-05-10 
12:02:46|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Documents and Settings\\admin
2010-05-10 
12:02:46|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Documents and Settings\\admin"' 2>&1
2010-05-10 
12:02:47|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: C:\\Documents and Settings\\admin
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 12:02:47|9225|144:178|image|Windows.pm:delete_file(898)|file 
not deleted because it does not exist: C:/Documents and Settings/admin
2010-05-10 
12:02:47|9225|144:178|image|Windows.pm:delete_user(1591)|deleted profile 
for user admin from node4
2010-05-10 
12:02:47|9225|144:178|image|Windows.pm:delete_users(1350)|deleted 1 users 
from node4
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module::OS::Windows::Version_6::Vista
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(295)|parent 
package names for VCL::Module::OS::Windows::Version_6::Vista:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS::Windows::Version_6'
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module::OS::Windows::Version_6
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(295)|parent 
package names for VCL::Module::OS::Windows::Version_6:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS::Windows'
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module::OS::Windows
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(295)|parent 
package names for VCL::Module::OS::Windows:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS'
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module::OS
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(295)|parent 
package names for VCL::Module::OS:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module'
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(291)|VCL::Module 
has no parent packages
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(309)|returning 
for VCL::Module::OS:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module'
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(309)|returning 
for VCL::Module::OS::Windows:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS'
|9225|144:178|image| |--[1] = 'VCL::Module'
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(309)|returning 
for VCL::Module::OS::Windows::Version_6:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS::Windows'
|9225|144:178|image| |--[1] = 'VCL::Module::OS'
|9225|144:178|image| |--[2] = 'VCL::Module'
2010-05-10 
12:02:47|9225|144:178|image|Module.pm:get_package_hierarchy(309)|returning 
for VCL::Module::OS::Windows::Version_6::Vista:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS::Windows::Version_6::Vista'
|9225|144:178|image| |--[1] = 'VCL::Module::OS::Windows::Version_6'
|9225|144:178|image| |--[2] = 'VCL::Module::OS::Windows'
|9225|144:178|image| |--[3] = 'VCL::Module::OS'
|9225|144:178|image| |--[4] = 'VCL::Module'
2010-05-10 
12:02:47|9225|144:178|image|OS.pm:get_source_configuration_directories(160)|package 
source configuration directory: /usr/local/vcl/bin/../tools/Windows_Vista
2010-05-10 
12:02:47|9225|144:178|image|OS.pm:get_source_configuration_directories(160)|package 
source configuration directory: 
/usr/local/vcl/bin/../tools/Windows_Version_6
2010-05-10 
12:02:47|9225|144:178|image|OS.pm:get_source_configuration_directories(160)|package 
source configuration directory: /usr/local/vcl/bin/../tools/Windows
2010-05-10 
12:02:47|9225|144:178|image|OS.pm:get_source_configuration_directories(156)|source 
configuration directory is not defined for VCL::Module::OS
2010-05-10 
12:02:47|9225|144:178|image|OS.pm:get_source_configuration_directories(156)|source 
configuration directory is not defined for VCL::Module
2010-05-10 
12:02:47|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/system32/GroupPolicy/User/Scripts/ 
matching pattern .*\(Prepare\|prepare\|Cleanup\|cleanup\|post_load\).*, 
max depth: 5
2010-05-10 
12:02:47|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/system32/GroupPolicy/User/Scripts/" 
-mindepth 1 -maxdepth 5 -iregex 
".*\(Prepare\|prepare\|Cleanup\|cleanup\|post_load\).*" -exec chmod 777 {} 
\; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:02:48|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under 
'$SYSTEMROOT/system32/GroupPolicy/User/Scripts/' matching 
'.*\(Prepare\|prepare\|Cleanup\|cleanup\|post_load\).*'
2010-05-10 
12:02:48|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under C:/Cygwin/home/root/ matching pattern 
.*\(vbs\|exe\|cmd\|bat\|log\), max depth: 5
2010-05-10 
12:02:48|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "C:/Cygwin/home/root/" -mindepth 1 -maxdepth 5 
-iregex ".*\(vbs\|exe\|cmd\|bat\|log\)" -exec chmod 777 {} \; -exec rm 
-rvf {} \;' 2>&1
2010-05-10 12:02:48|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:02:48
2010-05-10 
12:02:52|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|25/0 
files deleted deleted under 'C:/Cygwin/home/root/' matching 
'.*\(vbs\|exe\|cmd\|bat\|log\)'
2010-05-10 
12:02:52|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/post_load/autologon_disable.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/post_load/configure_networking.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/post_load/debug_info.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/post_load/delete_post_load_run_key.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/post_load/update_cygwin.log'
|9225|144:178|image| removed `C:/Cygwin/home/root/VCL/Logs/post_load.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/run_newsid/add_post_load_run_key.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/run_newsid/autologon_enable.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/run_newsid/debug_info.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Logs/run_newsid/set_computer_name.log'
|9225|144:178|image| removed `C:/Cygwin/home/root/VCL/Logs/run_newsid.log'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/add_post_load_run_key.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/autologon_disable.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/autologon_enable.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/configure_networking.vbs'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/debug_info.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/delete_post_load_run_key.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/post_load.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/run_newsid.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/set_computer_name.vbs'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/sysprep_cmdlines.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/system_startup.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Scripts/update_cygwin.cmd'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Utilities/NewSID/newsid.exe'
|9225|144:178|image| removed 
`C:/Cygwin/home/root/VCL/Utilities/SPDrvScn/spdrvscn.exe'
2010-05-10 
12:02:52|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/VCL
2010-05-10 
12:02:52|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\VCL
2010-05-10 
12:02:52|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\VCL"' 2>&1
2010-05-10 
12:02:52|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: C:\\VCL
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 12:02:52|9225|144:178|image|Windows.pm:delete_file(898)|file 
not deleted because it does not exist: C:/VCL
2010-05-10 
12:02:52|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'schtasks.exe /Delete /F /TN "VCL Startup Configuration"' 2>&1
2010-05-10 12:02:53|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:02:53
2010-05-10 
12:02:53|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| ERROR: The system cannot find the file specified.
2010-05-10 12:02:53|9225|144:178|image|utils.pm:run_ssh_command(6272)|SSH 
command executed on node4, command:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'schtasks.exe /Delete /F /TN "VCL Startup Configuration"' 2>&1
|9225|144:178|image| returning (1, "ERROR: The system cannot find ...")

|9225|144:178|image| ---- WARNING ---- 
|9225|144:178|image| 2010-05-10 
12:02:53|9225|144:178|image|Windows.pm:delete_scheduled_task(2451)|failed 
to deleted existing scheduled task 'VCL Startup Configuration' on node4, 
exit status: 1, output:
|9225|144:178|image| ERROR: The system cannot find the file specified.
|9225|144:178|image| ( 0) utils.pm, notify (line: 737)
|9225|144:178|image| (-1) Windows.pm, delete_scheduled_task (line: 2451)
|9225|144:178|image| (-2) Windows.pm, delete_capture_configuration_files 
(line: 5180)
|9225|144:178|image| (-3) Windows.pm, copy_capture_configuration_files 
(line: 5902)
|9225|144:178|image| (-4) Windows.pm, pre_capture (line: 179)
|9225|144:178|image| (-5) Version_6.pm, pre_capture (line: 113)
|9225|144:178|image| (-6) Vista.pm, pre_capture (line: 101)

2010-05-10 
12:02:53|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'touch $SYSTEMROOT/system32/GroupPolicy/User/Scripts/scripts.ini && 
chown root $SYSTEMROOT/system32/GroupPolicy/User/Scripts/scripts.ini' 2>&1
2010-05-10 
12:02:54|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| touch: cannot touch 
`C:\\Windows/system32/GroupPolicy/User/Scripts/scripts.ini': No such file 
or directory
2010-05-10 12:02:54|9225|144:178|image|utils.pm:run_ssh_command(6272)|SSH 
command executed on node4, command:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'touch $SYSTEMROOT/system32/GroupPolicy/User/Scripts/scripts.ini && 
chown root $SYSTEMROOT/system32/GroupPolicy/User/Scripts/scripts.ini' 2>&1
|9225|144:178|image| returning (1, "touch: cannot touch `C:\\Windo...")
2010-05-10 
12:02:54|9225|144:178|image|Windows.pm:remove_group_policy_script(5500)|scripts.ini 
file does not exist, nothing to remove
2010-05-10 
12:02:54|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'touch $SYSTEMROOT/system32/GroupPolicy/User/Scripts/scripts.ini && 
chown root $SYSTEMROOT/system32/GroupPolicy/User/Scripts/scripts.ini' 2>&1
2010-05-10 
12:02:55|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| touch: cannot touch 
`C:\\Windows/system32/GroupPolicy/User/Scripts/scripts.ini': No such file 
or directory
2010-05-10 12:02:55|9225|144:178|image|utils.pm:run_ssh_command(6272)|SSH 
command executed on node4, command:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'touch $SYSTEMROOT/system32/GroupPolicy/User/Scripts/scripts.ini && 
chown root $SYSTEMROOT/system32/GroupPolicy/User/Scripts/scripts.ini' 2>&1
|9225|144:178|image| returning (1, "touch: cannot touch `C:\\Windo...")
2010-05-10 
12:02:55|9225|144:178|image|Windows.pm:remove_group_policy_script(5500)|scripts.ini 
file does not exist, nothing to remove
2010-05-10 
12:02:55|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: $SYSTEMDRIVE/Documents\ and\ Settings/root/Application\ 
Data/VCL
2010-05-10 
12:02:55|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: $SYSTEMDRIVE\\Documents and Settings\\root\\Application 
Data\\VCL
2010-05-10 
12:02:55|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "$SYSTEMDRIVE\\Documents and 
Settings\\root\\Application Data\\VCL"' 2>&1
2010-05-10 
12:02:56|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: $SYSTEMDRIVE\\Documents and 
Settings\\root\\Application Data\\VCL
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 12:02:56|9225|144:178|image|Windows.pm:delete_file(898)|file 
not deleted because it does not exist: $SYSTEMDRIVE/Documents and 
Settings/root/Application Data/VCL
2010-05-10 
12:02:56|9225|144:178|image|Windows.pm:delete_capture_configuration_files(5190)|attempting 
to remove old configuration directory if it exists: 
C:/Cygwin/home/root/VCL
2010-05-10 
12:02:56|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/home/root/VCL
2010-05-10 
12:02:56|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\home\\root\\VCL
2010-05-10 
12:02:56|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\home\\root\\VCL"' 2>&1
2010-05-10 
12:02:57|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\home\\root\\VCL, dir output:
|9225|144:178|image| Drivers
|9225|144:178|image| Logs
|9225|144:178|image| Scripts
|9225|144:178|image| Security
|9225|144:178|image| Utilities
2010-05-10 
12:02:57|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/home/root/VCL
2010-05-10 
12:02:57|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/home/root/VCL' 2>&1
2010-05-10 12:02:58|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/home/root/VCL
2010-05-10 
12:02:58|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/home/root/VCL' 2>&1
2010-05-10 12:02:58|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:02:58
2010-05-10 12:02:59|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/home/root/VCL using rm, files deleted: 9, directories deleted: 
16
2010-05-10 
12:03:00|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\home\\root\\VCL"' 2>&1
2010-05-10 
12:03:00|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: C:\\Cygwin\\home\\root\\VCL
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:03:00|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/home/root/VCL
2010-05-10 
12:03:00|9225|144:178|image|Windows.pm:create_directory(819)|attempting to 
create 1 directories:
|9225|144:178|image| C:/Cygwin/home/root/VCL
2010-05-10 
12:03:00|9225|144:178|image|Windows.pm:create_directory(826)|attempting to 
create directory: C:/Cygwin/home/root/VCL
2010-05-10 
12:03:00|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/cmd.exe /c "mkdir 
\"C:/Cygwin/home/root/VCL\""' 2>&1
2010-05-10 
12:03:01|9225|144:178|image|Windows.pm:create_directory(831)|directory 
created on node4: C:/Cygwin/home/root/VCL, output:
|9225|144:178|image| none
2010-05-10 
12:03:01|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\home\\root\\VCL"' 2>&1
2010-05-10 
12:03:02|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\home\\root\\VCL, dir output:
|9225|144:178|image| none
2010-05-10 
12:03:02|9225|144:178|image|Windows.pm:create_directory(853)|verified that 
filesystem entry exists on node4: C:/Cygwin/home/root/VCL
2010-05-10 
12:03:02|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5915)|copying 
image capture configuration files from /usr/local/vcl/bin/../tools/Windows 
to node4
2010-05-10 
12:03:02|9225|144:178|image|utils.pm:run_scp_command(6403)|attempt 1/3: 
executing SCP command: /usr/bin/scp -B -i /etc/vcl/vcl.key -P 22 -p -r 
/usr/local/vcl/bin/../tools/Windows/* node4:C:/Cygwin/home/root/VCL 2>&1
2010-05-10 12:03:03|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:03
2010-05-10 12:03:08|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:08
2010-05-10 12:03:09|9225|144:178|image|utils.pm:run_scp_command(6453)|scp 
successful: attempt 1/3, exit status: 0, output: none
2010-05-10 
12:03:09|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5917)|copied 
/usr/local/vcl/bin/../tools/Windows directory to 
node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:09|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5919)|attempting 
to set permissions on node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:09|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/usr/bin/chmod.exe -R 777 C:/Cygwin/home/root/VCL' 2>&1
2010-05-10 
12:03:10|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:03:10|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 
12:03:10|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5920)|chmoded 
-R 777 node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:10|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5915)|copying 
image capture configuration files from 
/usr/local/vcl/bin/../tools/Windows_Version_6 to node4
2010-05-10 
12:03:10|9225|144:178|image|utils.pm:run_scp_command(6403)|attempt 1/3: 
executing SCP command: /usr/bin/scp -B -i /etc/vcl/vcl.key -P 22 -p -r 
/usr/local/vcl/bin/../tools/Windows_Version_6/* 
node4:C:/Cygwin/home/root/VCL 2>&1
2010-05-10 12:03:11|9225|144:178|image|utils.pm:run_scp_command(6453)|scp 
successful: attempt 1/3, exit status: 0, output: none
2010-05-10 
12:03:11|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5917)|copied 
/usr/local/vcl/bin/../tools/Windows_Version_6 directory to 
node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:11|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5919)|attempting 
to set permissions on node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:11|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/usr/bin/chmod.exe -R 777 C:/Cygwin/home/root/VCL' 2>&1
2010-05-10 
12:03:12|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:03:12|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 
12:03:12|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5920)|chmoded 
-R 777 node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:12|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5915)|copying 
image capture configuration files from 
/usr/local/vcl/bin/../tools/Windows_Vista to node4
2010-05-10 
12:03:12|9225|144:178|image|utils.pm:run_scp_command(6403)|attempt 1/3: 
executing SCP command: /usr/bin/scp -B -i /etc/vcl/vcl.key -P 22 -p -r 
/usr/local/vcl/bin/../tools/Windows_Vista/* node4:C:/Cygwin/home/root/VCL 
2>&1
2010-05-10 12:03:13|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:13
2010-05-10 12:03:13|9225|144:178|image|utils.pm:run_scp_command(6453)|scp 
successful: attempt 1/3, exit status: 0, output: none
2010-05-10 
12:03:13|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5917)|copied 
/usr/local/vcl/bin/../tools/Windows_Vista directory to 
node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:13|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5919)|attempting 
to set permissions on node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:13|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/usr/bin/chmod.exe -R 777 C:/Cygwin/home/root/VCL' 2>&1
2010-05-10 
12:03:14|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:03:14|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 
12:03:14|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5920)|chmoded 
-R 777 node4:C:/Cygwin/home/root/VCL
2010-05-10 
12:03:14|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under C:/Cygwin/home/root/VCL/ matching pattern .*\.svn.*, 
max depth: 5
2010-05-10 
12:03:14|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "C:/Cygwin/home/root/VCL/" -mindepth 1 -maxdepth 5 
-iregex ".*\.svn.*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:03:15|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under 'C:/Cygwin/home/root/VCL/' matching 
'.*\.svn.*'
2010-05-10 
12:03:15|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/grep -ilr "WINDOWS_ROOT_PASSWORD" "C:/Cygwin/home/root/VCL" 
2>&1 | grep -Ev ".(exe|dll)"' 2>&1
2010-05-10 
12:03:16|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| C:/Cygwin/home/root/VCL/Scripts/autologon_enable.cmd
2010-05-10 12:03:16|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, 
"C:/Cygwin/home/root/VCL/Script...")
2010-05-10 
12:03:16|9225|144:178|image|Windows.pm:search_and_replace_in_files(5828)|found 
files matching pattern 'WINDOWS_ROOT_PASSWORD' in C:/Cygwin/home/root/VCL:
|9225|144:178|image| C:/Cygwin/home/root/VCL/Scripts/autologon_enable.cmd
2010-05-10 
12:03:16|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/sed -i -e "s/WINDOWS_ROOT_PASSWORD/cluster/" 
"C:/Cygwin/home/root/VCL/Scripts/autologon_enable.cmd"' 2>&1
2010-05-10 
12:03:17|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:03:17|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 
12:03:17|9225|144:178|image|Windows.pm:search_and_replace_in_files(5854)|replaced 
'WINDOWS_ROOT_PASSWORD' with 'cluster' in 
C:/Cygwin/home/root/VCL/Scripts/autologon_enable.cmd
2010-05-10 
12:03:17|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'unix2dos C:/Cygwin/home/root/VCL/Scripts/autologon_enable.cmd' 2>&1
2010-05-10 12:03:18|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:18
2010-05-10 
12:03:18|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| C:/Cygwin/home/root/VCL/Scripts/autologon_enable.cmd: 
done.
2010-05-10 12:03:18|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, 
"C:/Cygwin/home/root/VCL/Script...")
2010-05-10 12:03:18|9225|144:178|image|Windows.pm:run_unix2dos(5756)|ran 
unix2dos on C:/Cygwin/home/root/VCL/Scripts/autologon_enable.cmd
2010-05-10 
12:03:18|9225|144:178|image|Windows.pm:copy_capture_configuration_files(5940)|set 
the Windows root password in configuration files
2010-05-10 
12:03:18|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/disable_autoadminlogon_190.reg; 
/usr/bin/echo.exe -E "Windows Registry Editor Version 5.00
|9225|144:178|image| ; This file disables autoadminlogon for the root 
account
|9225|144:178|image| [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows 
NT\\CurrentVersion\\Winlogon]
|9225|144:178|image| \"AutoAdminLogon\"=\"0\"
|9225|144:178|image| \"AutoLogonCount\"=\"0\"
|9225|144:178|image| \"DefaultPassword\"= \"\"" > 
C:/Cygwin/tmp/disable_autoadminlogon_190.reg' 2>&1
2010-05-10 
12:03:19|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/disable_autoadminlogon_190.reg
2010-05-10 
12:03:19|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'set' 2>&1
2010-05-10 12:03:20|9225|144:178|image|Windows.pm:is_64_bit(7698)|executed 
set command to determine architecture on node4
2010-05-10 
12:03:20|9225|144:178|image|Windows.pm:is_64_bit(7716)|PROCESSOR_IDENTIFIER 
environment variable: PROCESSOR_IDENTIFIER='x86 Family 6 Model 15 Stepping 
6, GenuineIntel'
2010-05-10 12:03:20|9225|144:178|image|Windows.pm:is_64_bit(7726)|32-bit 
Windows OS detected
2010-05-10 
12:03:20|9225|144:178|image|Windows.pm:get_system32_path(7760)|32-bit 
Windows OS, using C:/Windows/System32
2010-05-10 
12:03:20|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/disable_autoadminlogon_190.reg' 2>&1
2010-05-10 
12:03:21|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/disable_autoadminlogon_190.reg
2010-05-10 
12:03:21|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/disable_autoadminlogon_190.reg
2010-05-10 
12:03:21|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\disable_autoadminlogon_190.reg
2010-05-10 
12:03:21|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_autoadminlogon_190.reg"' 2>&1
2010-05-10 
12:03:22|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\disable_autoadminlogon_190.reg, 
dir output:
|9225|144:178|image| disable_autoadminlogon_190.reg
2010-05-10 
12:03:22|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/disable_autoadminlogon_190.reg
2010-05-10 
12:03:22|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/disable_autoadminlogon_190.reg' 2>&1
2010-05-10 12:03:22|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/disable_autoadminlogon_190.reg
2010-05-10 
12:03:22|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/disable_autoadminlogon_190.reg' 2>&1
2010-05-10 12:03:23|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:23
2010-05-10 12:03:23|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/disable_autoadminlogon_190.reg using rm, files deleted: 1, 
directories deleted: 0
2010-05-10 
12:03:24|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_autoadminlogon_190.reg"' 2>&1
2010-05-10 
12:03:25|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: 
C:\\Cygwin\\tmp\\disable_autoadminlogon_190.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:03:25|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/disable_autoadminlogon_190.reg
2010-05-10 
12:03:25|9225|144:178|image|Windows.pm:disable_autoadminlogon(2609)|disabled 
autoadminlogon
2010-05-10 
12:03:25|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/disable_ipv6_201.reg; /usr/bin/echo.exe -E 
"Windows Registry Editor Version 5.00
|9225|144:178|image| ; This registry file contains the entries to disable 
all IPv6 components
|9225|144:178|image| ; http://support.microsoft.com/kb/929852
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Tcpip6\\Parameters]
|9225|144:178|image| \"DisabledComponents\"=dword:ffffffff" > 
C:/Cygwin/tmp/disable_ipv6_201.reg' 2>&1
2010-05-10 
12:03:26|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/disable_ipv6_201.reg
2010-05-10 
12:03:26|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:03:26|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/disable_ipv6_201.reg' 2>&1
2010-05-10 
12:03:27|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/disable_ipv6_201.reg
2010-05-10 
12:03:27|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/disable_ipv6_201.reg
2010-05-10 
12:03:27|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\disable_ipv6_201.reg
2010-05-10 
12:03:27|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\tmp\\disable_ipv6_201.reg"' 2>&1
2010-05-10 
12:03:28|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\disable_ipv6_201.reg, dir output:
|9225|144:178|image| disable_ipv6_201.reg
2010-05-10 
12:03:28|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/disable_ipv6_201.reg
2010-05-10 
12:03:28|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/disable_ipv6_201.reg' 2>&1
2010-05-10 12:03:28|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:28
2010-05-10 12:03:29|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/disable_ipv6_201.reg
2010-05-10 
12:03:29|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/disable_ipv6_201.reg' 2>&1
2010-05-10 12:03:29|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/disable_ipv6_201.reg using rm, files deleted: 1, directories 
deleted: 0
2010-05-10 
12:03:30|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\tmp\\disable_ipv6_201.reg"' 2>&1
2010-05-10 
12:03:31|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: C:\\Cygwin\\tmp\\disable_ipv6_201.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:03:31|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/disable_ipv6_201.reg
2010-05-10 12:03:31|9225|144:178|image|Windows.pm:disable_ipv6(1898)|set 
registry keys to disable IPv6
2010-05-10 
12:03:31|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/disable_dynamic_dns_211.reg; /usr/bin/echo.exe 
-E "Windows Registry Editor Version 5.00
|9225|144:178|image| ; This file disables dynamic DNS updates
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters]
|9225|144:178|image| \"DisableDynamicUpdate\"=dword:00000001
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters]
|9225|144:178|image| 
\"DisableReverseAddressRegistrations\"=dword:00000001" > 
C:/Cygwin/tmp/disable_dynamic_dns_211.reg' 2>&1
2010-05-10 
12:03:32|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/disable_dynamic_dns_211.reg
2010-05-10 
12:03:32|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:03:32|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/disable_dynamic_dns_211.reg' 2>&1
2010-05-10 
12:03:33|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/disable_dynamic_dns_211.reg
2010-05-10 
12:03:33|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/disable_dynamic_dns_211.reg
2010-05-10 
12:03:33|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\disable_dynamic_dns_211.reg
2010-05-10 
12:03:33|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_dynamic_dns_211.reg"' 2>&1
2010-05-10 12:03:33|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:33
2010-05-10 
12:03:34|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\disable_dynamic_dns_211.reg, dir 
output:
|9225|144:178|image| disable_dynamic_dns_211.reg
2010-05-10 
12:03:34|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/disable_dynamic_dns_211.reg
2010-05-10 
12:03:34|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/disable_dynamic_dns_211.reg' 2>&1
2010-05-10 12:03:35|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/disable_dynamic_dns_211.reg
2010-05-10 
12:03:35|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/disable_dynamic_dns_211.reg' 2>&1
2010-05-10 12:03:35|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/disable_dynamic_dns_211.reg using rm, files deleted: 1, 
directories deleted: 0
2010-05-10 
12:03:36|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_dynamic_dns_211.reg"' 2>&1
2010-05-10 
12:03:37|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: 
C:\\Cygwin\\tmp\\disable_dynamic_dns_211.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:03:37|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/disable_dynamic_dns_211.reg
2010-05-10 
12:03:37|9225|144:178|image|Windows.pm:disable_dynamic_dns(3644)|disabled 
dynamic dns
2010-05-10 
12:03:37|9225|144:178|image|Windows.pm:get_network_configuration(4630)|attempting 
to retrieve network configuration
2010-05-10 
12:03:37|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/ipconfig.exe /all' 2>&1
2010-05-10 12:03:38|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:38
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4634)|ran 
ipconfig
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4655)|found 
interface: Local Area Connection 2
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4655)|found 
interface: Local Area Connection
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4706)|saving 
network configuration in $self->{network_configuration}
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4710)|network 
configuration has already been retrieved
2010-05-10 
12:03:38|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1442)|attempting 
to retrieve private IP address for computer: node4
2010-05-10 
12:03:38|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1446)|retrieved 
contents of /etc/hosts on this management node, contains 36 lines
2010-05-10 
12:03:38|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1479)|found 
line for 'node4' in /etc/hosts:
|9225|144:178|image| 172.20.101.4       node4
2010-05-10 
12:03:38|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1490)|found 
IP address: 172.20.101.4
2010-05-10 
12:03:38|9225|144:178|image|DataStructure.pm:_automethod(697)|data 
structure updated: 
$self->request_data->{reservation}{178}{computer}{privateIPaddress}
|9225|144:178|image| computer_private_ip_address = 172.20.101.4
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4783)|interface 
found with private address not matching private address for reservation: 
Local Area Connection, description: Broadcom BCM5708S NetXtreme II GigE 
(NDIS VBD Client), address(es): 10.10.4.92
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4790)|interface 
will be returned if another with a public address isn't found
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4747)|private 
interface found: Local Area Connection 2, description: Broadcom BCM5708S 
NetXtreme II GigE (NDIS VBD Client) #2, address(es): 172.20.101.4
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4813)|did 
not find a public interface using a public IP address, but found interface 
using private IP address not matching reservation private IP address, 
returning data for public interface:
|9225|144:178|image| %
|9225|144:178|image| |--%{Local Area Connection}
|9225|144:178|image| |--{autoconfiguration_enabled} = 'Yes'
|9225|144:178|image| |--{connection_specific_dns_suffix} = 'marist.edu'
|9225|144:178|image| |--{default_gateway} = '10.10.4.1'
|9225|144:178|image| |--{description} = 'Broadcom BCM5708S NetXtreme II 
GigE (NDIS VBD Client)'
|9225|144:178|image| |--{dhcp_enabled} = 'Yes'
|9225|144:178|image| |--{dhcp_server} = '10.12.1.136'
|9225|144:178|image| |--{dns_server} = '10.12.1.11'
|9225|144:178|image| |--%{Local Area Connection}{ip_address}
|9225|144:178|image| |--{10.10.4.92} = '255.255.255.0'
|9225|144:178|image| |--{lease_expires} = 'Monday, May 10, 2010 4:40:18 
PM'
|9225|144:178|image| |--{lease_obtained} = 'Monday, May 10, 2010 11:40:18 
AM'
|9225|144:178|image| |--{netbios_over_tcpip} = 'Enabled'
|9225|144:178|image| |--{physical_address} = '00-1A-64-33-B1-76'
|9225|144:178|image| |--{primary_wins_server} = '10.12.1.13'
|9225|144:178|image| |--{secondary_wins_server} = '10.12.1.14'
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_public_interface_name(4878)|returning 
public interface name: Local Area Connection
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4710)|network 
configuration has already been retrieved
2010-05-10 
12:03:38|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1418)|returning 
private IP address previously retrieved from /etc/hosts: 172.20.101.4
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4783)|interface 
found with private address not matching private address for reservation: 
Local Area Connection, description: Broadcom BCM5708S NetXtreme II GigE 
(NDIS VBD Client), address(es): 10.10.4.92
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4790)|interface 
will be returned if another with a public address isn't found
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4747)|private 
interface found: Local Area Connection 2, description: Broadcom BCM5708S 
NetXtreme II GigE (NDIS VBD Client) #2, address(es): 172.20.101.4
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_network_configuration(4750)|returning 
data for private interface: Local Area Connection 2 (172.20.101.4)
2010-05-10 
12:03:38|9225|144:178|image|Windows.pm:get_private_interface_name(4848)|returning 
private interface name: Local Area Connection 2
2010-05-10 
12:03:38|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'netsh.exe interface ip set dns name = "Local Area Connection" 
source = dhcp register = none ;netsh.exe interface ip set dns name = 
"Local Area Connection 2" source = dhcp register = none ;' 2>&1
2010-05-10 
12:03:39|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:03:39|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 
12:03:39|9225|144:178|image|Windows.pm:disable_dynamic_dns(3679)|disabled 
dynamic DNS registration on public and private adapters
2010-05-10 
12:03:39|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/disable_system_restore_221.reg; 
/usr/bin/echo.exe -E "Windows Registry Editor Version 5.00
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows 
NT\\SystemRestore]
|9225|144:178|image| \"DisableConfig\"=dword:00000001" > 
C:/Cygwin/tmp/disable_system_restore_221.reg' 2>&1
2010-05-10 
12:03:40|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/disable_system_restore_221.reg
2010-05-10 
12:03:40|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:03:40|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/disable_system_restore_221.reg' 2>&1
2010-05-10 
12:03:41|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/disable_system_restore_221.reg
2010-05-10 
12:03:41|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/disable_system_restore_221.reg
2010-05-10 
12:03:41|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\disable_system_restore_221.reg
2010-05-10 
12:03:41|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_system_restore_221.reg"' 2>&1
2010-05-10 
12:03:42|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\disable_system_restore_221.reg, 
dir output:
|9225|144:178|image| disable_system_restore_221.reg
2010-05-10 
12:03:42|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/disable_system_restore_221.reg
2010-05-10 
12:03:42|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/disable_system_restore_221.reg' 2>&1
2010-05-10 12:03:43|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/disable_system_restore_221.reg
2010-05-10 
12:03:43|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/disable_system_restore_221.reg' 2>&1
2010-05-10 12:03:43|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:43
2010-05-10 12:03:44|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/disable_system_restore_221.reg using rm, files deleted: 1, 
directories deleted: 0
2010-05-10 
12:03:45|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_system_restore_221.reg"' 2>&1
2010-05-10 
12:03:46|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: 
C:\\Cygwin\\tmp\\disable_system_restore_221.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:03:46|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/disable_system_restore_221.reg
2010-05-10 
12:03:46|9225|144:178|image|Windows.pm:disable_system_restore(7910)|disabled 
system restore
2010-05-10 
12:03:46|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/disable_ie_configuration_page_231.reg; 
/usr/bin/echo.exe -E "Windows Registry Editor Version 5.00
|9225|144:178|image| [HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet 
Explorer\\Main]
|9225|144:178|image| \"DisableFirstRunCustomize\"=dword:00000001
|9225|144:178|image| \"RunOnceHasShown\"=dword:00000001
|9225|144:178|image| \"RunOnceComplete\"=dword:00000001
|9225|144:178|image| [HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet 
Explorer\\PhishingFilter]
|9225|144:178|image| \"Enabled\"=dword:00000002
|9225|144:178|image| \"ShownVerifyBalloon\"=dword:00000001" > 
C:/Cygwin/tmp/disable_ie_configuration_page_231.reg' 2>&1
2010-05-10 
12:03:47|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to 
C:/Cygwin/tmp/disable_ie_configuration_page_231.reg
2010-05-10 
12:03:47|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:03:47|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/disable_ie_configuration_page_231.reg' 2>&1
2010-05-10 
12:03:47|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/disable_ie_configuration_page_231.reg
2010-05-10 
12:03:47|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/disable_ie_configuration_page_231.reg
2010-05-10 
12:03:47|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\disable_ie_configuration_page_231.reg
2010-05-10 
12:03:47|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_ie_configuration_page_231.reg"' 2>&1
2010-05-10 
12:03:48|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: 
C:\\Cygwin\\tmp\\disable_ie_configuration_page_231.reg, dir output:
|9225|144:178|image| disable_ie_configuration_page_231.reg
2010-05-10 
12:03:48|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/disable_ie_configuration_page_231.reg
2010-05-10 
12:03:48|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/disable_ie_configuration_page_231.reg' 
2>&1
2010-05-10 12:03:48|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:48
2010-05-10 12:03:49|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/disable_ie_configuration_page_231.reg
2010-05-10 
12:03:49|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/disable_ie_configuration_page_231.reg' 2>&1
2010-05-10 12:03:50|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/disable_ie_configuration_page_231.reg using rm, files 
deleted: 1, directories deleted: 0
2010-05-10 
12:03:51|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_ie_configuration_page_231.reg"' 2>&1
2010-05-10 
12:03:52|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: 
C:\\Cygwin\\tmp\\disable_ie_configuration_page_231.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:03:52|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/disable_ie_configuration_page_231.reg
2010-05-10 
12:03:52|9225|144:178|image|Windows.pm:disable_ie_configuration_page(6981)|set 
the registry keys to disable IE runonce
2010-05-10 
12:03:52|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/disable_windows_defender_241.reg; 
/usr/bin/echo.exe -E "Windows Registry Editor Version 5.00
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows Defender]
|9225|144:178|image| \"DisableAntiSpyware\"=dword:00000001
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run]
|9225|144:178|image| \"Windows Defender\"=-" > 
C:/Cygwin/tmp/disable_windows_defender_241.reg' 2>&1
2010-05-10 
12:03:53|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/disable_windows_defender_241.reg
2010-05-10 
12:03:53|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:03:53|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/disable_windows_defender_241.reg' 2>&1
2010-05-10 12:03:53|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:53
2010-05-10 
12:03:53|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/disable_windows_defender_241.reg
2010-05-10 
12:03:53|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/disable_windows_defender_241.reg
2010-05-10 
12:03:53|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\disable_windows_defender_241.reg
2010-05-10 
12:03:53|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_windows_defender_241.reg"' 2>&1
2010-05-10 
12:03:54|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\disable_windows_defender_241.reg, 
dir output:
|9225|144:178|image| disable_windows_defender_241.reg
2010-05-10 
12:03:54|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/disable_windows_defender_241.reg
2010-05-10 
12:03:54|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/disable_windows_defender_241.reg' 2>&1
2010-05-10 12:03:55|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/disable_windows_defender_241.reg
2010-05-10 
12:03:55|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/disable_windows_defender_241.reg' 2>&1
2010-05-10 12:03:56|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/disable_windows_defender_241.reg using rm, files deleted: 1, 
directories deleted: 0
2010-05-10 
12:03:57|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_windows_defender_241.reg"' 2>&1
2010-05-10 
12:03:58|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: 
C:\\Cygwin\\tmp\\disable_windows_defender_241.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:03:58|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/disable_windows_defender_241.reg
2010-05-10 
12:03:58|9225|144:178|image|Windows.pm:disable_windows_defender(7205)|set 
the registry keys to disable Windows defender
2010-05-10 
12:03:58|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/sc.exe query "WinDefend"' 2>&1
2010-05-10 12:03:58|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:03:58
2010-05-10 
12:03:59|9225|144:178|image|Windows.pm:service_exists(6474)|service 
exists: WinDefend
2010-05-10 
12:03:59|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/net.exe stop "WinDefend"' 2>&1
2010-05-10 
12:04:00|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| The Windows Defender service is not started.
|9225|144:178|image| More help is available by typing NET HELPMSG 3521.
2010-05-10 12:04:00|9225|144:178|image|utils.pm:run_ssh_command(6272)|SSH 
command executed on node4, command:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/net.exe stop "WinDefend"' 2>&1
|9225|144:178|image| returning (2, "The Windows Defender service i...")
2010-05-10 
12:04:00|9225|144:178|image|Windows.pm:stop_service(6422)|service is not 
started: WinDefend
2010-05-10 
12:04:00|9225|144:178|image|Windows.pm:disable_windows_defender(7216)|stopped 
the Windows Defender service
2010-05-10 
12:04:00|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '"$SYSTEMROOT/System32/sc.exe" config WinDefend start= disabled' 
2>&1
2010-05-10 
12:04:01|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| [SC] ChangeServiceConfig SUCCESS
2010-05-10 12:04:01|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "[SC] ChangeServiceConfig 
SUCCE...")
2010-05-10 
12:04:01|9225|144:178|image|Windows.pm:set_service_startup_mode(3123)|WinDefend 
service startup mode set to disabled
2010-05-10 
12:04:01|9225|144:178|image|Windows.pm:disable_windows_defender(7225)|disabled 
the Windows Defender service
2010-05-10 
12:04:01|9225|144:178|image|Windows.pm:disable_windows_defender(7234)|disabled 
Windows Defender
2010-05-10 
12:04:01|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/disable_automatic_updates_251.reg; 
/usr/bin/echo.exe -E "Windows Registry Editor Version 5.00
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU]
|9225|144:178|image| \"NoAutoUpdate\"=dword:00000001" > 
C:/Cygwin/tmp/disable_automatic_updates_251.reg' 2>&1
2010-05-10 
12:04:02|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/disable_automatic_updates_251.reg
2010-05-10 
12:04:02|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:04:02|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/disable_automatic_updates_251.reg' 2>&1
2010-05-10 
12:04:02|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/disable_automatic_updates_251.reg
2010-05-10 
12:04:02|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/disable_automatic_updates_251.reg
2010-05-10 
12:04:02|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\disable_automatic_updates_251.reg
2010-05-10 
12:04:02|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_automatic_updates_251.reg"' 2>&1
2010-05-10 
12:04:03|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\disable_automatic_updates_251.reg, 
dir output:
|9225|144:178|image| disable_automatic_updates_251.reg
2010-05-10 
12:04:03|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/disable_automatic_updates_251.reg
2010-05-10 
12:04:03|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/disable_automatic_updates_251.reg' 2>&1
2010-05-10 12:04:03|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:03
2010-05-10 12:04:04|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/disable_automatic_updates_251.reg
2010-05-10 
12:04:04|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/disable_automatic_updates_251.reg' 2>&1
2010-05-10 12:04:05|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/disable_automatic_updates_251.reg using rm, files deleted: 
1, directories deleted: 0
2010-05-10 
12:04:06|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\disable_automatic_updates_251.reg"' 2>&1
2010-05-10 
12:04:07|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: 
C:\\Cygwin\\tmp\\disable_automatic_updates_251.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:04:07|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/disable_automatic_updates_251.reg
2010-05-10 
12:04:07|9225|144:178|image|Windows.pm:disable_automatic_updates(7158)|disabled 
automatic updates
2010-05-10 
12:04:07|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/disable_security_center_notifications_261.reg; 
/usr/bin/echo.exe -E "Windows Registry Editor Version 5.00
|9225|144:178|image| [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Security 
Center]
|9225|144:178|image| \"AntiSpywareDisableNotify\"=dword:00000001
|9225|144:178|image| \"AntiVirusDisableNotify\"=dword:00000001
|9225|144:178|image| \"FirewallDisableNotify\"=dword:00000001
|9225|144:178|image| \"UacDisableNotify\"=dword:00000001
|9225|144:178|image| \"UpdatesDisableNotify\"=dword:00000001
|9225|144:178|image| \"FirstRunDisabled\"=dword:00000001
|9225|144:178|image| [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Security 
Center\\Svc]
|9225|144:178|image| \"AntiVirusOverride\"=dword:00000001
|9225|144:178|image| \"AntiSpywareOverride\"=dword:00000001
|9225|144:178|image| \"FirewallOverride\"=dword:00000001" > 
C:/Cygwin/tmp/disable_security_center_notifications_261.reg' 2>&1
2010-05-10 
12:04:08|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to 
C:/Cygwin/tmp/disable_security_center_notifications_261.reg
2010-05-10 
12:04:08|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:04:08|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/disable_security_center_notifications_261.reg' 2>&1
2010-05-10 12:04:08|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:08

|9225|144:178|image| ---- WARNING ---- 
|9225|144:178|image| 2010-05-10 
12:04:09|9225|144:178|image|Windows.pm:reg_import(2279)|failed to import 
registry file: 
C:/Cygwin/tmp/disable_security_center_notifications_261.reg, exit status: 
1, output:
|9225|144:178|image| ERROR: Error accessing the registry.
|9225|144:178|image| ( 0) utils.pm, notify (line: 737)
|9225|144:178|image| (-1) Windows.pm, reg_import (line: 2279)
|9225|144:178|image| (-2) Windows.pm, import_registry_string (line: 2036)
|9225|144:178|image| (-3) Windows.pm, 
disable_security_center_notifications (line: 7109)
|9225|144:178|image| (-4) Windows.pm, pre_capture (line: 261)
|9225|144:178|image| (-5) Version_6.pm, pre_capture (line: 113)
|9225|144:178|image| (-6) Vista.pm, pre_capture (line: 101)


|9225|144:178|image| ---- WARNING ---- 
|9225|144:178|image| 2010-05-10 
12:04:09|9225|144:178|image|Windows.pm:import_registry_string(2037)|failed 
to import registry string contents from 
C:/Cygwin/tmp/disable_security_center_notifications_261.reg
|9225|144:178|image| ( 0) utils.pm, notify (line: 737)
|9225|144:178|image| (-1) Windows.pm, import_registry_string (line: 2037)
|9225|144:178|image| (-2) Windows.pm, 
disable_security_center_notifications (line: 7109)
|9225|144:178|image| (-3) Windows.pm, pre_capture (line: 261)
|9225|144:178|image| (-4) Version_6.pm, pre_capture (line: 113)
|9225|144:178|image| (-5) Vista.pm, pre_capture (line: 101)
|9225|144:178|image| (-6) xCAT.pm, capture (line: 1092)


|9225|144:178|image| ---- WARNING ---- 
|9225|144:178|image| 2010-05-10 
12:04:09|9225|144:178|image|Windows.pm:disable_security_center_notifications(7113)|failed 
to set the registry key to disable security center notifications
|9225|144:178|image| ( 0) utils.pm, notify (line: 737)
|9225|144:178|image| (-1) Windows.pm, 
disable_security_center_notifications (line: 7113)
|9225|144:178|image| (-2) Windows.pm, pre_capture (line: 261)
|9225|144:178|image| (-3) Version_6.pm, pre_capture (line: 113)
|9225|144:178|image| (-4) Vista.pm, pre_capture (line: 101)
|9225|144:178|image| (-5) xCAT.pm, capture (line: 1092)
|9225|144:178|image| (-6) image.pm, process (line: 162)


|9225|144:178|image| ---- WARNING ---- 
|9225|144:178|image| 2010-05-10 
12:04:09|9225|144:178|image|Windows.pm:pre_capture(261)|unable to disable 
Security Center notifications
|9225|144:178|image| ( 0) utils.pm, notify (line: 737)
|9225|144:178|image| (-1) Windows.pm, pre_capture (line: 261)
|9225|144:178|image| (-2) Version_6.pm, pre_capture (line: 113)
|9225|144:178|image| (-3) Vista.pm, pre_capture (line: 101)
|9225|144:178|image| (-4) xCAT.pm, capture (line: 1092)
|9225|144:178|image| (-5) image.pm, process (line: 162)
|9225|144:178|image| (-6) vcld, make_new_child (line: 594)

2010-05-10 
12:04:09|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/sc.exe query "TransarcAFSDaemon"' 2>&1
2010-05-10 
12:04:09|9225|144:178|image|Windows.pm:service_exists(6475)|service does 
not exist: TransarcAFSDaemon
2010-05-10 
12:04:09|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE/RECYCLER matching pattern .*
2010-05-10 
12:04:09|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/RECYCLER/ matching pattern .*, max 
depth: 5
2010-05-10 
12:04:09|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/RECYCLER/" -mindepth 1 -maxdepth 5 
-iregex ".*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:10|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMDRIVE/RECYCLER/' matching '.*'
2010-05-10 
12:04:10|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $TEMP matching pattern .*
2010-05-10 
12:04:10|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $TEMP/ matching pattern .*, max depth: 5
2010-05-10 
12:04:10|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$TEMP/" -mindepth 1 -maxdepth 5 -iregex ".*" -exec 
chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 12:04:13|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:13
2010-05-10 
12:04:18|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|66/0 
files deleted deleted under '$TEMP/' matching '.*'
2010-05-10 
12:04:18|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/AdobeARM.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/AdobeARM_NotLocked.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/AUCHECK_PARSER.txt'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/dd_ATL80SP1_KB973923MSI4BE3.txt'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/dd_ATL80SP1_KB973923UI4BE3.txt'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/FXSAPIDebugLogFile.txt'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/hsperfdata_root'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/HumSettings.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/JAUReg.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/java_install.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/java_install_reg.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/jusched.log'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/Low/WindowsUpdate'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/Low'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/McAfeeLogs/FrmInst_ROOT-PC.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/McAfeeLogs/FrmInst_ROOT-PC_error.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/McAfeeLogs/MFEagent.msi.2010.05.10.11.15.49.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/McAfeeLogs/UpdaterUI_ROOT-PC.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/McAfeeLogs/UpdaterUI_ROOT-PC_error.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/McAfeeLogs/VSEInst_051010_111614.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/McAfeeLogs/VSEUninst.log'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/McAfeeLogs'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/mcafee_vse_35'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/MSI6B87.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/offer'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/omniaction_May_10_2010.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/PASWStatistics18Log.txt'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/QTInstallCode.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/SetupExe(20100510112524C00).log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/Silverlight0.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/SilverlightMSI.log'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/StructuredQuery.log'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCD2E.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCD2F.tmp'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCD30.tmp/CleanGradient.thmx'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCD30.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCEB9.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCEEA.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCF97.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCFB9.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDCFEA.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD03A.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD06B.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD09B.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD0BD.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD0EE.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD10F.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD140.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD180.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD1C1.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD201.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD203.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD234.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/TCDD265.tmp'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/wmplog00.sqm'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/wmsetup.log'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/WPDNSE'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/_isA4B4/0x0409.ini'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/_isA4B4/Setup.INI'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/_isA4B4/wcg_splash.bmp'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/_isA4B4/World Community Grid - 
BOINC for Windows.msi'
|9225|144:178|image| removed 
`/cygdrive/c/Users/root/AppData/Local/Temp/_isA4B4/_ISMSIDEL.INI'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/_isA4B4'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/{7e8fb5bd-8627-436b-b1ee-ecff7db1fbea}'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/~nsu.tmp'
|9225|144:178|image| removed directory: 
`/cygdrive/c/Users/root/AppData/Local/Temp/~rnsetup'
2010-05-10 
12:04:18|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $TMP matching pattern .*
2010-05-10 
12:04:18|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $TMP/ matching pattern .*, max depth: 5
2010-05-10 
12:04:18|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$TMP/" -mindepth 1 -maxdepth 5 -iregex ".*" -exec 
chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:18|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$TMP/' matching '.*'
2010-05-10 
12:04:18|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE/cygwin/tmp matching pattern .*
2010-05-10 
12:04:18|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/cygwin/tmp/ matching pattern .*, max 
depth: 5
2010-05-10 
12:04:18|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/cygwin/tmp/" -mindepth 1 -maxdepth 5 
-iregex ".*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 12:04:18|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:18
2010-05-10 
12:04:19|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|1/0 
files deleted deleted under '$SYSTEMDRIVE/cygwin/tmp/' matching '.*'
2010-05-10 
12:04:19|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed 
`C:/cygwin/tmp/disable_security_center_notifications_261.reg'
2010-05-10 
12:04:19|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE/Temp matching pattern .*
2010-05-10 
12:04:19|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/Temp/ matching pattern .*, max depth: 5
2010-05-10 
12:04:19|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/Temp/" -mindepth 1 -maxdepth 5 -iregex 
".*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:20|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMDRIVE/Temp/' matching '.*'
2010-05-10 
12:04:20|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT/Temp matching pattern .*
2010-05-10 
12:04:20|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/Temp/ matching pattern .*, max depth: 5
2010-05-10 
12:04:20|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/Temp/" -mindepth 1 -maxdepth 5 -iregex 
".*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:22|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|7/0 
files deleted deleted under '$SYSTEMROOT/Temp/' matching '.*'
2010-05-10 
12:04:22|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed `C:\\Windows/Temp/FXSAPIDebugLogFile.txt'
|9225|144:178|image| removed `C:\\Windows/Temp/FXSTIFFDebugLogFile.txt'
|9225|144:178|image| removed `C:\\Windows/Temp/McAfeeLogs/LogParser.log'
|9225|144:178|image| removed 
`C:\\Windows/Temp/McAfeeLogs/VSEInst_Patch3_051010_112254.log'
|9225|144:178|image| removed directory: `C:\\Windows/Temp/McAfeeLogs'
|9225|144:178|image| removed directory: `C:\\Windows/Temp/TestEngDat64'
|9225|144:178|image| removed `C:\\Windows/Temp/TS_A7BF.tmp'
2010-05-10 
12:04:22|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT/ie7updates matching pattern .*
2010-05-10 
12:04:22|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ie7updates/ matching pattern .*, max 
depth: 5
2010-05-10 
12:04:22|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/ie7updates/" -mindepth 1 -maxdepth 5 
-iregex ".*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:22|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/ie7updates/' matching '.*'
2010-05-10 
12:04:22|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT/ServicePackFiles matching pattern .*
2010-05-10 
12:04:22|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ServicePackFiles/ matching pattern .*, 
max depth: 5
2010-05-10 
12:04:22|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/ServicePackFiles/" -mindepth 1 -maxdepth 
5 -iregex ".*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:23|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/ServicePackFiles/' matching '.*'
2010-05-10 
12:04:23|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT/SoftwareDistribution/Download matching 
pattern .*
2010-05-10 
12:04:23|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/SoftwareDistribution/Download/ matching 
pattern .*, max depth: 5
2010-05-10 
12:04:23|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/SoftwareDistribution/Download/" 
-mindepth 1 -maxdepth 5 -iregex ".*" -exec chmod 777 {} \; -exec rm -rvf 
{} \;' 2>&1
2010-05-10 12:04:24|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:23
2010-05-10 
12:04:25|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|8/0 
files deleted deleted under '$SYSTEMROOT/SoftwareDistribution/Download/' 
matching '.*'
2010-05-10 
12:04:25|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed 
`C:\\Windows/SoftwareDistribution/Download/14d19c27b28cc3990260d7191f6e0ff6c7483623'
|9225|144:178|image| removed 
`C:\\Windows/SoftwareDistribution/Download/45d52fcc0a3c37c790f6c709319a758e75a5033b'
|9225|144:178|image| removed 
`C:\\Windows/SoftwareDistribution/Download/4d50cba4f1476d9e9320d5c0dc2be56259a98303'
|9225|144:178|image| removed 
`C:\\Windows/SoftwareDistribution/Download/793994c35fc52707ea2324bcecde63df/cbshandler/state'
|9225|144:178|image| removed directory: 
`C:\\Windows/SoftwareDistribution/Download/793994c35fc52707ea2324bcecde63df/cbshandler'
|9225|144:178|image| removed 
`C:\\Windows/SoftwareDistribution/Download/793994c35fc52707ea2324bcecde63df/Windows6.1-KB971033-x86.cab'
|9225|144:178|image| removed directory: 
`C:\\Windows/SoftwareDistribution/Download/793994c35fc52707ea2324bcecde63df'
|9225|144:178|image| removed 
`C:\\Windows/SoftwareDistribution/Download/805debda274cf4192b47507c4e5439863e5d3d5a'
2010-05-10 
12:04:25|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT/Minidump matching pattern .*
2010-05-10 
12:04:25|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/Minidump/ matching pattern .*, max 
depth: 5
2010-05-10 
12:04:25|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/Minidump/" -mindepth 1 -maxdepth 5 
-iregex ".*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:25|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/Minidump/' matching '.*'
2010-05-10 
12:04:25|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $ALLUSERSPROFILE/Application Data/Microsoft/Dr 
Watson matching pattern .*
2010-05-10 
12:04:25|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $ALLUSERSPROFILE/Application Data/Microsoft/Dr 
Watson/ matching pattern .*, max depth: 5
2010-05-10 
12:04:25|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$ALLUSERSPROFILE/Application Data/Microsoft/Dr 
Watson/" -mindepth 1 -maxdepth 5 -iregex ".*" -exec chmod 777 {} \; -exec 
rm -rvf {} \;' 2>&1
2010-05-10 
12:04:26|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$ALLUSERSPROFILE/Application 
Data/Microsoft/Dr Watson/' matching '.*'
2010-05-10 
12:04:26|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT matching pattern .*\.tmp
2010-05-10 
12:04:26|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ matching pattern .*\.tmp, max depth: 1
2010-05-10 
12:04:26|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/" -mindepth 1 -maxdepth 1 -iregex 
".*\.tmp" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:27|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/' matching '.*\.tmp'
2010-05-10 
12:04:27|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT matching pattern .*\$hf_mig\$.*
2010-05-10 
12:04:27|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ matching pattern .*\$hf_mig\$.*, max 
depth: 1
2010-05-10 
12:04:27|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/" -mindepth 1 -maxdepth 1 -iregex 
".*\$hf_mig\$.*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:28|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/' matching '.*\$hf_mig\$.*'
2010-05-10 
12:04:28|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT matching pattern .*\$NtUninstall.*
2010-05-10 
12:04:28|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ matching pattern .*\$NtUninstall.*, max 
depth: 1
2010-05-10 
12:04:28|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/" -mindepth 1 -maxdepth 1 -iregex 
".*\$NtUninstall.*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:28|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/' matching '.*\$NtUninstall.*'
2010-05-10 
12:04:28|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT matching pattern 
.*\$NtServicePackUninstall.*
2010-05-10 
12:04:28|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ matching pattern 
.*\$NtServicePackUninstall.*, max depth: 1
2010-05-10 
12:04:28|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/" -mindepth 1 -maxdepth 1 -iregex 
".*\$NtServicePackUninstall.*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 
2>&1
2010-05-10 12:04:29|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:29
2010-05-10 
12:04:29|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/' matching 
'.*\$NtServicePackUninstall.*'
2010-05-10 
12:04:29|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT matching pattern .*\$MSI.*Uninstall.*
2010-05-10 
12:04:29|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ matching pattern .*\$MSI.*Uninstall.*, 
max depth: 1
2010-05-10 
12:04:29|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/" -mindepth 1 -maxdepth 1 -iregex 
".*\$MSI.*Uninstall.*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:30|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/' matching '.*\$MSI.*Uninstall.*'
2010-05-10 
12:04:30|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT/inf matching pattern .*INFCACHE\.1
2010-05-10 
12:04:30|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/inf/ matching pattern .*INFCACHE\.1, max 
depth: 5
2010-05-10 
12:04:30|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/inf/" -mindepth 1 -maxdepth 5 -iregex 
".*INFCACHE\.1" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:31|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/inf/' matching '.*INFCACHE\.1'
2010-05-10 
12:04:31|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT/inf matching pattern .*[\\\/]oem.*\..*
2010-05-10 
12:04:31|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/inf/ matching pattern .*[\\\/]oem.*\..*, 
max depth: 5
2010-05-10 
12:04:31|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/inf/" -mindepth 1 -maxdepth 5 -iregex 
".*[\\\/]oem.*\..*" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:32|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/inf/' matching 
'.*[\\\/]oem.*\..*'
2010-05-10 
12:04:32|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT matching pattern .*AFSCache
2010-05-10 
12:04:32|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ matching pattern .*AFSCache, max depth: 
1
2010-05-10 
12:04:32|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/" -mindepth 1 -maxdepth 1 -iregex 
".*AFSCache" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:04:33|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/' matching '.*AFSCache'
2010-05-10 
12:04:33|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMROOT matching pattern .*afsd_init\.log
2010-05-10 
12:04:33|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMROOT/ matching pattern .*afsd_init\.log, max 
depth: 1
2010-05-10 
12:04:33|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMROOT/" -mindepth 1 -maxdepth 1 -iregex 
".*afsd_init\.log" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 12:04:34|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:34
2010-05-10 
12:04:34|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMROOT/' matching '.*afsd_init\.log'
2010-05-10 
12:04:34|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings matching pattern 
.*\.log
2010-05-10 
12:04:34|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings/ matching 
pattern .*\.log, max depth: 10
2010-05-10 
12:04:34|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/Documents and Settings/" -mindepth 1 
-maxdepth 10 -iregex ".*\.log" -exec chmod 777 {} \; -exec rm -rvf {} \;' 
2>&1
2010-05-10 12:04:39|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:39
2010-05-10 
12:04:44|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|29/0 
files deleted deleted under '$SYSTEMDRIVE/Documents and Settings/' 
matching '.*\.log'
2010-05-10 
12:04:44|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/McAfee/Common Framework/CmdAgent.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/McAfee/Common Framework/CmdAgent_error.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/McAfee/Common Framework/DB/Agent_ROOT-PC.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/McAfee/Common Framework/DB/Agent_ROOT-PC_error.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/McAfee/Common Framework/DB/McScript.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/McAfee/Common Framework/DB/McScript_error.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/McAfee/Common Framework/DB/PrdMgr_ROOT-PC.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/McAfee/Common Framework/DB/PrdMgr_ROOT-PC_error.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/Microsoft/Search/Data/Applications/Windows/MSS.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/Microsoft/Search/Data/Applications/Windows/MSS00009.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/Microsoft/Search/Data/Applications/Windows/MSS0000A.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/Microsoft/Search/Data/Applications/Windows/MSS0000B.log'
|9225|144:178|image| removed `C:/Documents and Settings/All 
Users/Microsoft/Search/Data/Applications/Windows/MSStmp.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Adobe/Acrobat/9.0/Updater/updater.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Adobe/Updater6/aumLib.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/ErrorLogs/CDBurning.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/ErrorLogs/DownloadMgr.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/ErrorLogs/GenDevices.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/ErrorLogs/pdgenctnomad.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/ErrorLogs/pdgenwmdm.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Desktop_scan.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Desktop_scan2.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Documents_scan.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Documents_scan2.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Downloads_scan.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Downloads_scan2.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Music_scan.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Music_scan2.log'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Real/RealPlayer/WatchFolders/C__Users_root_Videos_scan.log'
2010-05-10 
12:04:44|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings matching pattern 
.*Recent\/.*
2010-05-10 
12:04:44|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings/ matching 
pattern .*Recent\/.*, max depth: 10
2010-05-10 
12:04:44|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/Documents and Settings/" -mindepth 1 
-maxdepth 10 -iregex ".*Recent\/.*" -exec chmod 777 {} \; -exec rm -rvf {} 
\;' 2>&1
2010-05-10 12:04:44|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:44
2010-05-10 12:04:49|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:49
2010-05-10 
12:04:51|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|20/0 
files deleted deleted under '$SYSTEMDRIVE/Documents and Settings/' 
matching '.*Recent\/.*'
2010-05-10 
12:04:51|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Office/Recent/index.dat'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/!marist_install.lnk'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations/1b4dd67f29cb1962.automaticDestinations-ms'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations/3768723d63f05e6b.automaticDestinations-ms'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations/7e4dca80246863e3.automaticDestinations-ms'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations/91288259379476dd.automaticDestinations-ms'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations/918e0ecb43d17e23.automaticDestinations-ms'
|9225|144:178|image| removed directory: `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/client_state.xml.lnk'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/CustomDestinations/28c8b86deab549a1.customDestinations-ms'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/CustomDestinations/74d7f43c1561fc1e.customDestinations-ms'
|9225|144:178|image| removed directory: `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/CustomDestinations'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/fox.lnk'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/HostExplorer 2008 
[13].lnk'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/Marist 
Mainframe.lnk'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/Microsoft 
Office.lnk'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/Notification Area 
Icons.lnk'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/Profile.lnk'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Recent/System and 
Security.lnk'
2010-05-10 
12:04:51|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings matching pattern 
.*Cookies\/.*
2010-05-10 
12:04:51|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings/ matching 
pattern .*Cookies\/.*, max depth: 10
2010-05-10 
12:04:51|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/Documents and Settings/" -mindepth 1 
-maxdepth 10 -iregex ".*Cookies\/.*" -exec chmod 777 {} \; -exec rm -rvf 
{} \;' 2>&1
2010-05-10 12:04:54|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:54
2010-05-10 
12:04:57|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|8/0 
files deleted deleted under '$SYSTEMDRIVE/Documents and Settings/' 
matching '.*Cookies\/.*'
2010-05-10 
12:04:57|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Cookies/index.dat'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Cookies/Low/index.dat'
|9225|144:178|image| removed directory: `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Cookies/Low'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Cookies/root@marist[1].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Cookies/root@microsoft[2].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Cookies/root@office14client.microsoft[2].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Cookies/root@office2010.microsoft[2].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Roaming/Microsoft/Windows/Cookies/root@onlinestores.metaservices.microsoft[1].txt'
2010-05-10 
12:04:57|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings matching pattern 
.*Temp\/.*
2010-05-10 
12:04:57|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings/ matching 
pattern .*Temp\/.*, max depth: 10
2010-05-10 
12:04:57|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/Documents and Settings/" -mindepth 1 
-maxdepth 10 -iregex ".*Temp\/.*" -exec chmod 777 {} \; -exec rm -rvf {} 
\;' 2>&1
2010-05-10 12:04:59|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:04:59
2010-05-10 
12:05:03|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|1/0 
files deleted deleted under '$SYSTEMDRIVE/Documents and Settings/' 
matching '.*Temp\/.*'
2010-05-10 
12:05:03|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed directory: `C:/Documents and Settings/All 
Users/Microsoft/Search/Data/Temp/usgthrsvc'
2010-05-10 
12:05:03|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings matching pattern 
.*Temporary Internet Files\/Content.*\/.*
2010-05-10 
12:05:03|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/Documents and Settings/ matching 
pattern .*Temporary Internet Files\/Content.*\/.*, max depth: 10
2010-05-10 
12:05:03|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/Documents and Settings/" -mindepth 1 
-maxdepth 10 -iregex ".*Temporary Internet Files\/Content.*\/.*" -exec 
chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 12:05:04|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:04
2010-05-10 12:05:09|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:09
2010-05-10 
12:05:09|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|134/0 
files deleted deleted under '$SYSTEMDRIVE/Documents and Settings/' 
matching '.*Temporary Internet Files\/Content.*\/.*'
2010-05-10 
12:05:09|9225|144:178|image|Windows.pm:delete_files_by_pattern(1104)|files/directories 
which were deleted:
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/ADSAdClient31[1].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/bg[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/button_Install[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/button_Install_clicked[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/button_Install_disabled[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/button_Install_hover[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/commencement[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/commontop[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/common[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/content[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/desktop.ini'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/gadgetv2[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/hcp[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/logo[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/olc_icon[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/pointer[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/redirect[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/redirect[2].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/resultslist[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/richinstitute[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/scriptaculous[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/swfobject[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/tgar[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/tgar[2].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/tgar[3].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/tgar[4].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/udm-dom[1].php'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/views[1]'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/vistadefault[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/VistaFooter[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/vistaoptin[2].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7/VistaWin7Shared[1].js'
|9225|144:178|image| removed directory: `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/6GULKGD7'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/ADSAdClient31[1].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/blank[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/commontop[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/content[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/content[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/content[2].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/controls[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/default[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/default[3].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/desktop.ini'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/effects[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/gray_arrow[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/muv4wuredir[1].cab'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/navbar-bg[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/pointer_small[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/print[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/redirect[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/rss[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/SD[1].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/select_all_programsWin7[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/select_wuWin7[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/spupdateids[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/tgar[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/tgar[2].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/tgar[3].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/timelinks-bg[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/trans_pixel[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/udm-mod-keyboard[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/vista_mu_subbanner-part1_ltr[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/vista_subbanner-part2_ltr[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/webcomtop[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX/WindVista_masthead_ltr[1].gif'
|9225|144:178|image| removed directory: `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/9F9N5VKX'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/desktop.ini'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/index.dat'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/ADSAdClient31[1].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/ADSAdClient31[2].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/common[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/content[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/content[2].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/css[1].aspx'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/default[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/desktop.ini'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/failed-sm[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/favicon[2].ico'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/handheld[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/ie[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/msn_logo[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/navbar-bg-hover[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/office_logo[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/orientation[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/precollege[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/resultslist[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/search-bg[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/shield[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/spupdateids[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/summer_session[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/tgar[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/tgar[2].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/trans_pixel[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/udm-style[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/views[1]'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/vistadefault[2].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/vistathanks[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/vistathanks[2].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/vista_subbanner-center[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY/webcomtop[1].js'
|9225|144:178|image| removed directory: `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/KLDBC3RY'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/ADSAdClient31[1].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/ADSAdClient31[2].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/ADSAdClient31[3].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/ADSAdClient31[4].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/box_shield[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/button_Install_disabled[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/content[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/default[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/desktop.ini'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/footer-bg[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/home-handheld[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/home-print[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/home[1].css'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/jsonpProxy[1]'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/marist_edu[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/muauth[1].cab'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/noflash[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/prototype[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/redirect[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/redirect[2].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/river[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/spacer[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/tgar[1].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/tgar[2].js'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/trans_pixel[1].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/trans_pixel[2].gif'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/usnews[1].png'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/v6[1].txt'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/vistaarrow[1].jpg'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/vistadefault[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/VistaToolbar[1].htm'
|9225|144:178|image| removed `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82/win_logo[1].jpg'
|9225|144:178|image| removed directory: `C:/Documents and 
Settings/root/AppData/Local/Microsoft/Windows/Temporary Internet 
Files/Content.IE5/O09OFN82'
2010-05-10 
12:05:09|9225|144:178|image|Windows.pm:clean_hard_drive(6241)|attempting 
to delete files under $SYSTEMDRIVE matching pattern .*pagefile\.sys
2010-05-10 
12:05:09|9225|144:178|image|Windows.pm:delete_files_by_pattern(1093)|attempting 
to delete files under $SYSTEMDRIVE/ matching pattern .*pagefile\.sys, max 
depth: 1
2010-05-10 
12:05:09|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/find.exe "$SYSTEMDRIVE/" -mindepth 1 -maxdepth 1 -iregex 
".*pagefile\.sys" -exec chmod 777 {} \; -exec rm -rvf {} \;' 2>&1
2010-05-10 
12:05:10|9225|144:178|image|Windows.pm:delete_files_by_pattern(1103)|0/0 
files deleted deleted under '$SYSTEMDRIVE/' matching '.*pagefile\.sys'
2010-05-10 
12:05:10|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/clean_hard_drive_271.reg; /usr/bin/echo.exe -E 
"Windows Registry Editor Version 5.00
|9225|144:178|image| ; This registry file contains the entries to turn on 
all cleanmgr options
|9225|144:178|image| ; The state flags below are set to 1, so use the 
command: 'CLEANMGR /sagerun:1'
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches]
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Active 
Setup Temp Folders]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Content 
Indexer Cleaner]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Downloaded 
Program Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Hibernation 
File]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Internet 
Cache Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Memory 
Dump Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Offline 
Pages Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Old 
ChkDsk Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Previous 
Installations]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Recycle 
Bin]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Setup 
Log Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000000
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\System 
error memory dump files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\System 
error minidump files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Temporary 
Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Temporary 
Setup Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Temporary 
Sync Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Thumbnail 
Cache]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Upgrade 
Discarded Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Windows 
Error Reporting Archive Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Windows 
Error Reporting Queue Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Windows 
Error Reporting System Archive Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\explorer\\VolumeCaches\\Windows 
Error Reporting System Queue Files]
|9225|144:178|image| \"StateFlags0001\"=dword:00000002" > 
C:/Cygwin/tmp/clean_hard_drive_271.reg' 2>&1
2010-05-10 
12:05:11|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/clean_hard_drive_271.reg
2010-05-10 
12:05:11|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:05:11|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/clean_hard_drive_271.reg' 2>&1
2010-05-10 
12:05:12|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/clean_hard_drive_271.reg
2010-05-10 
12:05:12|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/clean_hard_drive_271.reg
2010-05-10 
12:05:12|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\clean_hard_drive_271.reg
2010-05-10 
12:05:12|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\tmp\\clean_hard_drive_271.reg"' 
2>&1
2010-05-10 
12:05:12|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\clean_hard_drive_271.reg, dir 
output:
|9225|144:178|image| clean_hard_drive_271.reg
2010-05-10 
12:05:12|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/clean_hard_drive_271.reg
2010-05-10 
12:05:12|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/clean_hard_drive_271.reg' 2>&1
2010-05-10 12:05:13|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/clean_hard_drive_271.reg
2010-05-10 
12:05:13|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/clean_hard_drive_271.reg' 2>&1
2010-05-10 12:05:14|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/clean_hard_drive_271.reg using rm, files deleted: 1, 
directories deleted: 0
2010-05-10 12:05:14|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:14
2010-05-10 
12:05:15|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\tmp\\clean_hard_drive_271.reg"' 
2>&1
2010-05-10 
12:05:16|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: C:\\Cygwin\\tmp\\clean_hard_drive_271.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:05:16|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/clean_hard_drive_271.reg
2010-05-10 
12:05:16|9225|144:178|image|Windows.pm:clean_hard_drive(6323)|set registry 
settings to configure the disk cleanup utility
2010-05-10 
12:05:16|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/cleanmgr.exe /SAGERUN:01' 2>&1
2010-05-10 12:05:19|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:19
2010-05-10 12:05:24|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:24
2010-05-10 
12:05:25|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:05:25|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:clean_hard_drive(6333)|ran 
cleanmgr.exe
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module::OS::Windows::Version_6::Vista
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(295)|parent 
package names for VCL::Module::OS::Windows::Version_6::Vista:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS::Windows::Version_6'
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module::OS::Windows::Version_6
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(295)|parent 
package names for VCL::Module::OS::Windows::Version_6:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS::Windows'
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module::OS::Windows
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(295)|parent 
package names for VCL::Module::OS::Windows:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS'
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module::OS
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(295)|parent 
package names for VCL::Module::OS:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module'
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(277)|finding 
package hierarchy for: VCL::Module
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(291)|VCL::Module 
has no parent packages
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(309)|returning 
for VCL::Module::OS:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module'
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(309)|returning 
for VCL::Module::OS::Windows:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS'
|9225|144:178|image| |--[1] = 'VCL::Module'
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(309)|returning 
for VCL::Module::OS::Windows::Version_6:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS::Windows'
|9225|144:178|image| |--[1] = 'VCL::Module::OS'
|9225|144:178|image| |--[2] = 'VCL::Module'
2010-05-10 
12:05:25|9225|144:178|image|Module.pm:get_package_hierarchy(309)|returning 
for VCL::Module::OS::Windows::Version_6::Vista:
|9225|144:178|image| @
|9225|144:178|image| |--[0] = 'VCL::Module::OS::Windows::Version_6::Vista'
|9225|144:178|image| |--[1] = 'VCL::Module::OS::Windows::Version_6'
|9225|144:178|image| |--[2] = 'VCL::Module::OS::Windows'
|9225|144:178|image| |--[3] = 'VCL::Module::OS'
|9225|144:178|image| |--[4] = 'VCL::Module'
2010-05-10 
12:05:25|9225|144:178|image|OS.pm:get_source_configuration_directories(160)|package 
source configuration directory: /usr/local/vcl/bin/../tools/Windows_Vista
2010-05-10 
12:05:25|9225|144:178|image|OS.pm:get_source_configuration_directories(160)|package 
source configuration directory: 
/usr/local/vcl/bin/../tools/Windows_Version_6
2010-05-10 
12:05:25|9225|144:178|image|OS.pm:get_source_configuration_directories(160)|package 
source configuration directory: /usr/local/vcl/bin/../tools/Windows
2010-05-10 
12:05:25|9225|144:178|image|OS.pm:get_source_configuration_directories(156)|source 
configuration directory is not defined for VCL::Module::OS
2010-05-10 
12:05:25|9225|144:178|image|OS.pm:get_source_configuration_directories(156)|source 
configuration directory is not defined for VCL::Module
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:apply_security_templates(6789)|checking 
if any security templates exist in: 
/usr/local/vcl/bin/../tools/Windows/Security
2010-05-10 12:05:25|9225|144:178|image|utils.pm:run_command(9737)|executed 
command: find /usr/local/vcl/bin/../tools/Windows/Security -name "*.inf" 
2>&1 | sort -f, pid: 11504, exit status: 0, output:
|9225|144:178|image| 
/usr/local/vcl/bin/../tools/Windows/Security/windows_security.inf
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:apply_security_templates(6798)|ran 
find, output:
|9225|144:178|image| 
/usr/local/vcl/bin/../tools/Windows/Security/windows_security.inf
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:apply_security_templates(6789)|checking 
if any security templates exist in: 
/usr/local/vcl/bin/../tools/Windows_Version_6/Security
2010-05-10 12:05:25|9225|144:178|image|utils.pm:run_command(9737)|executed 
command: find /usr/local/vcl/bin/../tools/Windows_Version_6/Security -name 
"*.inf" 2>&1 | sort -f, pid: 11507, exit status: 0, output:
|9225|144:178|image| 
/usr/local/vcl/bin/../tools/Windows_Version_6/Security/Disable_UAC.inf
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:apply_security_templates(6798)|ran 
find, output:
|9225|144:178|image| 
/usr/local/vcl/bin/../tools/Windows_Version_6/Security/Disable_UAC.inf
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:apply_security_templates(6789)|checking 
if any security templates exist in: 
/usr/local/vcl/bin/../tools/Windows_Vista/Security
2010-05-10 12:05:25|9225|144:178|image|utils.pm:run_command(9737)|executed 
command: find /usr/local/vcl/bin/../tools/Windows_Vista/Security -name 
"*.inf" 2>&1 | sort -f, pid: 11510, exit status: 0, output:
|9225|144:178|image| find: 
/usr/local/vcl/bin/../tools/Windows_Vista/Security: No such file or 
directory
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:apply_security_templates(6794)|path 
does not exist: /usr/local/vcl/bin/../tools/Windows_Vista/Security
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:apply_security_templates(6813)|security 
templates will be applied in this order:
|9225|144:178|image| 
/usr/local/vcl/bin/../tools/Windows/Security/windows_security.inf
|9225|144:178|image| 
/usr/local/vcl/bin/../tools/Windows_Version_6/Security/Disable_UAC.inf
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:create_directory(819)|attempting to 
create 1 directories:
|9225|144:178|image| C:/Cygwin/home/root/VCL/Security
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:create_directory(826)|attempting to 
create directory: C:/Cygwin/home/root/VCL/Security
2010-05-10 
12:05:25|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/cmd.exe /c "mkdir 
\"C:/Cygwin/home/root/VCL/Security\""' 2>&1
2010-05-10 
12:05:25|9225|144:178|image|Windows.pm:create_directory(831)|directory 
already exists on node4: C:/Cygwin/home/root/VCL/Security, exit status: 1, 
output:
|9225|144:178|image| A subdirectory or file 
C:/Cygwin/home/root/VCL/Security already exists.
2010-05-10 
12:05:25|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\home\\root\\VCL\\Security"' 2>&1
2010-05-10 
12:05:26|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\home\\root\\VCL\\Security, dir output:
|9225|144:178|image| Disable_UAC.inf
|9225|144:178|image| windows_security.inf
2010-05-10 
12:05:26|9225|144:178|image|Windows.pm:create_directory(853)|verified that 
filesystem entry exists on node4: C:/Cygwin/home/root/VCL/Security
2010-05-10 
12:05:26|9225|144:178|image|Windows.pm:apply_security_templates(6834)|attempting 
to copy file to: C:/Cygwin/home/root/VCL/Security/1_windows_security.inf
2010-05-10 
12:05:26|9225|144:178|image|utils.pm:run_scp_command(6403)|attempt 1/3: 
executing SCP command: /usr/bin/scp -B -i /etc/vcl/vcl.key -P 22 -p -r 
/usr/local/vcl/bin/../tools/Windows/Security/windows_security.inf 
node4:C:/Cygwin/home/root/VCL/Security/1_windows_security.inf 2>&1
2010-05-10 12:05:27|9225|144:178|image|utils.pm:run_scp_command(6453)|scp 
successful: attempt 1/3, exit status: 0, output: none
2010-05-10 
12:05:27|9225|144:178|image|Windows.pm:apply_security_templates(6836)|copied 
file: node4:C:/Cygwin/home/root/VCL/Security/1_windows_security.inf
2010-05-10 
12:05:27|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/usr/bin/chmod.exe -R 644 
C:/Cygwin/home/root/VCL/Security/1_windows_security.inf' 2>&1
2010-05-10 12:05:29|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:29
2010-05-10 
12:05:30|9225|144:178|image|Windows.pm:apply_security_templates(6858)|ran 
secedit.exe to apply windows_security.inf
2010-05-10 
12:05:30|9225|144:178|image|Windows.pm:apply_security_templates(6834)|attempting 
to copy file to: C:/Cygwin/home/root/VCL/Security/2_Disable_UAC.inf
2010-05-10 
12:05:30|9225|144:178|image|utils.pm:run_scp_command(6403)|attempt 1/3: 
executing SCP command: /usr/bin/scp -B -i /etc/vcl/vcl.key -P 22 -p -r 
/usr/local/vcl/bin/../tools/Windows_Version_6/Security/Disable_UAC.inf 
node4:C:/Cygwin/home/root/VCL/Security/2_Disable_UAC.inf 2>&1
2010-05-10 12:05:31|9225|144:178|image|utils.pm:run_scp_command(6453)|scp 
successful: attempt 1/3, exit status: 0, output: none
2010-05-10 
12:05:31|9225|144:178|image|Windows.pm:apply_security_templates(6836)|copied 
file: node4:C:/Cygwin/home/root/VCL/Security/2_Disable_UAC.inf
2010-05-10 
12:05:31|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/usr/bin/chmod.exe -R 644 
C:/Cygwin/home/root/VCL/Security/2_Disable_UAC.inf' 2>&1
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:apply_security_templates(6858)|ran 
secedit.exe to apply Disable_UAC.inf
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4710)|network 
configuration has already been retrieved
2010-05-10 
12:05:34|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1418)|returning 
private IP address previously retrieved from /etc/hosts: 172.20.101.4
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4783)|interface 
found with private address not matching private address for reservation: 
Local Area Connection, description: Broadcom BCM5708S NetXtreme II GigE 
(NDIS VBD Client), address(es): 10.10.4.92
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4790)|interface 
will be returned if another with a public address isn't found
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4747)|private 
interface found: Local Area Connection 2, description: Broadcom BCM5708S 
NetXtreme II GigE (NDIS VBD Client) #2, address(es): 172.20.101.4
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4813)|did 
not find a public interface using a public IP address, but found interface 
using private IP address not matching reservation private IP address, 
returning data for public interface:
|9225|144:178|image| %
|9225|144:178|image| |--%{Local Area Connection}
|9225|144:178|image| |--{autoconfiguration_enabled} = 'Yes'
|9225|144:178|image| |--{connection_specific_dns_suffix} = 'marist.edu'
|9225|144:178|image| |--{default_gateway} = '10.10.4.1'
|9225|144:178|image| |--{description} = 'Broadcom BCM5708S NetXtreme II 
GigE (NDIS VBD Client)'
|9225|144:178|image| |--{dhcp_enabled} = 'Yes'
|9225|144:178|image| |--{dhcp_server} = '10.12.1.136'
|9225|144:178|image| |--{dns_server} = '10.12.1.11'
|9225|144:178|image| |--%{Local Area Connection}{ip_address}
|9225|144:178|image| |--{10.10.4.92} = '255.255.255.0'
|9225|144:178|image| |--{lease_expires} = 'Monday, May 10, 2010 4:40:18 
PM'
|9225|144:178|image| |--{lease_obtained} = 'Monday, May 10, 2010 11:40:18 
AM'
|9225|144:178|image| |--{netbios_over_tcpip} = 'Enabled'
|9225|144:178|image| |--{physical_address} = '00-1A-64-33-B1-76'
|9225|144:178|image| |--{primary_wins_server} = '10.12.1.13'
|9225|144:178|image| |--{secondary_wins_server} = '10.12.1.14'
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_public_interface_name(4878)|returning 
public interface name: Local Area Connection
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4710)|network 
configuration has already been retrieved
2010-05-10 
12:05:34|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1418)|returning 
private IP address previously retrieved from /etc/hosts: 172.20.101.4
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4783)|interface 
found with private address not matching private address for reservation: 
Local Area Connection, description: Broadcom BCM5708S NetXtreme II GigE 
(NDIS VBD Client), address(es): 10.10.4.92
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4790)|interface 
will be returned if another with a public address isn't found
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4747)|private 
interface found: Local Area Connection 2, description: Broadcom BCM5708S 
NetXtreme II GigE (NDIS VBD Client) #2, address(es): 172.20.101.4
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_network_configuration(4750)|returning 
data for private interface: Local Area Connection 2 (172.20.101.4)
2010-05-10 
12:05:34|9225|144:178|image|Windows.pm:get_private_interface_name(4848)|returning 
private interface name: Local Area Connection 2
2010-05-10 
12:05:34|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/netsh.exe interface ip set address name="Local 
Area Connection" source=dhcp' 2>&1
2010-05-10 12:05:34|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:34
2010-05-10 
12:05:35|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| DHCP is already enabled on this interface.
2010-05-10 12:05:35|9225|144:178|image|utils.pm:run_ssh_command(6272)|SSH 
command executed on node4, command:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/netsh.exe interface ip set address name="Local 
Area Connection" source=dhcp' 2>&1
|9225|144:178|image| returning (1, "DHCP is already enabled on thi...")
2010-05-10 12:05:35|9225|144:178|image|Windows.pm:enable_dhcp(5084)|dhcp 
is already enabled on interface 'Local Area Connection'
2010-05-10 
12:05:35|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/netsh.exe interface ip set address name="Local 
Area Connection 2" source=dhcp' 2>&1
2010-05-10 
12:05:35|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| DHCP is already enabled on this interface.
2010-05-10 12:05:35|9225|144:178|image|utils.pm:run_ssh_command(6272)|SSH 
command executed on node4, command:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/netsh.exe interface ip set address name="Local 
Area Connection 2" source=dhcp' 2>&1
|9225|144:178|image| returning (1, "DHCP is already enabled on thi...")
2010-05-10 12:05:35|9225|144:178|image|Windows.pm:enable_dhcp(5084)|dhcp 
is already enabled on interface 'Local Area Connection 2'
2010-05-10 
12:05:35|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/ipconfig.exe /renew' 2>&1
2010-05-10 
12:05:36|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| Windows IP Configuration
|9225|144:178|image| Ethernet adapter Local Area Connection 2:
|9225|144:178|image| Connection-specific DNS Suffix . : is.marist.edu
|9225|144:178|image| IPv4 Address. . . . . . . . . . . : 172.20.101.4
|9225|144:178|image| Subnet Mask . . . . . . . . . . . : 255.255.0.0
|9225|144:178|image| Default Gateway . . . . . . . . . :
|9225|144:178|image| Ethernet adapter Local Area Connection:
|9225|144:178|image| Connection-specific DNS Suffix . : marist.edu
|9225|144:178|image| IPv4 Address. . . . . . . . . . . : 10.10.4.92
|9225|144:178|image| Subnet Mask . . . . . . . . . . . : 255.255.255.0
|9225|144:178|image| Default Gateway . . . . . . . . . : 10.10.4.1
2010-05-10 12:05:36|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "Windows IP Configuration 
Ether...")
2010-05-10 12:05:36|9225|144:178|image|Windows.pm:ipconfig_renew(5135)|ran 
ipconfig /renew
2010-05-10 
12:05:36|9225|144:178|image|Version_6.pm:defragment_hard_drive(1475)|skipping 
hard drive defragmentation for Windows 6.x because it takes too long, 
returning 1
2010-05-10 
12:05:36|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/reg.exe add 
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session 
Manager\Memory Management" /v PagingFiles /d "" /t REG_MULTI_SZ /f' 2>&1
2010-05-10 
12:05:37|9225|144:178|image|Windows.pm:disable_pagefile(1786)|set registry 
key to disable pagefile
2010-05-10 12:05:37|9225|144:178|image|Windows.pm:reboot(2687)|rebooting 
node4 and waiting for ssh to become active
2010-05-10 12:05:37|9225|144:178|image|Windows.pm:reboot(2696)|reboot will 
be attempted on node4
2010-05-10 
12:05:37|9225|144:178|image|Windows.pm:wait_for_ssh(3047)|waiting for 
node4 to respond to ssh, maximum of 0 minutes
2010-05-10 12:05:38|9225|144:178|image|Windows.pm:wait_for_ssh(3073)|node4 
is responding to ssh
2010-05-10 
12:05:38|9225|144:178|image|Windows.pm:get_network_configuration(4710)|network 
configuration has already been retrieved
2010-05-10 
12:05:38|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1418)|returning 
private IP address previously retrieved from /etc/hosts: 172.20.101.4
2010-05-10 
12:05:38|9225|144:178|image|Windows.pm:get_network_configuration(4783)|interface 
found with private address not matching private address for reservation: 
Local Area Connection, description: Broadcom BCM5708S NetXtreme II GigE 
(NDIS VBD Client), address(es): 10.10.4.92
2010-05-10 
12:05:38|9225|144:178|image|Windows.pm:get_network_configuration(4790)|interface 
will be returned if another with a public address isn't found
2010-05-10 
12:05:38|9225|144:178|image|Windows.pm:get_network_configuration(4747)|private 
interface found: Local Area Connection 2, description: Broadcom BCM5708S 
NetXtreme II GigE (NDIS VBD Client) #2, address(es): 172.20.101.4
2010-05-10 
12:05:38|9225|144:178|image|Windows.pm:get_network_configuration(4750)|returning 
data for private interface: Local Area Connection 2 (172.20.101.4)
2010-05-10 
12:05:38|9225|144:178|image|Windows.pm:get_private_ip_address(4910)|returning 
private IP address: 172.20.101.4
2010-05-10 
12:05:38|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/cygstart.exe netsh.exe advfirewall firewall delete rule 
name=all dir=in protocol=TCP localport=22 ; netsh.exe advfirewall firewall 
add rule name="VCL: allow SSH port 22 to: 172.20.101.4" 
description="Allows incoming SSH (TCP port 22) traffic to: 172.20.101.4" 
protocol=TCP localport=22 action=allow enable=yes dir=in 
localip=172.20.101.4' 2>&1
2010-05-10 
12:05:39|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| Ok.
2010-05-10 12:05:39|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "Ok.")
2010-05-10 
12:05:39|9225|144:178|image|Version_6.pm:firewall_enable_ssh_private(1139)|added 
firewall rule to enable SSH to: 172.20.101.4
2010-05-10 
12:05:39|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '"$SYSTEMROOT/System32/sc.exe" config sshd start= auto' 2>&1
2010-05-10 12:05:39|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:39
2010-05-10 
12:05:40|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| [SC] ChangeServiceConfig SUCCESS
2010-05-10 12:05:40|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "[SC] ChangeServiceConfig 
SUCCE...")
2010-05-10 
12:05:40|9225|144:178|image|Windows.pm:set_service_startup_mode(3123)|sshd 
service startup mode set to auto
2010-05-10 
12:05:40|9225|144:178|image|Windows.pm:get_network_configuration(4710)|network 
configuration has already been retrieved
2010-05-10 
12:05:40|9225|144:178|image|DataStructure.pm:get_computer_private_ip_address(1418)|returning 
private IP address previously retrieved from /etc/hosts: 172.20.101.4
2010-05-10 
12:05:40|9225|144:178|image|Windows.pm:get_network_configuration(4783)|interface 
found with private address not matching private address for reservation: 
Local Area Connection, description: Broadcom BCM5708S NetXtreme II GigE 
(NDIS VBD Client), address(es): 10.10.4.92
2010-05-10 
12:05:40|9225|144:178|image|Windows.pm:get_network_configuration(4790)|interface 
will be returned if another with a public address isn't found
2010-05-10 
12:05:40|9225|144:178|image|Windows.pm:get_network_configuration(4747)|private 
interface found: Local Area Connection 2, description: Broadcom BCM5708S 
NetXtreme II GigE (NDIS VBD Client) #2, address(es): 172.20.101.4
2010-05-10 
12:05:40|9225|144:178|image|Windows.pm:get_network_configuration(4750)|returning 
data for private interface: Local Area Connection 2 (172.20.101.4)
2010-05-10 
12:05:40|9225|144:178|image|Windows.pm:get_private_ip_address(4910)|returning 
private IP address: 172.20.101.4
2010-05-10 
12:05:40|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'netsh.exe advfirewall firewall delete rule name=all dir=in 
protocol=icmpv4:8,any ; netsh.exe advfirewall firewall add rule name="VCL: 
allow incoming ping to: 172.20.101.4" description="Allows incoming ping 
(ICMP type 8) messages to: 172.20.101.4" protocol=icmpv4:8,any 
action=allow enable=yes dir=in localip=172.20.101.4' 2>&1
2010-05-10 
12:05:41|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| Deleted 1 rule(s).
|9225|144:178|image| Ok.
|9225|144:178|image| Ok.
2010-05-10 12:05:41|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "Deleted 1 rule(s). Ok. Ok.")
2010-05-10 
12:05:41|9225|144:178|image|Version_6.pm:firewall_enable_ping_private(775)|added 
firewall rule to allow incoming ping to: 172.20.101.4
2010-05-10 
12:05:41|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/system32/shutdown.exe -r -t 0 -f' 2>&1
2010-05-10 
12:05:41|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:05:41|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 12:05:41|9225|144:178|image|Windows.pm:reboot(2721)|executed 
reboot command on node4
2010-05-10 12:05:41|9225|144:178|image|Windows.pm:reboot(2767)|sleeping 
for 5 seconds while node4 begins to reboot
2010-05-10 12:05:44|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:44
2010-05-10 
12:05:46|9225|144:178|image|Windows.pm:wait_for_no_ping(2988)|waiting for 
node4 to become unresponsive, maximum of 3 minutes
2010-05-10 
12:05:46|9225|144:178|image|Windows.pm:wait_for_no_ping(2993)|attempt 
1/36: node4 is still pingable, sleeping for 5 seconds
2010-05-10 12:05:49|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:49
2010-05-10 
12:05:52|9225|144:178|image|Windows.pm:wait_for_no_ping(2998)|node4 is not 
pingable, returning 1
2010-05-10 12:05:52|9225|144:178|image|Windows.pm:reboot(2797)|node4 
reboot has begun, sleeping for 15 seconds
2010-05-10 12:05:54|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:54
2010-05-10 12:05:59|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:05:59
2010-05-10 12:06:04|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:04
2010-05-10 
12:06:07|9225|144:178|image|Windows.pm:wait_for_ping(2933)|waiting for 
node4 to respond to ping, maximum of 4 minutes
2010-05-10 
12:06:08|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 1/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:06:09|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:09
2010-05-10 12:06:14|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:14
2010-05-10 
12:06:14|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 2/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:06:19|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:19
2010-05-10 
12:06:20|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 3/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:06:24|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:24
2010-05-10 
12:06:26|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 4/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:06:30|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:29
2010-05-10 
12:06:32|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 5/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:06:35|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:35
2010-05-10 
12:06:38|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 6/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:06:40|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:40
2010-05-10 
12:06:44|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 7/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:06:45|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:45
2010-05-10 12:06:50|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:50
2010-05-10 
12:06:50|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 8/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:06:55|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:06:55
2010-05-10 
12:06:56|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 9/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:00|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:00
2010-05-10 
12:07:02|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 10/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:05|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:05
2010-05-10 
12:07:08|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 11/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:10|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:10
2010-05-10 
12:07:14|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 12/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:15|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:15
2010-05-10 12:07:20|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:20
2010-05-10 
12:07:20|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 13/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:25|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:25
2010-05-10 
12:07:26|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 14/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:30|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:30
2010-05-10 
12:07:32|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 15/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:35|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:35
2010-05-10 
12:07:38|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 16/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:40|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:40
2010-05-10 
12:07:44|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 17/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:45|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:45
2010-05-10 12:07:50|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:50
2010-05-10 
12:07:50|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 18/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:07:55|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:07:55
2010-05-10 
12:07:56|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 19/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:08:00|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:00
2010-05-10 
12:08:02|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 20/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:08:05|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:05
2010-05-10 
12:08:09|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 21/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:08:10|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:10
2010-05-10 
12:08:15|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 22/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:08:15|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:15
2010-05-10 12:08:20|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:20
2010-05-10 
12:08:21|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 23/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:08:25|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:25
2010-05-10 
12:08:27|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 24/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:08:30|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:30
2010-05-10 
12:08:33|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 25/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:08:35|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:35
2010-05-10 
12:08:39|9225|144:178|image|Windows.pm:wait_for_ping(2938)|attempt 26/48: 
node4 is not pingable, sleeping for 5 seconds
2010-05-10 12:08:40|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:40
2010-05-10 
12:08:44|9225|144:178|image|Windows.pm:wait_for_ping(2943)|node4 is 
pingable
2010-05-10 12:08:44|9225|144:178|image|Windows.pm:reboot(2807)|node4 is 
pingable, waiting for ssh to respond
2010-05-10 
12:08:44|9225|144:178|image|Windows.pm:wait_for_ssh(3047)|waiting for 
node4 to respond to ssh, maximum of 3 minutes
2010-05-10 12:08:45|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:45
2010-05-10 12:08:46|9225|144:178|image|Windows.pm:wait_for_ssh(3073)|node4 
is responding to ssh
2010-05-10 12:08:46|9225|144:178|image|Windows.pm:reboot(2815)|node4 
responded to ssh
2010-05-10 12:08:46|9225|144:178|image|Windows.pm:reboot(2832)|reboot 
complete on node4, took 189 seconds
2010-05-10 
12:08:46|9225|144:178|image|Windows.pm:disable_pagefile(1799)|computer was 
rebooted after disabling pagefile in the registry
2010-05-10 
12:08:46|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'for i in `ls /cygdrive 2>/dev/null`; do echo $i; done;' 2>&1
2010-05-10 
12:08:48|9225|144:178|image|Windows.pm:get_volume_list(7573)|retrieved 
drive letter list under /cygdrive:
|9225|144:178|image| c
2010-05-10 
12:08:48|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: c:/pagefile.sys
2010-05-10 
12:08:48|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: c:\\pagefile.sys
2010-05-10 
12:08:48|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "c:\\pagefile.sys"' 2>&1
2010-05-10 
12:08:50|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: c:\\pagefile.sys
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 12:08:50|9225|144:178|image|Windows.pm:delete_file(898)|file 
not deleted because it does not exist: c:/pagefile.sys
2010-05-10 
12:08:50|9225|144:178|image|Windows.pm:disable_pagefile(1816)|deleted 
pagefile.sys on all c:
2010-05-10 
12:08:50|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'netsh.exe advfirewall firewall delete rule name=all dir=in 
protocol=TCP localport=3389' 2>&1
2010-05-10 12:08:51|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:50
2010-05-10 
12:08:53|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| Deleted 1 rule(s).
|9225|144:178|image| Ok.
2010-05-10 12:08:53|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "Deleted 1 rule(s). Ok.")
2010-05-10 
12:08:53|9225|144:178|image|Version_6.pm:firewall_disable_rdp(1012)|deleted 
firewall rules which enable RDP
2010-05-10 
12:08:53|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '/bin/cygstart.exe netsh.exe advfirewall firewall delete rule 
name=all dir=in protocol=TCP localport=22 ; netsh.exe advfirewall firewall 
add rule name="VCL: allow SSH port 22 from any address" 
description="Allows incoming SSH (TCP port 22) traffic from any address" 
protocol=TCP localport=22 action=allow enable=yes dir=in localip=any 
remoteip=any' 2>&1
2010-05-10 
12:08:54|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| Ok.
2010-05-10 12:08:54|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "Ok.")
2010-05-10 
12:08:54|9225|144:178|image|Version_6.pm:firewall_enable_ssh(1074)|added 
firewall rule to enable SSH from any address
2010-05-10 
12:08:54|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'netsh.exe advfirewall firewall delete rule name=all dir=in 
protocol=icmpv4:8,any ; netsh.exe advfirewall firewall add rule name="VCL: 
allow ping from any address" description="Allows incoming ping (ICMP type 
8) messages from any address" protocol=icmpv4:8,any action=allow 
enable=yes dir=in localip=any remoteip=any' 2>&1
2010-05-10 
12:08:55|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| Deleted 1 rule(s).
|9225|144:178|image| Ok.
|9225|144:178|image| Ok.
2010-05-10 12:08:55|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "Deleted 1 rule(s). Ok. Ok.")
2010-05-10 
12:08:55|9225|144:178|image|Version_6.pm:firewall_enable_ping(713)|added 
firewall rule to enable ping from any address
2010-05-10 
12:08:55|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/reg.exe add 
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session 
Manager\Memory Management" /v PagingFiles /d "$SYSTEMDRIVE\pagefile.sys 0 
0" /t REG_MULTI_SZ /f' 2>&1
2010-05-10 12:08:56|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:08:56
2010-05-10 
12:08:56|9225|144:178|image|Windows.pm:enable_pagefile(1852)|set registry 
key to enable pagefile
2010-05-10 
12:08:56|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '"$SYSTEMROOT/System32/sc.exe" config sshd start= demand' 2>&1
2010-05-10 
12:08:58|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| [SC] ChangeServiceConfig SUCCESS
2010-05-10 12:08:58|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "[SC] ChangeServiceConfig 
SUCCE...")
2010-05-10 
12:08:58|9225|144:178|image|Windows.pm:set_service_startup_mode(3123)|sshd 
service startup mode set to demand
2010-05-10 
12:08:58|9225|144:178|image|Windows.pm:pre_capture(393)|returning 1
2010-05-10 
12:08:58|9225|144:178|image|Version_6.pm:pre_capture(113)|successfully 
executed parent class pre_capture() subroutine
2010-05-10 
12:08:58|9225|144:178|image|Version_6.pm:pre_capture(121)|beginning 
Windows version 6 image pre-capture tasks
2010-05-10 
12:08:58|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/schtasks.exe /Change /DISABLE /TN 
"\Microsoft\Windows\Defrag\ScheduledDefrag"' 2>&1
2010-05-10 
12:08:59|9225|144:178|image|Windows.pm:disable_scheduled_task(3484)|\Microsoft\Windows\Defrag\ScheduledDefrag 
scheduled task disabled on node4
2010-05-10 
12:08:59|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/schtasks.exe /Change /DISABLE /TN 
"\Microsoft\Windows\SystemRestore\SR"' 2>&1
2010-05-10 
12:09:00|9225|144:178|image|Windows.pm:disable_scheduled_task(3484)|\Microsoft\Windows\SystemRestore\SR 
scheduled task disabled on node4
2010-05-10 
12:09:00|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/schtasks.exe /Change /DISABLE /TN 
"\Microsoft\Windows\Customer Experience Improvement Program\Consolidator"' 
2>&1
2010-05-10 
12:09:00|9225|144:178|image|Windows.pm:disable_scheduled_task(3484)|\Microsoft\Windows\Customer 
Experience Improvement Program\Consolidator scheduled task disabled on 
node4
2010-05-10 
12:09:00|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 '$SYSTEMROOT/System32/schtasks.exe /Change /DISABLE /TN 
"\Microsoft\Windows\Customer Experience Improvement 
Program\OptinNotification"' 2>&1
2010-05-10 12:09:01|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:01

|9225|144:178|image| ---- WARNING ---- 
|9225|144:178|image| 2010-05-10 
12:09:01|9225|144:178|image|Windows.pm:disable_scheduled_task(3488)|failed 
to disable \Microsoft\Windows\Customer Experience Improvement 
Program\OptinNotification scheduled task on node4, exit status: 1, output:
|9225|144:178|image| ERROR: The specified task name 
"\Microsoft\Windows\Customer Experience Improvement 
Program\OptinNotification" does not exist in the system.
|9225|144:178|image| ( 0) utils.pm, notify (line: 737)
|9225|144:178|image| (-1) Windows.pm, disable_scheduled_task (line: 3488)
|9225|144:178|image| (-2) Version_6.pm, pre_capture (line: 153)
|9225|144:178|image| (-3) Vista.pm, pre_capture (line: 101)
|9225|144:178|image| (-4) xCAT.pm, capture (line: 1092)
|9225|144:178|image| (-5) image.pm, process (line: 162)
|9225|144:178|image| (-6) vcld, make_new_child (line: 594)

2010-05-10 
12:09:01|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/deactivate_161.reg; /usr/bin/echo.exe -E 
"Windows Registry Editor Version 5.00
|9225|144:178|image| [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows 
NT\\CurrentVersion\\SL]
|9225|144:178|image| \"KeyManagementServicePort\"=-
|9225|144:178|image| \"KeyManagementServiceName\"=-
|9225|144:178|image| \"SkipRearm\"=dword:00000001" > 
C:/Cygwin/tmp/deactivate_161.reg' 2>&1
2010-05-10 
12:09:02|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/deactivate_161.reg
2010-05-10 
12:09:02|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:09:02|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/deactivate_161.reg' 2>&1
2010-05-10 
12:09:03|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/deactivate_161.reg
2010-05-10 
12:09:03|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/deactivate_161.reg
2010-05-10 
12:09:03|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\deactivate_161.reg
2010-05-10 
12:09:03|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\tmp\\deactivate_161.reg"' 2>&1
2010-05-10 
12:09:04|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\deactivate_161.reg, dir output:
|9225|144:178|image| deactivate_161.reg
2010-05-10 
12:09:04|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/deactivate_161.reg
2010-05-10 
12:09:04|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/deactivate_161.reg' 2>&1
2010-05-10 12:09:05|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/deactivate_161.reg
2010-05-10 
12:09:05|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/deactivate_161.reg' 2>&1
2010-05-10 12:09:06|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:06
2010-05-10 12:09:06|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/deactivate_161.reg using rm, files deleted: 1, directories 
deleted: 0
2010-05-10 
12:09:07|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b "C:\\Cygwin\\tmp\\deactivate_161.reg"' 2>&1
2010-05-10 
12:09:08|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: C:\\Cygwin\\tmp\\deactivate_161.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:09:08|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/deactivate_161.reg
2010-05-10 
12:09:08|9225|144:178|image|Version_6.pm:deactivate(606)|removed kms keys 
from the registry
2010-05-10 
12:09:08|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cscript.exe //NoLogo $SYSTEMROOT/System32/slmgr.vbs -rearm' 2>&1
2010-05-10 12:09:11|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:11
2010-05-10 
12:09:15|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| Command completed successfully.
|9225|144:178|image| Please restart the system for the changes to take 
effect.
2010-05-10 12:09:15|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "Command completed 
successfully...")
2010-05-10 
12:09:15|9225|144:178|image|Version_6.pm:deactivate(617)|rearmed licensing
2010-05-10 
12:09:15|9225|144:178|image|Version_6.pm:pre_capture(170)|returning 1
2010-05-10 
12:09:15|9225|144:178|image|Vista.pm:pre_capture(101)|successfully 
executed parent class pre_capture() subroutine
2010-05-10 12:09:15|9225|144:178|image|Vista.pm:pre_capture(109)|beginning 
Windows Vista image capture preparation tasks
2010-05-10 
12:09:15|9225|144:178|image|Windows.pm:add_hklm_run_registry_key(2313)|command 
name: run_newsid.cmd
2010-05-10 
12:09:15|9225|144:178|image|Windows.pm:add_hklm_run_registry_key(2314)|command: 
C:/Cygwin/home/root/VCL/Scripts/run_newsid.cmd >> 
C:/Cygwin/home/root/VCL/Logs/run_newsid.log
2010-05-10 
12:09:15|9225|144:178|image|Windows.pm:add_hklm_run_registry_key(2318)|forward 
to backslash: C:\Cygwin\home\root\VCL\Scripts\run_newsid.cmd >> 
C:\Cygwin\home\root\VCL\Logs\run_newsid.log
2010-05-10 
12:09:15|9225|144:178|image|Windows.pm:add_hklm_run_registry_key(2322)|escape 
backslashes: C:\\Cygwin\\home\\root\\VCL\\Scripts\\run_newsid.cmd >> 
C:\\Cygwin\\home\\root\\VCL\\Logs\\run_newsid.log
2010-05-10 
12:09:15|9225|144:178|image|Windows.pm:add_hklm_run_registry_key(2326)|escaped 
quotes: C:\\Cygwin\\home\\root\\VCL\\Scripts\\run_newsid.cmd >> 
C:\\Cygwin\\home\\root\\VCL\\Logs\\run_newsid.log
2010-05-10 
12:09:15|9225|144:178|image|Windows.pm:add_hklm_run_registry_key(2341)|registry 
string:
|9225|144:178|image| Windows Registry Editor Version 5.00
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
|9225|144:178|image| 
"run_newsid.cmd"="C:\\Cygwin\\home\\root\\VCL\\Scripts\\run_newsid.cmd  >> 
C:\\Cygwin\\home\\root\\VCL\\Logs\\run_newsid.log"
2010-05-10 
12:09:15|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg; 
/usr/bin/echo.exe -E "Windows Registry Editor Version 5.00
|9225|144:178|image| 
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run]
|9225|144:178|image| 
\"run_newsid.cmd\"=\"C:\\\\Cygwin\\\\home\\\\root\\\\VCL\\\\Scripts\\\\run_newsid.cmd 
 >> C:\\\\Cygwin\\\\home\\\\root\\\\VCL\\\\Logs\\\\run_newsid.log\"" > 
C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg' 2>&1
2010-05-10 12:09:16|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:16
2010-05-10 
12:09:16|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg
2010-05-10 
12:09:16|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:09:16|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg' 2>&1
2010-05-10 
12:09:17|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg
2010-05-10 
12:09:17|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg
2010-05-10 
12:09:17|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\add_hklm_run_registry_key_3284.reg
2010-05-10 
12:09:17|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\add_hklm_run_registry_key_3284.reg"' 2>&1
2010-05-10 
12:09:17|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: 
C:\\Cygwin\\tmp\\add_hklm_run_registry_key_3284.reg, dir output:
|9225|144:178|image| add_hklm_run_registry_key_3284.reg
2010-05-10 
12:09:17|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg
2010-05-10 
12:09:17|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg' 
2>&1
2010-05-10 12:09:18|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg
2010-05-10 
12:09:18|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg' 2>&1
2010-05-10 12:09:19|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg using rm, files deleted: 
1, directories deleted: 0
2010-05-10 
12:09:20|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\add_hklm_run_registry_key_3284.reg"' 2>&1
2010-05-10 12:09:21|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:21
2010-05-10 
12:09:21|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: 
C:\\Cygwin\\tmp\\add_hklm_run_registry_key_3284.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:09:21|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/add_hklm_run_registry_key_3284.reg
2010-05-10 
12:09:21|9225|144:178|image|Windows.pm:add_hklm_run_registry_key(2344)|added 
HKLM run registry value, name: run_newsid.cmd, command: 
C:\\Cygwin\\home\\root\\VCL\\Scripts\\run_newsid.cmd >> 
C:\\Cygwin\\home\\root\\VCL\\Logs\\run_newsid.log
2010-05-10 
12:09:21|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:09:21|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe query 
"HKLM\SOFTWARE\Microsoft\Windows\\CurrentVersion\Run"' 2>&1
2010-05-10 
12:09:22|9225|144:178|image|Windows.pm:add_hklm_run_registry_key(2355)|queried 
'run_newsid.cmd' registry key:
|9225|144:178|image| 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
|9225|144:178|image| QuickTime Task    REG_SZ    "C:\Program 
Files\QuickTime\QTTask.exe" -atboottime
|9225|144:178|image| Adobe Reader Speed Launcher    REG_SZ    "C:\Program 
Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
|9225|144:178|image| Adobe ARM    REG_SZ    "C:\Program Files\Common 
Files\Adobe\ARM\1.0\AdobeARM.exe"
|9225|144:178|image| SunJavaUpdateSched    REG_SZ    "C:\Program 
Files\Common Files\Java\Java Update\jusched.exe"
|9225|144:178|image| TkBellExe    REG_SZ    "C:\Program Files\Common 
Files\Real\Update_OB\realsched.exe"  -osboot
|9225|144:178|image| McAfeeUpdaterUI    REG_SZ    "C:\Program 
Files\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey
|9225|144:178|image| ShStatEXE    REG_SZ    "C:\Program 
Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
|9225|144:178|image| BCSSync    REG_SZ    "C:\Program Files\Microsoft 
Office\Office14\BCSSync.exe" /DelayServices
|9225|144:178|image| boinctray    REG_SZ    "C:\Program 
Files\BOINC\boinctray.exe"
|9225|144:178|image| run_newsid.cmd    REG_SZ 
C:\Cygwin\home\root\VCL\Scripts\run_newsid.cmd  >> 
C:\Cygwin\home\root\VCL\Logs\run_newsid.log
|9225|144:178|image| 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
2010-05-10 
12:09:22|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -f C:/Cygwin/tmp/enable_autoadminlogon_3290.reg; 
/usr/bin/echo.exe -E "Windows Registry Editor Version 5.00
|9225|144:178|image| ; This file enables autoadminlogon for the root 
account
|9225|144:178|image| [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows 
NT\\CurrentVersion\\Winlogon]
|9225|144:178|image| \"AutoAdminLogon\"=\"1\"
|9225|144:178|image| \"DefaultUserName\"=\"root\"
|9225|144:178|image| \"DefaultPassword\"= \"cluster\"" > 
C:/Cygwin/tmp/enable_autoadminlogon_3290.reg' 2>&1
2010-05-10 
12:09:23|9225|144:178|image|Windows.pm:import_registry_string(2023)|registry 
string contents echoed to C:/Cygwin/tmp/enable_autoadminlogon_3290.reg
2010-05-10 
12:09:23|9225|144:178|image|Windows.pm:get_system32_path(7751)|System32 
string previously detected: C:/Windows/System32
2010-05-10 
12:09:23|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/System32/reg.exe IMPORT 
C:/Cygwin/tmp/enable_autoadminlogon_3290.reg' 2>&1
2010-05-10 
12:09:23|9225|144:178|image|Windows.pm:reg_import(2275)|imported registry 
file: C:/Cygwin/tmp/enable_autoadminlogon_3290.reg
2010-05-10 
12:09:23|9225|144:178|image|Windows.pm:format_path_unix(7843)|formatted 
path for Unix: C:/Cygwin/tmp/enable_autoadminlogon_3290.reg
2010-05-10 
12:09:23|9225|144:178|image|Windows.pm:format_path_dos(7875)|formatted 
path for DOS: C:\\Cygwin\\tmp\\enable_autoadminlogon_3290.reg
2010-05-10 
12:09:23|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\enable_autoadminlogon_3290.reg"' 2>&1
2010-05-10 
12:09:24|9225|144:178|image|Windows.pm:filesystem_entry_exists(1149)|filesystem 
entry exists on node4: C:\\Cygwin\\tmp\\enable_autoadminlogon_3290.reg, 
dir output:
|9225|144:178|image| enable_autoadminlogon_3290.reg
2010-05-10 
12:09:24|9225|144:178|image|Windows.pm:delete_file(902)|attempting to 
delete file: C:/Cygwin/tmp/enable_autoadminlogon_3290.reg
2010-05-10 
12:09:24|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'chmod -Rv 777 C:/Cygwin/tmp/enable_autoadminlogon_3290.reg' 2>&1
2010-05-10 12:09:25|9225|144:178|image|Windows.pm:delete_file(907)|set 
permissions to 777 on C:/Cygwin/tmp/enable_autoadminlogon_3290.reg
2010-05-10 
12:09:25|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'rm -rfv C:/Cygwin/tmp/enable_autoadminlogon_3290.reg' 2>&1
2010-05-10 12:09:26|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:26
2010-05-10 12:09:26|9225|144:178|image|Windows.pm:delete_file(923)|deleted 
C:/Cygwin/tmp/enable_autoadminlogon_3290.reg using rm, files deleted: 1, 
directories deleted: 0
2010-05-10 
12:09:27|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'cmd.exe /c dir /a /b 
"C:\\Cygwin\\tmp\\enable_autoadminlogon_3290.reg"' 2>&1
2010-05-10 
12:09:28|9225|144:178|image|Windows.pm:filesystem_entry_exists(1153)|filesystem 
entry does NOT exist on node4: 
C:\\Cygwin\\tmp\\enable_autoadminlogon_3290.reg
|9225|144:178|image| output:
|9225|144:178|image| File Not Found
2010-05-10 
12:09:28|9225|144:178|image|Windows.pm:delete_file(941)|confirmed file 
does not exist: C:/Cygwin/tmp/enable_autoadminlogon_3290.reg
2010-05-10 
12:09:28|9225|144:178|image|Windows.pm:enable_autoadminlogon(2567)|enabled 
autoadminlogon
2010-05-10 12:09:28|9225|144:178|image|Windows.pm:shutdown(2861)|node4 
will be shut down
2010-05-10 
12:09:28|9225|144:178|image|utils.pm:run_ssh_command(6180)|executing SSH 
command on node4:
|9225|144:178|image| /usr/bin/ssh -i /etc/vcl/vcl.key  -l root -p 22 -x 
node4 'C:/Windows/system32/shutdown.exe -s -t 0 -f' 2>&1
2010-05-10 
12:09:29|9225|144:178|image|utils.pm:run_ssh_command(6262)|run_ssh_command 
output:
|9225|144:178|image| none
2010-05-10 12:09:29|9225|144:178|image|utils.pm:run_ssh_command(6276)|SSH 
command executed on node4, returning (0, "none")
2010-05-10 12:09:29|9225|144:178|image|Windows.pm:shutdown(2867)|executed 
shutdown command on node4
2010-05-10 
12:09:29|9225|144:178|image|Windows.pm:wait_for_no_ping(2988)|waiting for 
node4 to become unresponsive, maximum of 3 minutes
2010-05-10 
12:09:29|9225|144:178|image|Windows.pm:wait_for_no_ping(2993)|attempt 
1/36: node4 is still pingable, sleeping for 5 seconds
2010-05-10 12:09:31|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:31
2010-05-10 
12:09:34|9225|144:178|image|Windows.pm:wait_for_no_ping(2993)|attempt 
2/36: node4 is still pingable, sleeping for 5 seconds
2010-05-10 12:09:36|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:36
2010-05-10 
12:09:40|9225|144:178|image|Windows.pm:wait_for_no_ping(2998)|node4 is not 
pingable, returning 1
2010-05-10 12:09:40|9225|144:178|image|Windows.pm:shutdown(2871)|computer 
has become unresponsive after shutdown command was issued
2010-05-10 12:09:40|9225|144:178|image|Vista.pm:pre_capture(118)|returning 
1
2010-05-10 12:09:40|9225|144:178|image|xCAT.pm:wait_for_off(2103)|waiting 
for node4 to turn off, maximum of 2 minutes
2010-05-10 12:09:40|9225|144:178|image|xCAT.pm:_rpower(2219)|attempting to 
execute rpower for computer: node4, mode: stat
2010-05-10 12:09:41|7448|vcld:main(165)|lastcheckin time updated for 
management node 1: 2010-05-10 12:09:41
2010-05-10 12:09:41|9225|144:178|image|utils.pm:run_command(9737)|executed 
command: /opt/xcat/bin/rpower node4 stat, pid: 13701, exit status: 0, 
output:
|9225|144:178|image| node4: off
Roger Herling
Sr. Desktop Administrator
Marist College
PH: 845-575-3347



From:
Roger Herling <Ro...@marist.edu>
To:
vcl-dev@incubator.apache.org
Cc:
vcl-user@incubator.apache.org
Date:
05/10/2010 01:33 PM
Subject:
Sysprep not running under windows 7



Sysprep doesn't run under windows 7 and uses newsid.exe instead Why is 
this happening? 



Roger Herling 
Sr. Desktop Administrator 
Marist College 
PH: 845-575-3347