# Time of Day Thread Module API Return Value Error Duration 1 4:53:17.016 AM 1 SHELL32.dll IsOS ( 33 ) FALSE 0.0000061 2 4:53:20.401 AM 1 SHELL32.dll IsOS ( 33 ) FALSE 0.0000070 3 4:53:20.471 AM 1 SHELL32.dll PathRemoveBlanksW ( "notepad" ) 0.0000056 4 4:53:20.471 AM 1 SHELL32.dll StrCpyNW ( 0x01dbda6c, "notepad", 2084 ) 0x01dbda6c 0.0000047 5 4:53:20.471 AM 1 SHELL32.dll PathRemoveArgsW ( "notepad" ) 0.0000056 6 4:53:20.471 AM 1 SHELL32.dll PathUnquoteSpacesW ( "notepad" ) 0.0000050 7 4:53:20.471 AM 1 SHELL32.dll PathGetDriveNumberW ( "notepad" ) -1 0.0000045 8 4:53:20.481 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 9 4:53:20.481 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 10 4:53:20.481 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 11 4:53:20.481 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000047 12 4:53:20.481 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x0001005e, 0x001b0234 ) S_FALSE 0.0000050 13 4:53:20.481 AM 1 SHELL32.dll UrlIsW ( "notepad", URLIS_URL ) FALSE 0.0000064 14 4:53:20.481 AM 1 SHELL32.dll StrChrW ( "notepad", ' ' ) NULL 0.0000045 15 4:53:20.481 AM 1 SHELL32.dll PathUnquoteSpacesW ( "notepad" ) 0.0000045 16 4:53:20.481 AM 1 SHELL32.dll UrlIsW ( "notepad", URLIS_URL ) FALSE 0.0000045 17 4:53:20.481 AM 1 SHELL32.dll StrChrW ( "notepad", '\' ) NULL 0.0000042 18 4:53:20.481 AM 1 SHELL32.dll StrChrW ( "notepad", ':' ) NULL 0.0000045 19 4:53:20.481 AM 1 SHELL32.dll SHRegGetBoolUSValueW ( "Software\Microsoft\Windows\CurrentVersion\Explorer", "MaximizeApps", FALSE, FALSE ) FALSE 0.0000967 20 4:53:20.481 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer", 0, KEY_QUERY_VALUE, 0x02761ad0 ) ERROR_SUCCESS 0.0000218 21 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000774, "MaximizeApps", NULL, 0x01dbe320, 0x01dbe324, 0x01dbe31c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 22 4:53:20.481 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer", 0, KEY_QUERY_VALUE, 0x02761ad8 ) ERROR_SUCCESS 0.0000137 23 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "MaximizeApps", NULL, 0x01dbe320, 0x01dbe324, 0x01dbe31c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 24 4:53:20.481 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000061 25 4:53:20.481 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000056 26 4:53:20.481 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000050 27 4:53:20.481 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 28 4:53:20.481 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000047 29 4:53:20.481 AM 1 SHELL32.dll IsOS ( 28 ) FALSE 0.0000056 30 4:53:20.481 AM 1 SHELL32.dll StrCpyNW ( 0x0275ad7c, "C:\Documents and Settings\Administrator", 260 ) 0x0275ad7c 0.0000045 31 4:53:20.481 AM 1 SHELL32.dll PathIsDirectoryW ( "C:\Documents and Settings\Administrator" ) TRUE 0.0000226 32 4:53:20.481 AM 1 SHELL32.dll StrCmpICW ( "C:\Documents and Settings\Administrator", ".\" ) 53 0.0000045 33 4:53:20.481 AM 1 SHELL32.dll UrlIsW ( "notepad", URLIS_URL ) FALSE 0.0000047 34 4:53:20.481 AM 1 SHELL32.dll StrCpyNW ( 0x02759d34, "notepad", 2084 ) 0x02759d34 0.0000042 35 4:53:20.481 AM 1 SHELL32.dll PathUnquoteSpacesW ( "notepad" ) 0.0000045 36 4:53:20.481 AM 1 SHELL32.dll PathIsRootW ( "notepad" ) FALSE 0.0000047 37 4:53:20.481 AM 1 SHELL32.dll StrDupW ( "notepad" ) 0x0015e760 0.0000050 38 4:53:20.481 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe5d0 ) S_OK 0.0000047 39 4:53:20.481 AM 1 SHELL32.dll PathIsUNCW ( "notepad" ) FALSE 0.0000045 40 4:53:20.481 AM 1 SHELL32.dll UrlIsW ( "notepad", URLIS_URL ) FALSE 0.0000047 41 4:53:20.481 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace", 0, KEY_READ, 0x01dbe490 ) ERROR_SUCCESS 0.0000159 42 4:53:20.481 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000774, "{11016101-E366-4D22-BC06-4ADA335C892B}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000126 43 4:53:20.481 AM 1 SHELL32.dll SHGetValueW ( 0x00000778, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 44 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 45 4:53:20.481 AM 1 SHELL32.dll GUIDFromStringW ( "{11016101-E366-4D22-BC06-4ADA335C892B}", {00140008-23ff-77e6-0000-000078d21802} ) TRUE 0.0000059 46 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000061 47 4:53:20.481 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000774, "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000112 48 4:53:20.481 AM 1 SHELL32.dll SHGetValueW ( 0x00000778, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 49 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 50 4:53:20.481 AM 1 SHELL32.dll GUIDFromStringW ( "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", IE History and Feeds Shell Data Source for Windows Search ) TRUE 0.0000056 51 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000059 52 4:53:20.481 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000774, "{450D8FBA-AD25-11D0-98A8-0800361B1103}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000106 53 4:53:20.481 AM 1 SHELL32.dll SHGetValueW ( 0x00000778, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 54 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 55 4:53:20.481 AM 1 SHELL32.dll GUIDFromStringW ( "{450D8FBA-AD25-11D0-98A8-0800361B1103}", Computer Search Results Folder ) TRUE 0.0000056 56 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000059 57 4:53:20.481 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000774, "{645FF040-5081-101B-9F08-00AA002F954E}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000112 58 4:53:20.481 AM 1 SHELL32.dll SHGetValueW ( 0x00000778, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 59 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 60 4:53:20.481 AM 1 SHELL32.dll GUIDFromStringW ( "{645FF040-5081-101B-9F08-00AA002F954E}", {450d8fba-ad25-11d0-98a8-0800361b1103} ) TRUE 0.0000053 61 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000056 62 4:53:20.481 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000774, "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", 0, KEY_READ, 0x01dbe488 ) ERROR_SUCCESS 0.0000109 63 4:53:20.481 AM 1 SHELL32.dll SHGetValueW ( 0x00000778, NULL, "SuppressionPolicy", NULL, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 64 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000778, "SuppressionPolicy", NULL, 0x01dbe318, 0x01dbe470, 0x01dbe464 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 65 4:53:20.481 AM 1 SHELL32.dll GUIDFromStringW ( "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", Recycle Bin ) TRUE 0.0000059 66 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000064 67 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000056 68 4:53:20.481 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace", 0, KEY_READ, 0x01dbe490 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000120 69 4:53:20.481 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000000c8, NULL, 0, MAXIMUM_ALLOWED, 0x01dbe4a0 ) ERROR_SUCCESS 0.0000103 70 4:53:20.481 AM 1 SHELL32.dll RegCreateKeyExW ( 0x00000774, "SessionInfo\0000000000012002", 0, NULL, REG_OPTION_VOLATILE, KEY_QUERY_VALUE, NULL, 0x01dbe548, 0x01dbe53c ) ERROR_SUCCESS 0.0000123 71 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000056 72 4:53:20.481 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000778, "Desktop\NameSpace", 0, KEY_READ, 0x01dbe494 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 73 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000059 74 4:53:20.481 AM 1 SHELL32.dll SHSkipJunction ( 0x001678f0, My Computer ) FALSE 0.0000053 75 4:53:20.481 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000268 76 4:53:20.481 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000399 77 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000307 78 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000064 79 4:53:20.481 AM 1 SHELL32.dll SHSkipJunction ( 0x001678f0, My Network Places ) FALSE 0.0000050 80 4:53:20.481 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000215 81 4:53:20.481 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000288 82 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 83 4:53:20.481 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000061 84 4:53:20.481 AM 1 SHELL32.dll SHSkipJunction ( 0x001678f0, {871c5380-42a0-1069-a2ea-08002b30309d} ) FALSE 0.0000047 85 4:53:20.481 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000215 86 4:53:20.481 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000285 87 4:53:20.481 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_SUCCESS 0.0000207 88 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000070 89 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe330 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 90 4:53:20.491 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe350, "{871C5380-42A0-1069-A2EA-08002B30309D}", 103 ) 0x01dbe350 0.0000045 91 4:53:20.491 AM 1 SHELL32.dll StrCpyNW ( 0x01dbde9c, "CLSID\", 167 ) 0x01dbde9c 0.0000042 92 4:53:20.491 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\", "{871C5380-42A0-1069-A2EA-08002B30309D}", 167 ) 0x01dbde9c 0.0000045 93 4:53:20.491 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", "\InProcServer32", 167 ) 0x01dbde9c 0.0000047 94 4:53:20.491 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbde98 ) ERROR_SUCCESS 0.0000212 95 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, NULL, NULL, NULL, 0x01dbe148, 0x01dbde90 ) ERROR_SUCCESS 0.0000305 96 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbdd38, 0x01dbe148, 0x01dbde90 ) ERROR_SUCCESS 0.0000212 97 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 98 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "LoadWithoutCOM", NULL, 0x01dbdd38, NULL, 0x01dbdd18 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 99 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 100 4:53:20.491 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x01dbe170 0.0000047 101 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 102 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbded4, NULL, 0x01dbdeb4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 103 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 104 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbded4, NULL, 0x01dbdeb4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 105 4:53:20.491 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000334, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbdc90, 0x01dbdc84, 0x01dbdc98 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 106 4:53:20.491 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000330, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbdc90, 0x01dbdc74, 0x01dbdc98 ) ERROR_SUCCESS 0.0000089 107 4:53:20.491 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbd8e8 ) ERROR_SUCCESS 0.0000168 108 4:53:20.491 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x00000778, "REGDBVersion", NULL, NULL, 0x01dbd964, 0x01dbd8e4 ) ERROR_SUCCESS 0.0000070 109 4:53:20.491 AM 1 CLBCatQ.DLL RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000056 110 4:53:20.491 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbd990 ) ERROR_SUCCESS 0.0000101 111 4:53:20.491 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x00000778, "REGDBVersion", NULL, NULL, 0x01dbda0c, 0x01dbd98c ) ERROR_SUCCESS 0.0000056 112 4:53:20.491 AM 1 CLBCatQ.DLL RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000056 113 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdb8c ) ERROR_SUCCESS 0.0000184 114 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218a4e8 ) ERROR_SUCCESS 0.0000120 115 4:53:20.491 AM 1 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 116 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x00000776, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdc58 ) ERROR_SUCCESS 0.0000201 117 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x0000077a, "InprocServer32", 0, KEY_READ, 0x01dbdbf4 ) ERROR_SUCCESS 0.0000221 118 4:53:20.491 AM 1 ole32.dll RegQueryValueExW ( 0x00000196, "InprocServer32", NULL, 0x01dbdc00, 0x02194ca0, 0x01dbdbe8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 119 4:53:20.491 AM 1 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000059 120 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x0000077a, "LocalServer32", 0, KEY_READ, 0x01dbdc14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 121 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x0000077a, "InprocServer32", 0, KEY_READ, 0x01dbdc14 ) ERROR_SUCCESS 0.0000212 122 4:53:20.491 AM 1 ole32.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x01dbdc20, 0x02194ca0, 0x01dbdc08 ) ERROR_SUCCESS 0.0000182 123 4:53:20.491 AM 1 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 124 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x0000077a, "InprocHandler32", 0, KEY_READ, 0x01dbdc14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 125 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x0000077a, "LocalServer32", 0, KEY_READ, 0x01dbdc14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 126 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x0000077a, "LocalServer", 0, KEY_READ, 0x01dbdc14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 127 4:53:20.491 AM 1 ole32.dll RegOpenKeyExW ( 0x00000776, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdbb8 ) ERROR_SUCCESS 0.0000170 128 4:53:20.491 AM 1 ole32.dll RegQueryValueExW ( 0x00000196, "AppID", NULL, 0x01dbdb8c, 0x01dbdbbc, 0x01dbdb7c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 129 4:53:20.491 AM 1 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 130 4:53:20.491 AM 1 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000053 131 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbdeec ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 132 4:53:20.491 AM 1 urlmon.dll PathIsUNCW ( "notepad" ) FALSE 0.0000045 133 4:53:20.491 AM 1 SHELL32.dll SHSkipJunction ( 0x001678f0, IE History and Feeds Shell Data Source for Windows Search ) FALSE 0.0000047 134 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000226 135 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000288 136 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 137 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 138 4:53:20.491 AM 1 SHELL32.dll SHSkipJunction ( 0x001678f0, Computer Search Results Folder ) FALSE 0.0000045 139 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{1F4DE370-D627-11D1-BA4F-00A0C91EEDBA}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000201 140 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000279 141 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 142 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 143 4:53:20.491 AM 1 SHELL32.dll SHSkipJunction ( 0x001678f0, {450d8fba-ad25-11d0-98a8-0800361b1103} ) FALSE 0.0000070 144 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000302 145 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000318 146 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000223 147 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000061 148 4:53:20.491 AM 1 SHELL32.dll SHSkipJunction ( 0x001678f0, Recycle Bin ) FALSE 0.0000050 149 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000198 150 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000282 151 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 152 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 153 4:53:20.491 AM 1 SHELL32.dll SHSkipJunction ( 0x001678f0, Search Results Folder ) FALSE 0.0000047 154 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{E17D4FC0-5564-11D1-83F2-00A0C90DC849}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe53c ) ERROR_SUCCESS 0.0000201 155 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000310 156 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, "WantsParseDisplayName", NULL, 0x01dbe3f4, NULL, 0x01dbe3d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000221 157 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 158 4:53:20.491 AM 1 SHELL32.dll UrlIsW ( "notepad", URLIS_URL ) FALSE 0.0000047 159 4:53:20.491 AM 1 SHELL32.dll PathIsUNCW ( "notepad" ) FALSE 0.0000042 160 4:53:20.491 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks", 0, KEY_READ, 0x01dbe584 ) ERROR_SUCCESS 0.0000131 161 4:53:20.491 AM 1 SHELL32.dll RegEnumValueW ( 0x00000778, 0, 0x01dbe598, 0x01dbe580, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000073 162 4:53:20.491 AM 1 SHELL32.dll GUIDFromStringW ( "{AEB6717E-7E19-11d0-97EE-00C04FD91972}", IID_NULL ) TRUE 0.0000059 163 4:53:20.491 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe398, "{AEB6717E-7E19-11D0-97EE-00C04FD91972}", 103 ) 0x01dbe398 0.0000045 164 4:53:20.491 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdee4, "CLSID\", 167 ) 0x01dbdee4 0.0000042 165 4:53:20.491 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\", "{AEB6717E-7E19-11D0-97EE-00C04FD91972}", 167 ) 0x01dbdee4 0.0000045 166 4:53:20.491 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}", "\InProcServer32", 167 ) 0x01dbdee4 0.0000045 167 4:53:20.491 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbdee0 ) ERROR_SUCCESS 0.0000218 168 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000196, NULL, NULL, NULL, 0x01dbe190, 0x01dbded8 ) ERROR_SUCCESS 0.0000288 169 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x01dbdd80, 0x01dbe190, 0x01dbded8 ) ERROR_SUCCESS 0.0000198 170 4:53:20.491 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000196, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000274 171 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000196, "LoadWithoutCOM", NULL, 0x01dbdd80, NULL, 0x01dbdd60 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 172 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000059 173 4:53:20.491 AM 1 SHELL32.dll PathFindFileNameW ( "shell32.dll" ) 0x01dbe190 0.0000045 174 4:53:20.491 AM 1 SHELL32.dll RegEnumValueW ( 0x00000778, 1, 0x01dbe598, 0x01dbe580, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 175 4:53:20.491 AM 1 SHELL32.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000056 176 4:53:20.491 AM 1 SHELL32.dll PathFindFileNameW ( "notepad" ) 0x02759d34 0.0000042 177 4:53:20.491 AM 1 SHELL32.dll PathFindFileNameW ( "notepad" ) 0x02759d34 0.0000042 178 4:53:20.491 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad" ) 0x01dbe212 0.0000047 179 4:53:20.491 AM 1 SHELL32.dll SHRegGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", NULL, SRRF_RT_REG_SZ, NULL, 0x01dbe3bc, 0x01dbe198 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000263 180 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", 0, KEY_QUERY_VALUE, 0x01dbe07c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 181 4:53:20.491 AM 1 SHELL32.dll PathUnquoteSpacesW ( "notepad" ) 0.0000045 182 4:53:20.491 AM 1 SHELL32.dll PathIsRootW ( "notepad" ) FALSE 0.0000045 183 4:53:20.491 AM 1 SHELL32.dll PathIsFileSpecW ( "notepad" ) TRUE 0.0000045 184 4:53:20.491 AM 1 SHELL32.dll PathFindExtensionW ( "notepad" ) 0x02759d42 0.0000042 185 4:53:20.491 AM 1 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\system32\notepad.exe" ) 0x02759d6a 0.0000045 186 4:53:20.491 AM 1 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\system32\notepad.exe" ) 0x02759d6a 0.0000045 187 4:53:20.491 AM 1 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\system32\notepad.exe" ) 0x02759d6a 0.0000045 188 4:53:20.491 AM 1 SHELL32.dll AssocIsDangerous ( ".exe" ) TRUE 0.0021729 189 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Policies\Associations", 0, KEY_QUERY_VALUE, 0x01dbe1f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 190 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\Associations", 0, KEY_QUERY_VALUE, 0x01dbe1f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 191 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Policies\Associations", 0, KEY_QUERY_VALUE, 0x01dbe168 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 192 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\Associations", 0, KEY_QUERY_VALUE, 0x01dbe168 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 193 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Policies\Associations", 0, KEY_QUERY_VALUE, 0x01dbe168 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 194 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\Associations", 0, KEY_QUERY_VALUE, 0x01dbe168 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 195 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Policies\Associations", 0, KEY_QUERY_VALUE, 0x01dbe168 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 196 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\Associations", 0, KEY_QUERY_VALUE, 0x01dbe168 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 197 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".exe", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000179 198 4:53:20.491 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe084, 0x01dbe078 ) ERROR_SUCCESS 0.0000179 199 4:53:20.491 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 200 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".ade", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 201 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".adp", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000170 202 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".app", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000140 203 4:53:20.491 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".asp", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0012429 204 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000327 205 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000131 206 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".bas", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000279 207 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".bat", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000986 208 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000282 209 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000089 210 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".cer", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000257 211 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000207 212 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 213 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".chm", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000165 214 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000165 215 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 216 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".cmd", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000478 217 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000170 218 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000061 219 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".com", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000168 220 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000165 221 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 222 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".cpl", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000159 223 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000159 224 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 225 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".crt", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_SUCCESS 0.0000162 226 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe014, 0x01dbe28c, 0x01dbe074 ) ERROR_SUCCESS 0.0000159 227 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000073 228 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".csh", 0, KEY_QUERY_VALUE, 0x01dbe02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 229 4:53:20.501 AM 1 urlmon.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\", 0, KEY_READ, 0x02190a18 ) ERROR_SUCCESS 0.0000140 230 4:53:20.501 AM 1 urlmon.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\", 0, KEY_READ, 0x02192c98 ) ERROR_SUCCESS 0.0000117 231 4:53:20.501 AM 1 urlmon.dll StrCmpNW ( "C:\WINDOWS\system32\notepad.exe", "..", 2 ) 1 0.0000047 232 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file", "http", 4 ) -2 0.0000042 233 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file", "file", 4 ) 0 0.0000042 234 4:53:20.501 AM 1 iertutil.dll RegOpenKeyExW ( 0x00000428, "Microsoft\Internet Explorer\Security", 0, KEY_READ, 0x01dbdf68 ) ERROR_SUCCESS 0.0000123 235 4:53:20.501 AM 1 iertutil.dll RegQueryValueExW ( 0x00000754, "DisableSecuritySettingsCheck", NULL, 0x01dbdf64, 0x01dbe1d8, 0x01dbdf6c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 236 4:53:20.501 AM 1 iertutil.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000059 237 4:53:20.501 AM 1 iertutil.dll RegOpenKeyExW ( 0x0000042c, "Microsoft\Internet Explorer\Security", 0, KEY_READ, 0x01dbdf68 ) ERROR_SUCCESS 0.0000120 238 4:53:20.501 AM 1 iertutil.dll RegQueryValueExW ( 0x00000754, "DisableSecuritySettingsCheck", NULL, 0x01dbdf64, 0x01dbe1d8, 0x01dbdf6c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 239 4:53:20.501 AM 1 iertutil.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000056 240 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/WINDOWS/system32/notepad.exe", "http", 4 ) -2 0.0000042 241 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/WINDOWS/system32/notepad.exe", "file", 4 ) 0 0.0000042 242 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/WINDOWS/system32/notepad.exe", "http", 4 ) -2 0.0000045 243 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/WINDOWS/system32/notepad.exe", "file", 4 ) 0 0.0000039 244 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/WINDOWS/system32/notepad.exe", "http", 4 ) -2 0.0000042 245 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file:///C:/WINDOWS/system32/notepad.exe", "file", 4 ) 0 0.0000042 246 4:53:20.501 AM 1 urlmon.dll PathCreateFromUrlW ( "file:///C:/WINDOWS/system32/notepad.exe", "", 0x01dbdafc, 131072 ) S_OK 0.0000134 247 4:53:20.501 AM 1 urlmon.dll PathIsUNCW ( "C:\WINDOWS\system32\notepad.exe" ) FALSE 0.0000042 248 4:53:20.501 AM 1 urlmon.dll PathCreateFromUrlW ( "file:///C:/WINDOWS/system32/notepad.exe", "C:\WINDOWS\system32\notepad.exe", 0x01dbdafc, 0 ) S_OK 0.0000101 249 4:53:20.501 AM 1 urlmon.dll StrCmpNW ( "C:\WINDOWS\system32\notepad.exe", "..", 2 ) 1 0.0000045 250 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file", "http", 4 ) -2 0.0000039 251 4:53:20.501 AM 1 urlmon.dll StrCmpNICW ( "file", "file", 4 ) 0 0.0000042 252 4:53:20.501 AM 1 urlmon.dll UrlIsW ( "file:///C:/WINDOWS/system32/notepad.exe", URLIS_FILEURL ) TRUE 0.0000045 253 4:53:20.501 AM 1 urlmon.dll PathCreateFromUrlW ( "file:///C:/WINDOWS/system32/notepad.exe", "", 0x01dbdc68, 0 ) S_OK 0.0000098 254 4:53:20.501 AM 1 urlmon.dll PathIsRootW ( "C:\WINDOWS\system32\notepad.exe" ) FALSE 0.0000045 255 4:53:20.501 AM 1 urlmon.dll PathIsUNCW ( "C:\WINDOWS\system32\notepad.exe" ) FALSE 0.0000045 256 4:53:20.501 AM 1 urlmon.dll PathRemoveFileSpecW ( "C:\WINDOWS\system32\notepad.exe" ) TRUE 0.0000045 257 4:53:20.501 AM 1 urlmon.dll PathIsUNCW ( "C:\WINDOWS\system32\notepad.exe" ) FALSE 0.0000042 258 4:53:20.501 AM 1 urlmon.dll PathIsUNCServerW ( "C:\WINDOWS\system32\notepad.exe:Zone.Identifier" ) FALSE 0.0000045 259 4:53:20.501 AM 1 urlmon.dll PathIsUNCServerShareW ( "C:\WINDOWS\system32\notepad.exe:Zone.Identifier" ) FALSE 0.0000039 260 4:53:20.501 AM 1 urlmon.dll PathFindExtensionW ( "C:\WINDOWS\system32\notepad.exe" ) 0x01dbdd96 0.0000064 261 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".HTM" ) -3 0.0000056 262 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".HTML" ) -3 0.0000056 263 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".MHT" ) -8 0.0000053 264 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".HTC" ) -3 0.0000056 265 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".HTT" ) -3 0.0000056 266 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".XML" ) -19 0.0000053 267 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".XSL" ) -19 0.0000053 268 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".XSLT" ) -19 0.0000053 269 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".ENT" ) 10 0.0000056 270 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".DTD" ) 1 0.0000053 271 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".XDR" ) -19 0.0000053 272 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".XSD" ) -19 0.0000053 273 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".JS" ) -5 0.0000053 274 4:53:20.501 AM 1 urlmon.dll StrCmpICW ( ".exe", ".VBS" ) -17 0.0000053 275 4:53:20.501 AM 1 urlmon.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000081 276 4:53:20.501 AM 1 urlmon.dll RegCloseKey ( 0x00000778 ) ERROR_SUCCESS 0.0000073 277 4:53:20.501 AM 1 SHELL32.dll StrDupW ( "C:\WINDOWS\system32\notepad.exe" ) 0x021bf2e8 0.0000067 278 4:53:20.501 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe578 ) S_OK 0.0000059 279 4:53:20.501 AM 1 SHELL32.dll StrDupW ( "::{20D04FE0-3AEA-1069-A2D8-08002B30309D}" ) 0x0217fed8 0.0000070 280 4:53:20.501 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe420 ) S_OK 0.0000056 281 4:53:20.501 AM 1 SHELL32.dll GUIDFromStringW ( "{20D04FE0-3AEA-1069-A2D8-08002B30309D}", IID_NULL ) TRUE 0.0000075 282 4:53:20.501 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe460 ) S_OK 0.0000056 283 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{20D04FE0-3AEA-1069-A2D8-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe230 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000223 284 4:53:20.501 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbe4d0 ) S_OK 0.0000061 285 4:53:20.501 AM 1 SHELL32.dll QISearch ( 0x000c12f0, 0x7c8d6f10, IPersistFolder, 0x01dbe3b8 ) S_OK 0.0000059 286 4:53:20.501 AM 1 SHELL32.dll QISearch ( 0x000c12f0, 0x7c8d6f10, {c7264bf0-edb6-11d1-8546-006008059368}, 0x01dbe3b4 ) S_OK 0.0000059 287 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_CLASSES_ROOT, "CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbe11c ) ERROR_SUCCESS 0.0000296 288 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe0bc, 0x01dbe120, 0x01dbe118 ) ERROR_SUCCESS 0.0000282 289 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000078 290 4:53:20.501 AM 1 SHELL32.dll PathBuildRootA ( 0x01dbe3cf, 2 ) 0x01dbe3cf 0.0000056 291 4:53:20.501 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions", 0, KEY_ENUMERATE_SUB_KEYS, 0x01dbe304 ) ERROR_SUCCESS 0.0000265 292 4:53:20.501 AM 1 SHELL32.dll SHGetValueW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", "DriveMask", NULL, 0x01dbe0cc, 0x01dbe0c8 ) ERROR_SUCCESS 0.0000863 293 4:53:20.501 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", 0, KEY_QUERY_VALUE, 0x01dbdf88 ) ERROR_SUCCESS 0.0000285 294 4:53:20.501 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000196, "DriveMask", NULL, 0x01dbdf70, 0x01dbe0cc, 0x01dbe0c8 ) ERROR_SUCCESS 0.0000271 295 4:53:20.501 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000078 296 4:53:20.501 AM 1 SHELL32.dll PathBuildRootW ( 0x01dbe2d8, 2 ) 0x01dbe2d8 0.0000056 297 4:53:20.501 AM 1 SHELL32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000075 298 4:53:20.501 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbdf08, 260 ) 4 0.0000059 299 4:53:20.501 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fb10 0.0000061 300 4:53:20.501 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbe3c8 ) S_OK 0.0000056 301 4:53:20.501 AM 1 SHELL32.dll StrChrW ( "WINDOWS\system32\notepad.exe", '\' ) 0x021bf2fc 0.0000059 302 4:53:20.501 AM 1 SHELL32.dll PathAppendW ( "C:\", "WINDOWS" ) TRUE 0.0000078 303 4:53:20.501 AM 1 SHELL32.dll StrCpyW ( "", "WINDOWS" ) 0x021bf432 0.0000056 304 4:53:20.501 AM 1 SHELL32.dll PathFindExtensionW ( "WINDOWS" ) 0x0017c822 0.0000056 305 4:53:20.501 AM 1 SHELL32.dll PathFindExtensionW ( "WINDOWS" ) 0x021bf440 0.0000053 306 4:53:20.501 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbe394 ) S_OK 0.0009395 307 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IPersistFolder3, 0x01dbdc78 ) S_OK 0.0000061 308 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdc92, "WINDOWS", 257 ) 0x01dbdc92 0.0000056 309 4:53:20.511 AM 1 SHELL32.dll StrDupW ( "C:\WINDOWS" ) 0x0218d138 0.0000064 310 4:53:20.511 AM 1 SHELL32.dll StrChrW ( "system32\notepad.exe", '\' ) 0x021bf30e 0.0000056 311 4:53:20.511 AM 1 SHELL32.dll PathAppendW ( "C:\WINDOWS", "system32" ) TRUE 0.0000084 312 4:53:20.511 AM 1 SHELL32.dll StrCpyW ( "", "system32" ) 0x00170f2c 0.0000056 313 4:53:20.511 AM 1 SHELL32.dll PathFindExtensionW ( "system32" ) 0x0017c824 0.0000053 314 4:53:20.511 AM 1 SHELL32.dll PathFindExtensionW ( "system32" ) 0x00170f3c 0.0000056 315 4:53:20.511 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000056 316 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x01dbe324 ) S_OK 0.0000145 317 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x01dbdc18 ) S_OK 0.0000084 318 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdc42, "system32", 249 ) 0x01dbdc42 0.0000064 319 4:53:20.511 AM 1 SHELL32.dll StrDupW ( "C:\WINDOWS\system32" ) 0x0015dea0 0.0000070 320 4:53:20.511 AM 1 SHELL32.dll StrChrW ( "notepad.exe", '\' ) NULL 0.0000056 321 4:53:20.511 AM 1 SHELL32.dll SHUnicodeToUnicode ( "notepad.exe", 0x01dbe294, 12 ) 12 0.0000056 322 4:53:20.511 AM 1 SHELL32.dll PathAppendW ( "C:\WINDOWS\system32", "notepad.exe" ) TRUE 0.0000087 323 4:53:20.511 AM 1 SHELL32.dll StrCpyW ( "", "notepad.exe" ) 0x0215df16 0.0000059 324 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe550 ) S_OK 0.0000059 325 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbe518 ) S_OK 0.0000059 326 4:53:20.511 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbe024, 260 ) 4 0.0000064 327 4:53:20.511 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fb10 0.0000061 328 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbe4c8 ) S_OK 0.0000056 329 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe000, "system32", 260 ) 0x01dbe000 0.0000056 330 4:53:20.511 AM 1 SHELL32.dll PathFindExtensionW ( "system32" ) 0x01dbe010 0.0000056 331 4:53:20.511 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000056 332 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbe5bc ) S_OK 0.0000056 333 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IPersistFolder3, 0x01dbdddc ) S_OK 0.0000059 334 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdb94, "WINDOWS", 260 ) 0x01dbdb94 0.0000059 335 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbddf6, "WINDOWS", 257 ) 0x01dbddf6 0.0000056 336 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdb94, "system32", 260 ) 0x01dbdb94 0.0000210 337 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbde06, "system32", 249 ) 0x01dbde06 0.0000053 338 4:53:20.511 AM 1 SHELL32.dll StrDupW ( "C:\WINDOWS\system32" ) 0x0015e140 0.0000064 339 4:53:20.511 AM 1 SHELL32.dll AssocCreate ( Query file associations, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x01dbe2a8 ) S_OK 0.0000193 340 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x00170500, 0x7c92b550, {ee9165bf-a4d9-474b-8236-6735cb7e28b6}, 0x01dbe2a8 ) S_OK 0.0000059 341 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe304, "notepad.exe", 260 ) 0x01dbe304 0.0000056 342 4:53:20.511 AM 1 SHELL32.dll PathFindExtensionW ( "notepad.exe" ) 0x01dbe312 0.0000056 343 4:53:20.511 AM 1 SHELL32.dll SHStrDupW ( ".exe", 0x00170514 ) S_OK 0.0000064 344 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".exe", 0, MAXIMUM_ALLOWED, 0x01dbe0f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 345 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000001c8, ".exe", 0, MAXIMUM_ALLOWED, 0x01dbe0f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000101 346 4:53:20.511 AM 1 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x01dbe204 ) S_OK 0.0000078 347 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, ".exe", 0, MAXIMUM_ALLOWED, 0x0015e82c ) ERROR_SUCCESS 0.0000296 348 4:53:20.511 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x01dbe0a4, 0x01dbe0ac, 0x01dbe0a0 ) ERROR_SUCCESS 0.0000257 349 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "exefile", 0, MAXIMUM_ALLOWED, 0x01dbe134 ) ERROR_SUCCESS 0.0000246 350 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "CurVer", 0, KEY_QUERY_VALUE, 0x01dbe0e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 351 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, NULL, 0, MAXIMUM_ALLOWED, 0x0015e7fc ) ERROR_SUCCESS 0.0000265 352 4:53:20.511 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000084 353 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe03c, "notepad.exe", 260 ) 0x01dbe03c 0.0000053 354 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x02190a54, "notepad.exe", 240 ) 0x02190a54 0.0000050 355 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x00170500, 0x7c92b550, IQueryAssociations, 0x0275fd60 ) S_OK 0.0000045 356 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000756, "shell", 0, MAXIMUM_ALLOWED, 0x0015e844 ) ERROR_SUCCESS 0.0000296 357 4:53:20.511 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x01dbe3a8, 0x01dbe3b0, 0x01dbe3a4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 358 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "open", 0, MAXIMUM_ALLOWED, 0x0015e664 ) ERROR_SUCCESS 0.0000232 359 4:53:20.511 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000061 360 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000057a, "command", 0, KEY_QUERY_VALUE, 0x01dbe208 ) ERROR_SUCCESS 0.0000232 361 4:53:20.511 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x01dbe258, 0x01dbe260, 0x01dbe254 ) ERROR_SUCCESS 0.0000190 362 4:53:20.511 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000061 363 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000057a, "command", 0, KEY_QUERY_VALUE, 0x01dbe270 ) ERROR_SUCCESS 0.0000265 364 4:53:20.511 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000196, "command", NULL, 0x01dbe26c, 0x01dbe27c, 0x01dbe274 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000218 365 4:53:20.511 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000061 366 4:53:20.511 AM 1 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\system32\notepad.exe" ) 0x02759d6a 0.0000045 367 4:53:20.511 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\notepad.exe" ) 0x02759d5c 0.0000045 368 4:53:20.511 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe" ) 0x0275f99a 0.0000045 369 4:53:20.511 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", "RunAsCommand", NULL, 0x0275bfcc, 0x01dbe5e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 370 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", 0, KEY_QUERY_VALUE, 0x01dbe4a8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000126 371 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000057a, "command", 0, KEY_QUERY_VALUE, 0x01dbe208 ) ERROR_SUCCESS 0.0000212 372 4:53:20.511 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x01dbe258, 0x01dbe260, 0x01dbe254 ) ERROR_SUCCESS 0.0000182 373 4:53:20.511 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 374 4:53:20.511 AM 1 SHELL32.dll StrCpyNW ( 0x0275e8dc, ""%1" %*", 2084 ) 0x0275e8dc 0.0000042 375 4:53:20.511 AM 1 SHELL32.dll SHUnicodeToUnicode ( ""%1" %*", 0x0275bfcc, 2084 ) 8 0.0000050 376 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000057a, "ddeexec", 0, KEY_QUERY_VALUE, 0x01dbe1fc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000223 377 4:53:20.511 AM 1 SHELL32.dll StrCmpNW ( ""%1" %*", "%1", 2 ) -1 0.0000047 378 4:53:20.511 AM 1 SHELL32.dll StrCmpNW ( ""%1" %*", ""%1"", 4 ) 0 0.0000045 379 4:53:20.511 AM 1 SHELL32.dll AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\WINDOWS\system32\notepad.exe", NULL, 0x0275d62c, 0x01dbe3c0 ) S_OK 0.0008015 380 4:53:20.511 AM 1 SHELL32.dll QISearch ( 0x00170f00, 0x7c92b550, IQueryAssociations, 0x01dbe298 ) S_OK 0.0000045 381 4:53:20.511 AM 1 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x01dbe25c ) S_OK 0.0000053 382 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\notepad.exe", 0, MAXIMUM_ALLOWED, 0x0015e844 ) ERROR_SUCCESS 0.0000215 383 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "shell", 0, MAXIMUM_ALLOWED, 0x0015e6c4 ) ERROR_SUCCESS 0.0000235 384 4:53:20.511 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000004de, NULL, NULL, 0x01dbe048, 0x01dbe050, 0x01dbe044 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 385 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000004de, "open", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_SUCCESS 0.0000215 386 4:53:20.511 AM 1 SHLWAPI.dll RegCloseKey ( 0x000004de ) ERROR_SUCCESS 0.0000073 387 4:53:20.511 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000786, "FriendlyAppName", NULL, 0x01dbdeb0, 0x01dbdeb8, 0x01dbdeac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 388 4:53:20.511 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000786 ) ERROR_SUCCESS 0.0000059 389 4:53:20.511 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x01dbdf44 ) ERROR_SUCCESS 0.0000101 390 4:53:20.511 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000784, "C:\WINDOWS\system32\notepad.exe", NULL, 0x01dbdf34, 0x01dbdfcc, 0x01dbdfbc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000240 391 4:53:20.511 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000784 ) ERROR_SUCCESS 0.0000059 392 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation", 0, KEY_QUERY_VALUE, 0x01dbdc6c ) ERROR_SUCCESS 0.0000151 393 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000784, "CutList", NULL, 0x01dbdc54, NULL, 0x01dbdcb0 ) ERROR_SUCCESS 0.0000056 394 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000784 ) ERROR_SUCCESS 0.0000053 395 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation", 0, KEY_QUERY_VALUE, 0x01dbdc6c ) ERROR_SUCCESS 0.0000115 396 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000784, "CutList", NULL, 0x01dbdc54, 0x00170d20, 0x01dbdcb0 ) ERROR_SUCCESS 0.0000075 397 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000784 ) ERROR_SUCCESS 0.0000059 398 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x01dbdf44 ) ERROR_SUCCESS 0.0000101 399 4:53:20.521 AM 1 SHLWAPI.dll RegSetValueExW ( 0x00000784, "C:\WINDOWS\system32\notepad.exe", 0, REG_SZ, 0x01dbdfcc, 16 ) ERROR_SUCCESS 0.0001992 400 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000784 ) ERROR_SUCCESS 0.0000059 401 4:53:20.521 AM 1 SHELL32.dll StrCpyNW ( 0x0275d62c, "Notepad", 260 ) 0x0275d62c 0.0000045 402 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000059 403 4:53:20.521 AM 1 SHELL32.dll StrCpyNW ( 0x0275af86, "C:\WINDOWS\system32\notepad.exe", 32 ) 0x0275af86 0.0000045 404 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", 0, KEY_QUERY_VALUE, 0x01dbe118 ) ERROR_SUCCESS 0.0000291 405 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "InheritConsoleHandles", NULL, 0x01dbe100, 0x01dbe160, 0x01dbe15c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 406 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000059 407 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", 0, KEY_QUERY_VALUE, 0x01dbe118 ) ERROR_SUCCESS 0.0000123 408 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "InheritConsoleHandles", NULL, 0x01dbe100, 0x01dbe160, 0x01dbe15c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 409 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 410 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", 0, KEY_QUERY_VALUE, 0x01dbe344 ) ERROR_SUCCESS 0.0000115 411 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "RestrictRun", NULL, 0x01dbe32c, 0x01dbe38c, 0x01dbe388 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 412 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 413 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", 0, KEY_QUERY_VALUE, 0x01dbe344 ) ERROR_SUCCESS 0.0000109 414 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "RestrictRun", NULL, 0x01dbe32c, 0x01dbe38c, 0x01dbe388 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 415 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000070 416 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", 0, KEY_QUERY_VALUE, 0x01dbe344 ) ERROR_SUCCESS 0.0000148 417 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "DisallowRun", NULL, 0x01dbe32c, 0x01dbe38c, 0x01dbe388 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 418 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 419 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", 0, KEY_QUERY_VALUE, 0x01dbe344 ) ERROR_SUCCESS 0.0000109 420 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "DisallowRun", NULL, 0x01dbe32c, 0x01dbe38c, 0x01dbe388 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 421 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 422 4:53:20.521 AM 1 SHELL32.dll PathIsUNCW ( "C:\WINDOWS\system32\notepad.exe" ) FALSE 0.0000042 423 4:53:20.521 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\notepad.exe" ) 0x0275d244 0.0000045 424 4:53:20.521 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe" ) 0x0275e952 0.0000047 425 4:53:20.521 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", "AppendPath", NULL, 0x01dbe5cc, 0x01dbe5d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 426 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", 0, KEY_QUERY_VALUE, 0x01dbe48c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 427 4:53:20.521 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", "PATH", NULL, 0x0275e8dc, 0x01dbe5d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 428 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", 0, KEY_QUERY_VALUE, 0x01dbe48c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000115 429 4:53:20.521 AM 1 SHELL32.dll IsOS ( 24 ) FALSE 0.0000045 430 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", 0, KEY_QUERY_VALUE, 0x01dbd8a0 ) ERROR_SUCCESS 0.0000115 431 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "NoRunasInstallPrompt", NULL, 0x01dbd888, 0x01dbd8e8, 0x01dbd8e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 432 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 433 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", 0, KEY_QUERY_VALUE, 0x01dbd8a0 ) ERROR_SUCCESS 0.0000112 434 4:53:20.521 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "NoRunasInstallPrompt", NULL, 0x01dbd888, 0x01dbd8e8, 0x01dbd8e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 435 4:53:20.521 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 436 4:53:20.521 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\notepad.exe" ) 0x0275d244 0.0000045 437 4:53:20.521 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe" ) 0x01dbd91e 0.0000045 438 4:53:20.521 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", "RunAsOnNonAdminInstall", NULL, 0x01dbd8a4, 0x01dbd8a0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000455 439 4:53:20.521 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe", 0, KEY_QUERY_VALUE, 0x01dbd768 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000352 440 4:53:20.521 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\notepad.exe" ) 0x0275d244 0.0000045 441 4:53:20.521 AM 1 SHELL32.dll PathMatchSpecW ( "n", "*" ) FALSE 0 = The operation completed successfully. 0.0000059 442 4:53:20.551 AM 2 Explorer.EXE PathFindFileNameW ( "" ) 0x00f2f8fc 0.0000067 443 4:53:20.551 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160a60 ) S_OK 0.0000059 444 4:53:20.551 AM 2 comctl32.dll QISearch ( 0x02160a30, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec7f4 ) S_OK 0.0000056 445 4:53:20.551 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f624 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000796 446 4:53:20.551 AM 2 SHELL32.dll QISearch ( 0x00170f00, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000056 447 4:53:20.551 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000075 448 4:53:20.551 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000352 449 4:53:20.551 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000087 450 4:53:20.551 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "", 260 ) 0x00f2f3c4 0.0000042 451 4:53:20.551 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000039 452 4:53:20.551 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f38c, "", 260 ) 0x00f2f38c 0.0000039 453 4:53:20.551 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 454 4:53:20.551 AM 2 SHELL32.dll PathIsUNCW ( "" ) FALSE 0.0000045 455 4:53:20.551 AM 2 SHELL32.dll PathGetDriveNumberW ( "" ) -1 0.0000042 456 4:53:20.551 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 457 4:53:20.551 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f384, "", 260 ) 0x00f2f384 0.0000042 458 4:53:20.551 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 459 4:53:20.551 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f810 ) S_OK 0.0000042 460 4:53:20.551 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000232 461 4:53:20.551 AM 2 Explorer.EXE RegSetValueExW ( 0x00000788, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000078 462 4:53:20.551 AM 2 Explorer.EXE RegCloseKey ( 0x00000788 ) ERROR_SUCCESS 0.0000061 463 4:53:20.551 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f048 ) S_OK 0.0000045 464 4:53:20.551 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000045 465 4:53:20.551 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000059 466 4:53:20.551 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f0b0 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000718 467 4:53:20.551 AM 2 SHELL32.dll QISearch ( 0x00170d20, 0x7c92b550, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000061 468 4:53:20.551 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2ef1c ) S_OK 0.0000084 469 4:53:20.551 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000251 470 4:53:20.651 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000056 471 4:53:20.651 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 472 4:53:20.651 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000654 473 4:53:20.651 AM 2 SHELL32.dll QISearch ( 0x00170f00, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000050 474 4:53:20.651 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000061 475 4:53:20.651 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 476 4:53:21.082 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000061 477 4:53:21.082 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 478 4:53:21.082 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000670 479 4:53:21.082 AM 2 SHELL32.dll QISearch ( 0x00170f00, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 480 4:53:21.082 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000059 481 4:53:21.082 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000296 482 4:53:21.713 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000271 483 4:53:21.713 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 484 4:53:21.713 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000724 485 4:53:21.713 AM 2 SHELL32.dll QISearch ( 0x00170f00, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000045 486 4:53:21.713 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000084 487 4:53:21.713 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000307 488 4:53:22.144 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000061 489 4:53:22.144 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 490 4:53:22.144 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000670 491 4:53:22.144 AM 2 SHELL32.dll QISearch ( 0x00170f00, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 492 4:53:22.144 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000061 493 4:53:22.144 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000296 494 4:53:22.444 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000059 495 4:53:22.444 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 496 4:53:22.444 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000654 497 4:53:22.444 AM 2 SHELL32.dll QISearch ( 0x00170f00, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000045 498 4:53:22.444 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000059 499 4:53:22.444 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000291 500 4:53:22.524 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000064 501 4:53:22.524 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2faec, 0x00f2fae4 ) ERROR_SUCCESS 0.0000170 502 4:53:22.524 AM 2 Explorer.EXE RegSetValueExW ( 0x00000788, "ProgramCount", 0, REG_DWORD, 0x00f2fae8, 4 ) ERROR_SUCCESS 0.0000081 503 4:53:22.524 AM 2 Explorer.EXE RegCloseKey ( 0x00000788 ) ERROR_SUCCESS 0.0000059 504 4:53:22.524 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000047 505 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000064 506 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000053 507 4:53:22.534 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU", NULL, 0x01dbb96c, 0x01dbca24, 0x01dbc9d8 ) ERROR_SUCCESS 0.0000243 508 4:53:22.534 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU", NULL, 0x01dbb96c, 0x01dbca24, 0x01dbc9d8 ) ERROR_SUCCESS 0.0000131 509 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000053 510 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000053 511 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000050 512 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLSESSION" ) 1 0.0000053 513 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH", "UEME_CTLCUACount:ctor" ) 1 0.0000050 514 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000056 515 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000050 516 4:53:22.534 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbb96c, 0x01dbca24, 0x01dbc9d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 517 4:53:22.534 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbb96c, 0x01dbca24, 0x01dbc9d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 518 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000053 519 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 520 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 521 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000050 522 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 523 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000053 524 4:53:22.534 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000053 525 4:53:22.534 AM 1 SHELL32.dll PathFindExtensionW ( "C:\WINDOWS\system32\notepad.exe" ) 0x02759d6a 0.0000056 526 4:53:22.534 AM 1 SHELL32.dll StrCmpICW ( ".exe", ".exe" ) 0 0.0000053 527 4:53:22.534 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000061 528 4:53:22.534 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000053 529 4:53:22.534 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000053 530 4:53:22.534 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000057a ) ERROR_SUCCESS 0.0000101 531 4:53:22.534 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000073 532 4:53:22.534 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000073 533 4:53:22.534 AM 1 SHELL32.dll StrCatBuffW ( "notepad", "\1", 262 ) 0x01dbece4 0.0000061 534 4:53:22.534 AM 1 comctl32.dll RegSetValueExW ( 0x000003d4, "a", 0, REG_SZ, 0x01dbece4, 20 ) ERROR_SUCCESS 0.0000880 535 4:53:22.534 AM 1 comctl32.dll RegSetValueExW ( 0x000003d4, "MRUList", 0, REG_SZ, 0x0215e560, 4 ) ERROR_SUCCESS 0.0000777 536 4:53:22.534 AM 1 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000078 537 4:53:22.534 AM 1 BROWSEUI.dll RegCloseKey ( 0x00000764 ) ERROR_SUCCESS 0.0000073 538 4:53:23.706 AM 2 Explorer.EXE PathFindFileNameW ( "C:\WINDOWS\system32\notepad.exe" ) 0x00f2f924 0.0000053 539 4:53:23.706 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160ac8 ) S_OK 0.0000047 540 4:53:23.706 AM 2 comctl32.dll QISearch ( 0x02160a98, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec7f4 ) S_OK 0.0000042 541 4:53:23.706 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\WINDOWS\system32\notepad.exe", NULL, 0x00f2f624 ) S_OK 0.0001076 542 4:53:23.706 AM 2 SHELL32.dll QISearch ( 0x00170f50, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000045 543 4:53:23.706 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000064 544 4:53:23.706 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\notepad.exe", 0, MAXIMUM_ALLOWED, 0x000c5b4c ) ERROR_SUCCESS 0.0000277 545 4:53:23.706 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000766, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f498 ) ERROR_SUCCESS 0.0000249 546 4:53:23.706 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000766 ) ERROR_SUCCESS 0.0000064 547 4:53:23.706 AM 2 Explorer.EXE SHGetValueW ( 0x00000286, NULL, "TaskbarGroupIcon", NULL, 0x00f2f628, 0x00f2f620 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000268 548 4:53:23.706 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000286, "TaskbarGroupIcon", NULL, 0x00f2f4c8, 0x00f2f628, 0x00f2f620 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 549 4:53:23.706 AM 2 Explorer.EXE RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000056 550 4:53:23.706 AM 2 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\notepad.exe" ) 0x021bf310 0.0000042 551 4:53:23.706 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "C:\WINDOWS\system32\notepad.exe", 260 ) 0x00f2f3c4 0.0000045 552 4:53:23.706 AM 2 Explorer.EXE AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\WINDOWS\system32\notepad.exe", NULL, 0x00f2f7e4, 0x00f2f598 ) S_OK 0.0003749 553 4:53:23.706 AM 2 SHELL32.dll QISearch ( 0x00170f50, 0x7c92b550, IQueryAssociations, 0x00f2f470 ) S_OK 0.0000042 554 4:53:23.706 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f434 ) S_OK 0.0000053 555 4:53:23.706 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\notepad.exe", 0, MAXIMUM_ALLOWED, 0x000c5b4c ) ERROR_SUCCESS 0.0000246 556 4:53:23.706 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000286, "shell", 0, MAXIMUM_ALLOWED, 0x000c5cb4 ) ERROR_SUCCESS 0.0000237 557 4:53:23.706 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000766, NULL, NULL, 0x00f2f220, 0x00f2f228, 0x00f2f21c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 558 4:53:23.706 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000766, "open", 0, MAXIMUM_ALLOWED, 0x000c5ccc ) ERROR_SUCCESS 0.0000223 559 4:53:23.706 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000766 ) ERROR_SUCCESS 0.0000059 560 4:53:23.706 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000074e, "FriendlyAppName", NULL, 0x00f2f088, 0x00f2f090, 0x00f2f084 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 561 4:53:23.706 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000074e ) ERROR_SUCCESS 0.0000059 562 4:53:23.706 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f11c ) ERROR_SUCCESS 0.0000103 563 4:53:23.706 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000074c, "C:\WINDOWS\system32\notepad.exe", NULL, 0x00f2f10c, 0x00f2f1a4, 0x00f2f194 ) ERROR_SUCCESS 0.0001383 564 4:53:23.706 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000064 565 4:53:23.706 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f7e4, "Notepad", 80 ) 0x00f2f7e4 0.0000045 566 4:53:23.706 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000059 567 4:53:23.706 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x021608c0 ) S_OK 0.0000045 568 4:53:23.706 AM 2 comctl32.dll QISearch ( 0x02160890, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000ec824 ) S_OK 0.0000042 569 4:53:23.706 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f80c ) S_OK 0.0000045 570 4:53:23.716 AM 2 Explorer.EXE AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\WINDOWS\system32\notepad.exe", NULL, 0x00f2f606, 0x00f2f3c8 ) S_OK 0.0002838 571 4:53:23.716 AM 2 SHELL32.dll QISearch ( 0x00170f50, 0x7c92b550, IQueryAssociations, 0x00f2f2a0 ) S_OK 0.0000045 572 4:53:23.716 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f264 ) S_OK 0.0000061 573 4:53:23.716 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\notepad.exe", 0, MAXIMUM_ALLOWED, 0x000c5a8c ) ERROR_SUCCESS 0.0000330 574 4:53:23.716 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000074e, "shell", 0, MAXIMUM_ALLOWED, 0x000c5a5c ) ERROR_SUCCESS 0.0000279 575 4:53:23.716 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000286, NULL, NULL, 0x00f2f050, 0x00f2f058, 0x00f2f04c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 576 4:53:23.716 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000286, "open", 0, MAXIMUM_ALLOWED, 0x000c5cfc ) ERROR_SUCCESS 0.0000226 577 4:53:23.716 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000067 578 4:53:23.716 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000766, "FriendlyAppName", NULL, 0x00f2eeb8, 0x00f2eec0, 0x00f2eeb4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000215 579 4:53:23.716 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000766 ) ERROR_SUCCESS 0.0000059 580 4:53:23.716 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2ef4c ) ERROR_SUCCESS 0.0000109 581 4:53:23.716 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000764, "C:\WINDOWS\system32\notepad.exe", NULL, 0x00f2ef3c, 0x00f2efd4, 0x00f2efc4 ) ERROR_SUCCESS 0.0000240 582 4:53:23.716 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000764 ) ERROR_SUCCESS 0.0000056 583 4:53:23.716 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f606, "Notepad", 257 ) 0x00f2f606 0.0000042 584 4:53:23.716 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000074e ) ERROR_SUCCESS 0.0000056 585 4:53:23.716 AM 2 Explorer.EXE StrCmpW ( " - Notepad", " - Notepad" ) 0 0.0000047 586 4:53:23.716 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000126 587 4:53:23.716 AM 2 Explorer.EXE RegSetValueExW ( 0x0000074c, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000268 588 4:53:23.716 AM 2 Explorer.EXE RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000059 589 4:53:23.716 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000047 590 4:53:23.716 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000045 591 4:53:27.541 AM 2 SHELL32.dll SHGetValueW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", "FavoritesChanges", NULL, 0x00f2fdbc, 0x00f2fd94 ) ERROR_SUCCESS 0.0000810 592 4:53:27.541 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", 0, KEY_QUERY_VALUE, 0x00f2fc5c ) ERROR_SUCCESS 0.0000265 593 4:53:27.541 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000074c, "FavoritesChanges", NULL, 0x00f2fc44, 0x00f2fdbc, 0x00f2fd94 ) ERROR_SUCCESS 0.0000084 594 4:53:27.541 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000067 595 4:53:27.541 AM 2 Explorer.EXE SHGetValueW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Start_MinMFU", NULL, 0x00f2fdcc, 0x00f2fdd0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000441 596 4:53:27.541 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x00f2fc90 ) ERROR_SUCCESS 0.0000134 597 4:53:27.541 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000074c, "Start_MinMFU", NULL, 0x00f2fc78, 0x00f2fdcc, 0x00f2fdd0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 598 4:53:27.541 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000053 599 4:53:27.541 AM 1 SHELL32.dll SHGetValueW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", "FavoritesChanges", NULL, 0x01dbfe2c, 0x01dbfe04 ) ERROR_SUCCESS 0.0000416 600 4:53:27.541 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage", 0, KEY_QUERY_VALUE, 0x01dbfccc ) ERROR_SUCCESS 0.0000126 601 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000074c, "FavoritesChanges", NULL, 0x01dbfcb4, 0x01dbfe2c, 0x01dbfe04 ) ERROR_SUCCESS 0.0000061 602 4:53:27.541 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000056 603 4:53:27.541 AM 1 Explorer.EXE SHGetValueW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "Start_MinMFU", NULL, 0x01dbfe34, 0x01dbfe38 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000408 604 4:53:27.541 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x01dbfcf8 ) ERROR_SUCCESS 0.0000115 605 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000074c, "Start_MinMFU", NULL, 0x01dbfce0, 0x01dbfe34, 0x01dbfe38 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 606 4:53:27.541 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000061 607 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfe04 ) S_OK 0.0000047 608 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfdb8 ) S_OK 0.0000045 609 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfdb4 ) S_OK 0.0000042 610 4:53:27.541 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 611 4:53:27.541 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf710, 260 ) 4 0.0000050 612 4:53:27.541 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000047 613 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbfbd0 ) S_OK 0.0000045 614 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder2, 0x01dbfbcc ) S_OK 0.0000042 615 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf968, "Documents and Settings", 260 ) 0x01dbf968 0.0000045 616 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf740, "Documents and Settings", 260 ) 0x01dbf740 0.0000045 617 4:53:27.541 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000064 618 4:53:27.541 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000056 619 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfb80 ) S_OK 0.0000059 620 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x01dbf4a0 ) S_OK 0.0000059 621 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf4ba, "Documents and Settings", 257 ) 0x01dbf4ba 0.0000059 622 4:53:27.541 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e360 0.0000067 623 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfb7c ) S_OK 0.0000059 624 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf918, "Administrator", 260 ) 0x01dbf918 0.0000056 625 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6f0, "Administrator", 260 ) 0x01dbf6f0 0.0000056 626 4:53:27.541 AM 1 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000061 627 4:53:27.541 AM 1 SHELL32.dll PathFindExtensionW ( "Administrator" ) 0x0215df2e 0.0000056 628 4:53:27.541 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000056 629 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x01dbfb30 ) S_OK 0.0000059 630 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x01dbf450 ) S_OK 0.0000059 631 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf498, "Administrator", 234 ) 0x01dbf498 0.0000059 632 4:53:27.541 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator" ) 0x0215de90 0.0000067 633 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder2, 0x01dbfb2c ) S_OK 0.0000056 634 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8c8, "Start Menu", 260 ) 0x01dbf8c8 0.0000056 635 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6a0, "Start Menu", 260 ) 0x01dbf6a0 0.0000053 636 4:53:27.541 AM 1 SHELL32.dll StrCmpICW ( "Start Menu", "Start Menu" ) 0 0.0000056 637 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfe04 ) S_OK 0.0000045 638 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfdb8 ) S_OK 0.0000045 639 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfdb4 ) S_OK 0.0000064 640 4:53:27.541 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 641 4:53:27.541 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf710, 260 ) 4 0.0000047 642 4:53:27.541 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000047 643 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbfbd0 ) S_OK 0.0000042 644 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder2, 0x01dbfbcc ) S_OK 0.0000053 645 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf968, "Documents and Settings", 260 ) 0x01dbf968 0.0000045 646 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf740, "Documents and Settings", 260 ) 0x01dbf740 0.0000045 647 4:53:27.541 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 648 4:53:27.541 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000042 649 4:53:27.541 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 650 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfb80 ) S_OK 0.0000042 651 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x01dbf4a0 ) S_OK 0.0000045 652 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf4ba, "Documents and Settings", 257 ) 0x01dbf4ba 0.0000045 653 4:53:27.541 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e360 0.0000047 654 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfb7c ) S_OK 0.0000042 655 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf918, "All Users", 260 ) 0x01dbf918 0.0000042 656 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6f0, "All Users", 260 ) 0x01dbf6f0 0.0000042 657 4:53:27.541 AM 1 SHELL32.dll StrCmpICW ( "All Users", "All Users" ) 0 0.0000045 658 4:53:27.541 AM 1 SHELL32.dll PathFindExtensionW ( "All Users" ) 0x00170f8e 0.0000042 659 4:53:27.541 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 660 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x01dbfb30 ) S_OK 0.0000045 661 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x01dbf450 ) S_OK 0.0000045 662 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf498, "All Users", 234 ) 0x01dbf498 0.0000042 663 4:53:27.541 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings\All Users" ) 0x001702d0 0.0000050 664 4:53:27.541 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder2, 0x01dbfb2c ) S_OK 0.0000042 665 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8c8, "Start Menu", 260 ) 0x01dbf8c8 0.0000042 666 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6a0, "Start Menu", 260 ) 0x01dbf6a0 0.0000042 667 4:53:27.541 AM 1 SHELL32.dll StrCmpICW ( "Start Menu", "Start Menu" ) 0 0.0000045 668 4:53:27.541 AM 1 SHELL32.dll PathFindExtensionW ( "Internet Explorer.lnk" ) 0x0018645a 0.0000045 669 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd550, "Internet Explorer.lnk", 200 ) 0x01dbd550 0.0000042 670 4:53:27.541 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk", 0x01dbd700 ) S_OK 0.0000050 671 4:53:27.541 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00186408, 0x01dbda74, 2084 ) S_OK 0.0000053 672 4:53:27.541 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk", NULL ) 59 0.0000067 673 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000053 674 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 675 4:53:27.541 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000380 676 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000293 677 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000042 678 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 679 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 680 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 681 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 682 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000045 683 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 684 4:53:27.541 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 685 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Vagrearg Rkcybere.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 686 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLSESSION" ) 1 0.0000045 687 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Internet Explorer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 688 4:53:27.541 AM 1 SHELL32.dll PathFindExtensionW ( "Outlook Express.lnk" ) 0x0215b546 0.0000042 689 4:53:27.541 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 690 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd550, "Outlook Express.lnk", 200 ) 0x01dbd550 0.0000042 691 4:53:27.541 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk", 0x01dbd700 ) S_OK 0.0000056 692 4:53:27.541 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215b4f8, 0x01dbda74, 2084 ) S_OK 0.0000050 693 4:53:27.541 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk", NULL ) 59 0.0000061 694 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000045 695 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 696 4:53:27.541 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 697 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 698 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 699 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 700 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 701 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000461 702 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 703 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 704 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 705 4:53:27.541 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 706 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Bhgybbx Rkcerff.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 707 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLSESSION" ) 1 0.0000042 708 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Outlook Express.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 709 4:53:27.541 AM 1 SHELL32.dll PathFindExtensionW ( "Remote Assistance.lnk" ) 0x0215b0c2 0.0000045 710 4:53:27.541 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 711 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd550, "Remote Assistance.lnk", 200 ) 0x01dbd550 0.0000042 712 4:53:27.541 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk", 0x01dbd700 ) S_OK 0.0000053 713 4:53:27.541 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215b070, 0x01dbda74, 2084 ) S_OK 0.0000050 714 4:53:27.541 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk", NULL ) 59 0.0000061 715 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 716 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 717 4:53:27.541 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 718 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 719 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 720 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 721 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 722 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 723 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 724 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 725 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 726 4:53:27.541 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 727 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Erzbgr Nffvfgnapr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 728 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 729 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Remote Assistance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 730 4:53:27.541 AM 1 SHELL32.dll PathFindExtensionW ( "Address Book.lnk" ) 0x02172d10 0.0000050 731 4:53:27.541 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000045 732 4:53:27.541 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd568, "Address Book.lnk", 188 ) 0x01dbd568 0.0000042 733 4:53:27.541 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Address Book.lnk", 0x01dbd700 ) S_OK 0.0000056 734 4:53:27.541 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02172cc8, 0x01dbda74, 2084 ) S_OK 0.0000050 735 4:53:27.541 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Address Book.lnk", NULL ) 59 0.0000061 736 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 737 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 738 4:53:27.541 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 739 4:53:27.541 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 740 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 741 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 742 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 743 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 744 4:53:27.541 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000017 745 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000045 746 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 747 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 748 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Nqqerff Obbx.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 749 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLSESSION" ) 1 0.0000042 750 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Address Book.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 751 4:53:27.551 AM 1 SHELL32.dll PathFindExtensionW ( "Command Prompt.lnk" ) 0x0018a23c 0.0000045 752 4:53:27.551 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 753 4:53:27.551 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd568, "Command Prompt.lnk", 188 ) 0x01dbd568 0.0000042 754 4:53:27.551 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Command Prompt.lnk", 0x01dbd700 ) S_OK 0.0000053 755 4:53:27.551 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0018a1f0, 0x01dbda74, 2084 ) S_OK 0.0000050 756 4:53:27.551 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Command Prompt.lnk", NULL ) 59 0.0000059 757 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000073 758 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 759 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000170 760 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000087 761 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000045 762 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 763 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 764 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000045 765 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 766 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000148 767 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzznaq Cebzcg.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000064 768 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLSESSION" ) 1 0.0000042 769 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Command Prompt.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 770 4:53:27.551 AM 1 SHELL32.dll PathFindExtensionW ( "Notepad.lnk" ) 0x02187eb4 0.0000045 771 4:53:27.551 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 772 4:53:27.551 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd568, "Notepad.lnk", 188 ) 0x01dbd568 0.0000042 773 4:53:27.551 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Notepad.lnk", 0x01dbd700 ) S_OK 0.0000050 774 4:53:27.551 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02187e78, 0x01dbda74, 2084 ) S_OK 0.0000047 775 4:53:27.551 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Notepad.lnk", NULL ) 59 0.0000061 776 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 777 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 778 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000159 779 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000075 780 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000045 781 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 782 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 783 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000045 784 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 785 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000338 786 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000251 787 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 788 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Notepad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 789 4:53:27.551 AM 1 SHELL32.dll PathFindExtensionW ( "Magnifier.lnk" ) 0x00189fda 0.0000042 790 4:53:27.551 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 791 4:53:27.551 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "Magnifier.lnk", 174 ) 0x01dbd584 0.0000045 792 4:53:27.551 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk", 0x01dbd700 ) S_OK 0.0000056 793 4:53:27.551 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189f98, 0x01dbda74, 2084 ) S_OK 0.0000050 794 4:53:27.551 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk", NULL ) 59 0.0000059 795 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000045 796 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 797 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 798 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 799 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000045 800 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 801 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 802 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 803 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 804 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000042 805 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 806 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 807 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Zntavsvre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 808 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLSESSION" ) 1 0.0000042 809 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Magnifier.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 810 4:53:27.551 AM 1 SHELL32.dll PathFindExtensionW ( "Narrator.lnk" ) 0x00189f10 0.0000045 811 4:53:27.551 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 812 4:53:27.551 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "Narrator.lnk", 174 ) 0x01dbd584 0.0000047 813 4:53:27.551 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk", 0x01dbd700 ) S_OK 0.0000056 814 4:53:27.551 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189ed0, 0x01dbda74, 2084 ) S_OK 0.0000050 815 4:53:27.551 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk", NULL ) 59 0.0000061 816 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 817 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 818 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 819 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 820 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 821 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 822 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 823 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 824 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 825 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 826 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 827 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 828 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Aneengbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 829 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 830 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Narrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 831 4:53:27.551 AM 1 SHELL32.dll PathFindExtensionW ( "On-Screen Keyboard.lnk" ) 0x02161814 0.0000042 832 4:53:27.551 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 833 4:53:27.551 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "On-Screen Keyboard.lnk", 174 ) 0x01dbd584 0.0000042 834 4:53:27.551 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk", 0x01dbd700 ) S_OK 0.0000053 835 4:53:27.551 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021617c0, 0x01dbda74, 2084 ) S_OK 0.0000050 836 4:53:27.551 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk", NULL ) 59 0.0000061 837 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 838 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 839 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 840 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 841 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 842 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 843 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 844 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 845 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 846 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 847 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 848 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 849 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Ba-Fperra Xrlobneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 850 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 851 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\On-Screen Keyboard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 852 4:53:27.551 AM 1 SHELL32.dll PathFindExtensionW ( "Utility Manager.lnk" ) 0x021610be 0.0000042 853 4:53:27.551 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 854 4:53:27.551 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "Utility Manager.lnk", 174 ) 0x01dbd584 0.0000045 855 4:53:27.551 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk", 0x01dbd700 ) S_OK 0.0000056 856 4:53:27.551 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02161070, 0x01dbda74, 2084 ) S_OK 0.0000050 857 4:53:27.551 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk", NULL ) 59 0.0000061 858 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 859 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 860 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 861 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 862 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 863 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 864 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 865 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 866 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 867 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 868 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 869 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 870 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Hgvyvgl Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 871 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 872 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Utility Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 873 4:53:27.551 AM 1 SHELL32.dll PathFindExtensionW ( "Windows Media Player.lnk" ) 0x0215a988 0.0000045 874 4:53:27.551 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 875 4:53:27.551 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd584, "Windows Media Player.lnk", 174 ) 0x01dbd584 0.0000042 876 4:53:27.551 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk", 0x01dbd700 ) S_OK 0.0000056 877 4:53:27.551 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215a930, 0x01dbda74, 2084 ) S_OK 0.0000050 878 4:53:27.551 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk", NULL ) 59 0.0000059 879 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000045 880 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 881 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 882 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 883 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000042 884 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 885 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 886 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 887 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 888 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000042 889 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 890 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 891 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Jvaqbjf Zrqvn Cynlre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 892 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLSESSION" ) 1 0.0000042 893 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Windows Media Player.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 894 4:53:27.551 AM 1 SHELL32.dll PathFindExtensionW ( "Internet Explorer (No Add-ons).lnk" ) 0x00165354 0.0000045 895 4:53:27.551 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000047 896 4:53:27.551 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd582, "Internet Explorer (No Add-ons).lnk", 175 ) 0x01dbd582 0.0000045 897 4:53:27.551 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", 0x01dbd700 ) S_OK 0.0000053 898 4:53:27.551 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001652e8, 0x01dbda74, 2084 ) S_OK 0.0000050 899 4:53:27.551 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", NULL ) 59 0.0000061 900 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000042 901 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 902 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 903 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 904 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000045 905 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 906 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 907 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 908 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 909 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000042 910 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 911 4:53:27.551 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 912 4:53:27.551 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Vagrearg Rkcybere (Ab Nqq-baf).yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 913 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLSESSION" ) 1 0.0000042 914 4:53:27.551 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Internet Explorer (No Add-ons).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 915 4:53:27.551 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfde0 ) S_OK 0.0000053 916 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfd94 ) S_OK 0.0000045 917 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfd90 ) S_OK 0.0000042 918 4:53:27.561 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 919 4:53:27.561 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf6ec, 260 ) 4 0.0000067 920 4:53:27.561 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000047 921 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbfbac ) S_OK 0.0000045 922 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder2, 0x01dbfba8 ) S_OK 0.0000042 923 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf944, "Documents and Settings", 260 ) 0x01dbf944 0.0000045 924 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf71c, "Documents and Settings", 260 ) 0x01dbf71c 0.0000045 925 4:53:27.561 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000064 926 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000067 927 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfb5c ) S_OK 0.0000042 928 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x01dbf47c ) S_OK 0.0000045 929 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf496, "Documents and Settings", 257 ) 0x01dbf496 0.0000042 930 4:53:27.561 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e360 0.0000050 931 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfb58 ) S_OK 0.0000042 932 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8f4, "Administrator", 260 ) 0x01dbf8f4 0.0000042 933 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6cc, "All Users", 260 ) 0x01dbf6cc 0.0000042 934 4:53:27.561 AM 1 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000045 935 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfde0 ) S_OK 0.0000042 936 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfd94 ) S_OK 0.0000045 937 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfd90 ) S_OK 0.0000042 938 4:53:27.561 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 939 4:53:27.561 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf6ec, 260 ) 4 0.0000047 940 4:53:27.561 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000045 941 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbfbac ) S_OK 0.0000045 942 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder2, 0x01dbfba8 ) S_OK 0.0000042 943 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf944, "Documents and Settings", 260 ) 0x01dbf944 0.0000042 944 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf71c, "Documents and Settings", 260 ) 0x01dbf71c 0.0000042 945 4:53:27.561 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 946 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000045 947 4:53:27.561 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 948 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfb5c ) S_OK 0.0000042 949 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x01dbf47c ) S_OK 0.0000045 950 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf496, "Documents and Settings", 257 ) 0x01dbf496 0.0000045 951 4:53:27.561 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e360 0.0000047 952 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfb58 ) S_OK 0.0000042 953 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8f4, "All Users", 260 ) 0x01dbf8f4 0.0000042 954 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6cc, "All Users", 260 ) 0x01dbf6cc 0.0000042 955 4:53:27.561 AM 1 SHELL32.dll StrCmpICW ( "All Users", "All Users" ) 0 0.0000045 956 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "All Users" ) 0x00170f8e 0.0000045 957 4:53:27.561 AM 1 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 958 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x01dbfb0c ) S_OK 0.0000042 959 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x01dbf42c ) S_OK 0.0000045 960 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf474, "All Users", 234 ) 0x01dbf474 0.0000042 961 4:53:27.561 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings\All Users" ) 0x001702d0 0.0000050 962 4:53:27.561 AM 1 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder2, 0x01dbfb08 ) S_OK 0.0000047 963 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8a4, "Desktop", 260 ) 0x01dbf8a4 0.0000042 964 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf67c, "Start Menu", 260 ) 0x01dbf67c 0.0000042 965 4:53:27.561 AM 1 SHELL32.dll StrCmpICW ( "Start Menu", "Desktop" ) 15 0.0000042 966 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "Windows Update.lnk" ) 0x02188704 0.0000042 967 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd536, "Windows Update.lnk", 213 ) 0x01dbd536 0.0000042 968 4:53:27.561 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", 0x01dbd700 ) S_OK 0.0000050 969 4:53:27.561 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021886b8, 0x01dbda74, 2084 ) S_OK 0.0000050 970 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 25 0.0000056 971 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 46 0.0000059 972 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", NULL ) 25 0.0000050 973 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000045 974 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 975 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 976 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 977 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000045 978 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 979 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 980 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 981 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 982 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000042 983 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 984 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 985 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Fgneg Zrah\Jvaqbjf Hcqngr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 986 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLSESSION" ) 1 0.0000042 987 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 988 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "Calculator.lnk" ) 0x0218863c 0.0000042 989 4:53:27.561 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 990 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd560, "Calculator.lnk", 192 ) 0x01dbd560 0.0000042 991 4:53:27.561 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", 0x01dbd700 ) S_OK 0.0000053 992 4:53:27.561 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021885f8, 0x01dbda74, 2084 ) S_OK 0.0000050 993 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", NULL ) 25 0.0000053 994 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk", NULL ) 55 0.0000059 995 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000045 996 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 997 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 998 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 999 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1000 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1001 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1002 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1003 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1004 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1005 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1006 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 1007 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pnyphyngbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1008 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1009 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Calculator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1010 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "Paint.lnk" ) 0x0018462e 0.0000042 1011 4:53:27.561 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1012 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd560, "Paint.lnk", 192 ) 0x01dbd560 0.0000045 1013 4:53:27.561 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", 0x01dbd700 ) S_OK 0.0000059 1014 4:53:27.561 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001845f8, 0x01dbda74, 2084 ) S_OK 0.0000050 1015 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", NULL ) 25 0.0000053 1016 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Paint.lnk", NULL ) 55 0.0000059 1017 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1018 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1019 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1020 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1021 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1022 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1023 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1024 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1025 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1026 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1027 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1028 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 1029 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Cnvag.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1030 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1031 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Paint.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1032 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "WordPad.lnk" ) 0x0215b27c 0.0000045 1033 4:53:27.561 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1034 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd560, "WordPad.lnk", 192 ) 0x01dbd560 0.0000042 1035 4:53:27.561 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", 0x01dbd700 ) S_OK 0.0000050 1036 4:53:27.561 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215b240, 0x01dbda74, 2084 ) S_OK 0.0000047 1037 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", NULL ) 25 0.0000053 1038 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\WordPad.lnk", NULL ) 55 0.0000059 1039 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1040 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1041 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1042 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1043 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1044 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1045 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1046 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1047 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1048 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1049 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1050 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 1051 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\JbeqCnq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1052 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1053 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\WordPad.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1054 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "Accessibility Wizard.lnk" ) 0x02173b78 0.0000045 1055 4:53:27.561 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1056 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57c, "Accessibility Wizard.lnk", 178 ) 0x01dbd57c 0.0000042 1057 4:53:27.561 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", 0x01dbd700 ) S_OK 0.0000053 1058 4:53:27.561 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02173b20, 0x01dbda74, 2084 ) S_OK 0.0000050 1059 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", NULL ) 25 0.0000050 1060 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk", NULL ) 55 0.0000056 1061 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1062 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1063 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1064 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1065 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1066 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1067 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1068 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1069 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1070 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000070 1071 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1072 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1073 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Npprffvovyvgl\Npprffvovyvgl Jvmneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1074 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1075 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Accessibility\Accessibility Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1076 4:53:27.561 AM 1 SHELL32.dll PathFindExtensionW ( "Remote Desktop Connection.lnk" ) 0x0016553a 0.0000045 1077 4:53:27.561 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000039 1078 4:53:27.561 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57e, "Remote Desktop Connection.lnk", 177 ) 0x01dbd57e 0.0000045 1079 4:53:27.561 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", 0x01dbd700 ) S_OK 0.0000056 1080 4:53:27.561 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001654d8, 0x01dbda74, 2084 ) S_OK 0.0000050 1081 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", NULL ) 25 0.0000053 1082 4:53:27.561 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk", NULL ) 55 0.0000059 1083 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1084 4:53:27.561 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1085 4:53:27.561 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000173 1086 4:53:27.561 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1087 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1088 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1089 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1090 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1091 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1092 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1093 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1094 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1095 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Pbzzhavpngvbaf\Erzbgr Qrfxgbc Pbaarpgvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1096 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1097 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Communications\Remote Desktop Connection.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1098 4:53:27.571 AM 1 SHELL32.dll PathFindExtensionW ( "Sound Recorder.lnk" ) 0x0216159c 0.0000045 1099 4:53:27.571 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1100 4:53:27.571 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57c, "Sound Recorder.lnk", 178 ) 0x01dbd57c 0.0000042 1101 4:53:27.571 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", 0x01dbd700 ) S_OK 0.0000053 1102 4:53:27.571 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02161550, 0x01dbda74, 2084 ) S_OK 0.0000050 1103 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", NULL ) 25 0.0000050 1104 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk", NULL ) 55 0.0000059 1105 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1106 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1107 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1108 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1109 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1110 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000070 1111 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1112 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1113 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1114 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1115 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1116 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1117 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Ragregnvazrag\Fbhaq Erpbeqre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1118 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1119 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\Entertainment\Sound Recorder.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1120 4:53:27.571 AM 1 SHELL32.dll PathFindExtensionW ( "Backup.lnk" ) 0x02188032 0.0000042 1121 4:53:27.571 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1122 4:53:27.571 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "Backup.lnk", 179 ) 0x01dbd57a 0.0000042 1123 4:53:27.571 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", 0x01dbd700 ) S_OK 0.0000050 1124 4:53:27.571 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02187ff8, 0x01dbda74, 2084 ) S_OK 0.0000050 1125 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", NULL ) 25 0.0000053 1126 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Backup.lnk", NULL ) 55 0.0000059 1127 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1128 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1129 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1130 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1131 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1132 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1133 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1134 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1135 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1136 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1137 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1138 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1139 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Onpxhc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1140 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLSESSION" ) 1 0.0000179 1141 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Backup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1142 4:53:27.571 AM 1 SHELL32.dll PathFindExtensionW ( "Character Map.lnk" ) 0x0216125a 0.0000045 1143 4:53:27.571 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1144 4:53:27.571 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "Character Map.lnk", 179 ) 0x01dbd57a 0.0000045 1145 4:53:27.571 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", 0x01dbd700 ) S_OK 0.0000053 1146 4:53:27.571 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02161210, 0x01dbda74, 2084 ) S_OK 0.0000050 1147 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", NULL ) 25 0.0000050 1148 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Character Map.lnk", NULL ) 55 0.0000059 1149 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1150 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1151 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1152 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1153 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1154 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1155 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1156 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1157 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1158 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1159 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1160 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1161 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Punenpgre Znc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1162 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1163 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Character Map.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1164 4:53:27.571 AM 1 SHELL32.dll PathFindExtensionW ( "Disk Cleanup.lnk" ) 0x021619a8 0.0000042 1165 4:53:27.571 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1166 4:53:27.571 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "Disk Cleanup.lnk", 179 ) 0x01dbd57a 0.0000045 1167 4:53:27.571 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", 0x01dbd700 ) S_OK 0.0000053 1168 4:53:27.571 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02161960, 0x01dbda74, 2084 ) S_OK 0.0000050 1169 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", NULL ) 25 0.0000053 1170 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk", NULL ) 55 0.0000059 1171 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1172 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1173 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1174 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1175 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1176 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1177 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1178 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1179 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1180 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1181 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1182 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1183 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Pyrnahc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1184 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1185 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Cleanup.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1186 4:53:27.571 AM 1 SHELL32.dll PathFindExtensionW ( "Disk Defragmenter.lnk" ) 0x02160f22 0.0000045 1187 4:53:27.571 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1188 4:53:27.571 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "Disk Defragmenter.lnk", 179 ) 0x01dbd57a 0.0000045 1189 4:53:27.571 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", 0x01dbd700 ) S_OK 0.0000047 1190 4:53:27.571 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x02160ed0, 0x01dbda74, 2084 ) S_OK 0.0000050 1191 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", NULL ) 25 0.0000050 1192 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk", NULL ) 55 0.0000059 1193 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1194 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000296 1195 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1196 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1197 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1198 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1199 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1200 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1201 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1202 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1203 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1204 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1205 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Qvfx Qrsentzragre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1206 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1207 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\Disk Defragmenter.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1208 4:53:27.571 AM 1 SHELL32.dll PathFindExtensionW ( "System Information.lnk" ) 0x0216ac5c 0.0000045 1209 4:53:27.571 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1210 4:53:27.571 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57a, "System Information.lnk", 179 ) 0x01dbd57a 0.0000042 1211 4:53:27.571 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", 0x01dbd700 ) S_OK 0.0000053 1212 4:53:27.571 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216ac08, 0x01dbda74, 2084 ) S_OK 0.0000053 1213 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", NULL ) 25 0.0000053 1214 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\System Information.lnk", NULL ) 55 0.0000059 1215 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1216 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1217 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1218 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1219 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1220 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1221 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1222 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000078 1223 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1224 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1225 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1226 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1227 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Flfgrz Gbbyf\Flfgrz Vasbezngvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1228 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1229 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Accessories\System Tools\System Information.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1230 4:53:27.571 AM 1 SHELL32.dll PathFindExtensionW ( "Certification Authority.lnk" ) 0x00186736 0.0000045 1231 4:53:27.571 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000039 1232 4:53:27.571 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Certification Authority.lnk", 183 ) 0x01dbd572 0.0000045 1233 4:53:27.571 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", 0x01dbd700 ) S_OK 0.0000053 1234 4:53:27.571 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001866d8, 0x01dbda74, 2084 ) S_OK 0.0000050 1235 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", NULL ) 25 0.0000050 1236 4:53:27.571 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Certification Authority.lnk", NULL ) 55 0.0000059 1237 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1238 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1239 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1240 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1241 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1242 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1243 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1244 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1245 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1246 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1247 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1248 4:53:27.571 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1249 4:53:27.571 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pregvsvpngvba Nhgubevgl.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1250 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1251 4:53:27.571 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Certification Authority.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1252 4:53:27.571 AM 1 SHELL32.dll PathFindExtensionW ( "Cluster Administrator.lnk" ) 0x0016581a 0.0000045 1253 4:53:27.571 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1254 4:53:27.571 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Cluster Administrator.lnk", 183 ) 0x01dbd572 0.0000042 1255 4:53:27.571 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", 0x01dbd700 ) S_OK 0.0000053 1256 4:53:27.571 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001657c0, 0x01dbda74, 2084 ) S_OK 0.0000047 1257 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", NULL ) 25 0.0000070 1258 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Cluster Administrator.lnk", NULL ) 55 0.0000073 1259 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000061 1260 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1261 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000232 1262 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000120 1263 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000050 1264 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1265 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 1266 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 1267 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000050 1268 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1269 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1270 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 1271 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pyhfgre Nqzvavfgengbe.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1272 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLSESSION" ) 1 0.0000050 1273 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Cluster Administrator.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1274 4:53:27.581 AM 1 SHELL32.dll PathFindExtensionW ( "Component Services.lnk" ) 0x00186bdc 0.0000053 1275 4:53:27.581 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000050 1276 4:53:27.581 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Component Services.lnk", 183 ) 0x01dbd572 0.0000059 1277 4:53:27.581 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", 0x01dbd700 ) S_OK 0.0000073 1278 4:53:27.581 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00186b88, 0x01dbda74, 2084 ) S_OK 0.0000061 1279 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", NULL ) 25 0.0000064 1280 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Component Services.lnk", NULL ) 55 0.0000073 1281 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1282 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1283 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 1284 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1285 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1286 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1287 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000053 1288 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 1289 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 1290 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1291 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000050 1292 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 1293 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzcbarag Freivprf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1294 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1295 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Component Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1296 4:53:27.581 AM 1 SHELL32.dll PathFindExtensionW ( "Computer Management.lnk" ) 0x0216f75e 0.0000053 1297 4:53:27.581 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000050 1298 4:53:27.581 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Computer Management.lnk", 183 ) 0x01dbd572 0.0000134 1299 4:53:27.581 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", 0x01dbd700 ) S_OK 0.0000073 1300 4:53:27.581 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216f708, 0x01dbda74, 2084 ) S_OK 0.0000067 1301 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", NULL ) 25 0.0000067 1302 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Computer Management.lnk", NULL ) 55 0.0000078 1303 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1304 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1305 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 1306 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1307 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1308 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1309 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1310 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1311 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1312 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000053 1313 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1314 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 1315 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbzchgre Znantrzrag.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1316 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1317 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Computer Management.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1318 4:53:27.581 AM 1 SHELL32.dll PathFindExtensionW ( "Configure Your Server.lnk" ) 0x0216fae2 0.0000059 1319 4:53:27.581 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 1320 4:53:27.581 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Configure Your Server.lnk", 183 ) 0x01dbd572 0.0000056 1321 4:53:27.581 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", 0x01dbd700 ) S_OK 0.0000075 1322 4:53:27.581 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216fa88, 0x01dbda74, 2084 ) S_OK 0.0000064 1323 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", NULL ) 25 0.0000067 1324 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Configure Your Server.lnk", NULL ) 55 0.0000075 1325 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1326 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1327 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 1328 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1329 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1330 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1331 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1332 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1333 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 1334 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1335 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1336 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 1337 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Pbasvther Lbhe Freire.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1338 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1339 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Configure Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1340 4:53:27.581 AM 1 SHELL32.dll PathFindExtensionW ( "Data Sources (ODBC).lnk" ) 0x0216ee9e 0.0000056 1341 4:53:27.581 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 1342 4:53:27.581 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Data Sources (ODBC).lnk", 183 ) 0x01dbd572 0.0000056 1343 4:53:27.581 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", 0x01dbd700 ) S_OK 0.0000075 1344 4:53:27.581 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216ee48, 0x01dbda74, 2084 ) S_OK 0.0000067 1345 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", NULL ) 25 0.0000070 1346 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk", NULL ) 55 0.0000075 1347 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000059 1348 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1349 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 1350 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1351 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000053 1352 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1353 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1354 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 1355 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1356 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000053 1357 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1358 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 1359 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qngn Fbheprf (BQOP).yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1360 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLSESSION" ) 1 0.0000056 1361 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Data Sources (ODBC).lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1362 4:53:27.581 AM 1 SHELL32.dll PathFindExtensionW ( "Distributed File System.lnk" ) 0x0216f3e6 0.0000056 1363 4:53:27.581 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1364 4:53:27.581 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Distributed File System.lnk", 183 ) 0x01dbd572 0.0000056 1365 4:53:27.581 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", 0x01dbd700 ) S_OK 0.0000075 1366 4:53:27.581 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216f388, 0x01dbda74, 2084 ) S_OK 0.0000067 1367 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", NULL ) 25 0.0000070 1368 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Distributed File System.lnk", NULL ) 55 0.0000078 1369 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1370 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1371 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 1372 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1373 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1374 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1375 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1376 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1377 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 1378 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1379 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1380 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 1381 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Qvfgevohgrq Svyr Flfgrz.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1382 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1383 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Distributed File System.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000053 1384 4:53:27.581 AM 1 SHELL32.dll PathFindExtensionW ( "Event Viewer.lnk" ) 0x02161738 0.0000056 1385 4:53:27.581 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000053 1386 4:53:27.581 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Event Viewer.lnk", 183 ) 0x01dbd572 0.0000056 1387 4:53:27.581 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", 0x01dbd700 ) S_OK 0.0000073 1388 4:53:27.581 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021616f0, 0x01dbda74, 2084 ) S_OK 0.0000064 1389 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", NULL ) 25 0.0000067 1390 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Event Viewer.lnk", NULL ) 55 0.0000075 1391 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1392 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1393 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 1394 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1395 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1396 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1397 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1398 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1399 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1400 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1401 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1402 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 1403 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Rirag Ivrjre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1404 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1405 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Event Viewer.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1406 4:53:27.581 AM 1 SHELL32.dll PathFindExtensionW ( "Licensing.lnk" ) 0x00189e4a 0.0000056 1407 4:53:27.581 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000056 1408 4:53:27.581 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Licensing.lnk", 183 ) 0x01dbd572 0.0000056 1409 4:53:27.581 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", 0x01dbd700 ) S_OK 0.0000073 1410 4:53:27.581 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189e08, 0x01dbda74, 2084 ) S_OK 0.0000064 1411 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", NULL ) 25 0.0000070 1412 4:53:27.581 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Licensing.lnk", NULL ) 55 0.0000078 1413 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1414 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1415 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 1416 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1417 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000059 1418 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1419 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1420 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 1421 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1422 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1423 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000056 1424 4:53:27.581 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 1425 4:53:27.581 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Yvprafvat.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1426 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000056 1427 4:53:27.581 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000061 1428 4:53:27.591 AM 1 SHELL32.dll PathFindExtensionW ( "Local Security Policy.lnk" ) 0x0216f922 0.0000045 1429 4:53:27.591 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1430 4:53:27.591 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Local Security Policy.lnk", 183 ) 0x01dbd572 0.0000045 1431 4:53:27.591 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", 0x01dbd700 ) S_OK 0.0000061 1432 4:53:27.591 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216f8c8, 0x01dbda74, 2084 ) S_OK 0.0000053 1433 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", NULL ) 25 0.0000056 1434 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk", NULL ) 55 0.0000059 1435 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1436 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1437 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000173 1438 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1439 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1440 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1441 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1442 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1443 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1444 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1445 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1446 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1447 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ybpny Frphevgl Cbyvpl.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1448 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1449 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Local Security Policy.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1450 4:53:27.591 AM 1 SHELL32.dll PathFindExtensionW ( "Manage Your Server.lnk" ) 0x0215b634 0.0000047 1451 4:53:27.591 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1452 4:53:27.591 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Manage Your Server.lnk", 183 ) 0x01dbd572 0.0000042 1453 4:53:27.591 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", 0x01dbd700 ) S_OK 0.0000056 1454 4:53:27.591 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215b5e0, 0x01dbda74, 2084 ) S_OK 0.0000050 1455 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", NULL ) 25 0.0000053 1456 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Manage Your Server.lnk", NULL ) 55 0.0000061 1457 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1458 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1459 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1460 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1461 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1462 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1463 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1464 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1465 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1466 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1467 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1468 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1469 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Znantr Lbhe Freire.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1470 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1471 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Manage Your Server.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1472 4:53:27.591 AM 1 SHELL32.dll PathFindExtensionW ( "Microsoft .NET Framework 1.1 Configuration.lnk" ) 0x0219dff4 0.0000045 1473 4:53:27.591 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1474 4:53:27.591 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Microsoft .NET Framework 1.1 Configuration.lnk", 183 ) 0x01dbd572 0.0000045 1475 4:53:27.591 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", 0x01dbd700 ) S_OK 0.0000053 1476 4:53:27.591 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0219df70, 0x01dbda74, 2084 ) S_OK 0.0000050 1477 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", NULL ) 25 0.0000053 1478 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", NULL ) 55 0.0000059 1479 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1480 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1481 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1482 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1483 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1484 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1485 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1486 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1487 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1488 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1489 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1490 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1491 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Pbasvthengvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1492 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1493 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1494 4:53:27.591 AM 1 SHELL32.dll PathFindExtensionW ( "Microsoft .NET Framework 1.1 Wizards.lnk" ) 0x0219e6f0 0.0000045 1495 4:53:27.591 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1496 4:53:27.591 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Microsoft .NET Framework 1.1 Wizards.lnk", 183 ) 0x01dbd572 0.0000042 1497 4:53:27.591 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", 0x01dbd700 ) S_OK 0.0000053 1498 4:53:27.591 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0219e678, 0x01dbda74, 2084 ) S_OK 0.0000050 1499 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", NULL ) 25 0.0000050 1500 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", NULL ) 55 0.0000061 1501 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1502 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1503 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000168 1504 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1505 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1506 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1507 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1508 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1509 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1510 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1511 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1512 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1513 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Zvpebfbsg .ARG Senzrjbex 1.1 Jvmneqf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1514 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1515 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1516 4:53:27.591 AM 1 SHELL32.dll PathFindExtensionW ( "Network Load Balancing Manager.lnk" ) 0x021aed24 0.0000045 1517 4:53:27.591 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1518 4:53:27.591 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Network Load Balancing Manager.lnk", 183 ) 0x01dbd572 0.0000045 1519 4:53:27.591 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", 0x01dbd700 ) S_OK 0.0000059 1520 4:53:27.591 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021aecb8, 0x01dbda74, 2084 ) S_OK 0.0000053 1521 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", NULL ) 25 0.0000067 1522 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Network Load Balancing Manager.lnk", NULL ) 55 0.0000059 1523 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1524 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1525 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 1526 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1527 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1528 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1529 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1530 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1531 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1532 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1533 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000070 1534 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1535 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Argjbex Ybnq Onynapvat Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1536 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000061 1537 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Network Load Balancing Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000061 1538 4:53:27.591 AM 1 SHELL32.dll PathFindExtensionW ( "Performance.lnk" ) 0x00189d86 0.0000050 1539 4:53:27.591 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1540 4:53:27.591 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Performance.lnk", 183 ) 0x01dbd572 0.0000042 1541 4:53:27.591 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", 0x01dbd700 ) S_OK 0.0000059 1542 4:53:27.591 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189d40, 0x01dbda74, 2084 ) S_OK 0.0000050 1543 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", NULL ) 25 0.0000053 1544 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Performance.lnk", NULL ) 55 0.0000061 1545 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1546 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1547 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1548 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1549 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1550 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1551 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1552 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1553 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1554 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1555 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1556 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1557 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Cresbeznapr.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1558 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1559 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Performance.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1560 4:53:27.591 AM 1 SHELL32.dll PathFindExtensionW ( "Remote Desktops.lnk" ) 0x0216f056 0.0000045 1561 4:53:27.591 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1562 4:53:27.591 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Remote Desktops.lnk", 183 ) 0x01dbd572 0.0000042 1563 4:53:27.591 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", 0x01dbd700 ) S_OK 0.0000056 1564 4:53:27.591 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216f008, 0x01dbda74, 2084 ) S_OK 0.0000050 1565 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", NULL ) 25 0.0000053 1566 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Remote Desktops.lnk", NULL ) 55 0.0000059 1567 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1568 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1569 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 1570 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1571 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1572 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1573 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1574 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1575 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1576 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1577 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1578 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1579 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Erzbgr Qrfxgbcf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1580 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1581 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Remote Desktops.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1582 4:53:27.591 AM 1 SHELL32.dll PathFindExtensionW ( "Routing and Remote Access.lnk" ) 0x0016572a 0.0000045 1583 4:53:27.591 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1584 4:53:27.591 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Routing and Remote Access.lnk", 183 ) 0x01dbd572 0.0000045 1585 4:53:27.591 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", 0x01dbd700 ) S_OK 0.0000050 1586 4:53:27.591 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001656c8, 0x01dbda74, 2084 ) S_OK 0.0000056 1587 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", NULL ) 25 0.0000056 1588 4:53:27.591 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Routing and Remote Access.lnk", NULL ) 55 0.0000059 1589 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1590 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1591 4:53:27.591 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1592 4:53:27.591 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1593 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1594 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1595 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1596 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1597 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1598 4:53:27.591 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000050 1599 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000039 1600 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1601 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Ebhgvat naq Erzbgr Npprff.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1602 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLSESSION" ) 1 0.0000050 1603 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Routing and Remote Access.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1604 4:53:27.601 AM 1 SHELL32.dll PathFindExtensionW ( "Services.lnk" ) 0x00189cb8 0.0000045 1605 4:53:27.601 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1606 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Services.lnk", 183 ) 0x01dbd572 0.0000045 1607 4:53:27.601 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", 0x01dbd700 ) S_OK 0.0000061 1608 4:53:27.601 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x00189c78, 0x01dbda74, 2084 ) S_OK 0.0000050 1609 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", NULL ) 25 0.0000053 1610 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Services.lnk", NULL ) 55 0.0000059 1611 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1612 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1613 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1614 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1615 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1616 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1617 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1618 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1619 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1620 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1621 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1622 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 1623 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Freivprf.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1624 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1625 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Services.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1626 4:53:27.601 AM 1 SHELL32.dll PathFindExtensionW ( "Terminal Server Licensing.lnk" ) 0x0016515a 0.0000042 1627 4:53:27.601 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000070 1628 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Terminal Server Licensing.lnk", 183 ) 0x01dbd572 0.0000045 1629 4:53:27.601 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", 0x01dbd700 ) S_OK 0.0000050 1630 4:53:27.601 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001650f8, 0x01dbda74, 2084 ) S_OK 0.0000050 1631 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", NULL ) 25 0.0000053 1632 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Server Licensing.lnk", NULL ) 55 0.0000059 1633 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1634 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1635 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 1636 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1637 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1638 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1639 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1640 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1641 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1642 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1643 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1644 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1645 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freire Yvprafvat.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1646 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1647 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Server Licensing.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1648 4:53:27.601 AM 1 SHELL32.dll PathFindExtensionW ( "Terminal Services Configuration.lnk" ) 0x021aae26 0.0000045 1649 4:53:27.601 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000039 1650 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Terminal Services Configuration.lnk", 183 ) 0x01dbd572 0.0000045 1651 4:53:27.601 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", 0x01dbd700 ) S_OK 0.0000053 1652 4:53:27.601 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x021aadb8, 0x01dbda74, 2084 ) S_OK 0.0000053 1653 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", NULL ) 25 0.0000053 1654 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Configuration.lnk", NULL ) 55 0.0000059 1655 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000070 1656 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1657 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 1658 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1659 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1660 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000059 1661 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1662 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1663 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1664 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1665 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1666 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1667 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Pbasvthengvba.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1668 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1669 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Configuration.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1670 4:53:27.601 AM 1 SHELL32.dll PathFindExtensionW ( "Terminal Services Manager.lnk" ) 0x00165442 0.0000045 1671 4:53:27.601 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000042 1672 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd572, "Terminal Services Manager.lnk", 183 ) 0x01dbd572 0.0000045 1673 4:53:27.601 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", 0x01dbd700 ) S_OK 0.0000053 1674 4:53:27.601 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x001653e0, 0x01dbda74, 2084 ) S_OK 0.0000050 1675 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", NULL ) 25 0.0000053 1676 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\Terminal Services Manager.lnk", NULL ) 55 0.0000059 1677 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1678 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1679 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1680 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1681 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1682 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000047 1683 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1684 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1685 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1686 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1687 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1688 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1689 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\Nqzvavfgengvir Gbbyf\Grezvany Freivprf Znantre.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1690 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1691 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\Administrative Tools\Terminal Services Manager.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1692 4:53:27.601 AM 1 SHELL32.dll PathFindExtensionW ( "API Monitor v2 (Alpha) 32-bit.lnk" ) 0x0219d4b2 0.0000045 1693 4:53:27.601 AM 1 SHELL32.dll StrCmpCW ( ".lnk", ".lnk" ) 0 0.0000039 1694 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd57e, "API Monitor v2 (Alpha) 32-bit.lnk", 177 ) 0x01dbd57e 0.0000042 1695 4:53:27.601 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", 0x01dbd700 ) S_OK 0.0000056 1696 4:53:27.601 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0219d448, 0x01dbda74, 2084 ) S_OK 0.0000050 1697 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", NULL ) 25 0.0000053 1698 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Start Menu\Programs\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", NULL ) 55 0.0000059 1699 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1700 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1701 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000210 1702 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_SUCCESS 0.0000123 1703 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1704 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1705 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1706 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1707 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1708 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000159 1709 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:%pfvqy2%\ebuvgno.pbz\NCV Zbavgbe i2\NCV Zbavgbe i2 (Nycun) 32-ovg.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_SUCCESS 0.0000075 1710 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1711 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:%csidl2%\rohitab.com\API Monitor v2\API Monitor v2 (Alpha) 32-bit.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000047 1712 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfde0 ) S_OK 0.0000047 1713 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfd94 ) S_OK 0.0000045 1714 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfd90 ) S_OK 0.0000045 1715 4:53:27.601 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 1716 4:53:27.601 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf6ec, 260 ) 4 0.0000047 1717 4:53:27.601 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000047 1718 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbfbac ) S_OK 0.0000042 1719 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder2, 0x01dbfba8 ) S_OK 0.0000042 1720 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf944, "Documents and Settings", 260 ) 0x01dbf944 0.0000042 1721 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf71c, "Documents and Settings", 260 ) 0x01dbf71c 0.0000042 1722 4:53:27.601 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 1723 4:53:27.601 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000050 1724 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfb5c ) S_OK 0.0000064 1725 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x01dbf47c ) S_OK 0.0000073 1726 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf496, "Documents and Settings", 257 ) 0x01dbf496 0.0000045 1727 4:53:27.601 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e360 0.0000053 1728 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfb58 ) S_OK 0.0000042 1729 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8f4, "Administrator", 260 ) 0x01dbf8f4 0.0000042 1730 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6cc, "All Users", 260 ) 0x01dbf6cc 0.0000042 1731 4:53:27.601 AM 1 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000045 1732 4:53:27.601 AM 1 SHELL32.dll PathFindExtensionW ( "R2Help.lnk" ) 0x0216afb2 0.0000042 1733 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd530, "R2Help.lnk", 216 ) 0x01dbd530 0.0000042 1734 4:53:27.601 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", 0x01dbd700 ) S_OK 0.0000050 1735 4:53:27.601 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0216af78, 0x01dbda74, 2084 ) S_OK 0.0000053 1736 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 25 0.0000053 1737 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 35 0.0000056 1738 4:53:27.601 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Desktop\R2Help.lnk", NULL ) 25 0.0000050 1739 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1740 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1741 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1742 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1743 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1744 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1745 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1746 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1747 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1748 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1749 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1750 4:53:27.601 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1751 4:53:27.601 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\E2Uryc.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1752 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1753 4:53:27.601 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\R2Help.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1754 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbfde0 ) S_OK 0.0000045 1755 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x01dbfd94 ) S_OK 0.0000042 1756 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x01dbfd90 ) S_OK 0.0000042 1757 4:53:27.601 AM 1 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 1758 4:53:27.601 AM 1 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x01dbf6ec, 260 ) 4 0.0000050 1759 4:53:27.601 AM 1 SHELL32.dll StrDupW ( "C:\" ) 0x0215fa30 0.0000045 1760 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x01dbfbac ) S_OK 0.0000045 1761 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder2, 0x01dbfba8 ) S_OK 0.0000045 1762 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf944, "Documents and Settings", 260 ) 0x01dbf944 0.0000045 1763 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf71c, "Documents and Settings", 260 ) 0x01dbf71c 0.0000045 1764 4:53:27.601 AM 1 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 1765 4:53:27.601 AM 1 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x02160a88 0.0000045 1766 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x01dbfb5c ) S_OK 0.0000042 1767 4:53:27.601 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x01dbf47c ) S_OK 0.0000045 1768 4:53:27.601 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf496, "Documents and Settings", 257 ) 0x01dbf496 0.0000045 1769 4:53:27.611 AM 1 SHELL32.dll StrDupW ( "C:\Documents and Settings" ) 0x0215e360 0.0000056 1770 4:53:27.611 AM 1 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder2, 0x01dbfb58 ) S_OK 0.0000042 1771 4:53:27.611 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf8f4, "Administrator", 260 ) 0x01dbf8f4 0.0000042 1772 4:53:27.611 AM 1 SHELL32.dll StrCpyNW ( 0x01dbf6cc, "All Users", 260 ) 0x01dbf6cc 0.0000042 1773 4:53:27.611 AM 1 SHELL32.dll StrCmpICW ( "All Users", "Administrator" ) 8 0.0000042 1774 4:53:27.611 AM 1 SHELL32.dll PathFindExtensionW ( "Security Configuration Wizard.lnk" ) 0x0215bd8a 0.0000045 1775 4:53:27.611 AM 1 SHELL32.dll StrCpyNW ( 0x01dbd530, "Security Configuration Wizard.lnk", 216 ) 0x01dbd530 0.0000045 1776 4:53:27.611 AM 1 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", 0x01dbd700 ) S_OK 0.0000050 1777 4:53:27.611 AM 1 BROWSEUI.dll StrRetToBufW ( 0x01dbd6fc, 0x0215bd20, 0x01dbda74, 2084 ) S_OK 0.0000050 1778 4:53:27.611 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 25 0.0000053 1779 4:53:27.611 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\All Users\Start Menu\Programs", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 35 0.0000056 1780 4:53:27.611 AM 1 BROWSEUI.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Favorites", "C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", NULL ) 25 0.0000050 1781 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1782 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1783 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 1784 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x01dbdbf8, 0x01dbecb4, 0x01dbec64 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 1785 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1786 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1787 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000047 1788 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1789 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 1790 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000045 1791 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000047 1792 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000170 1793 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACVQY:P:\Qbphzragf naq Frggvatf\Nyy Hfref\Qrfxgbc\Frphevgl Pbasvthengvba Jvmneq.yax", NULL, 0x01dbdc34, 0x01dbecc0, 0x01dbeca0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1794 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLSESSION" ) 1 0.0000042 1795 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPIDL:C:\Documents and Settings\All Users\Desktop\Security Configuration Wizard.lnk", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1796 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000042 1797 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1798 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1799 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1800 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000045 1801 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1802 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1803 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1804 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1805 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000042 1806 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1807 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1808 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfugn.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1809 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLSESSION" ) 1 0.0000045 1810 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mshta.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1811 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000042 1812 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1813 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1814 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1815 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000045 1816 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1817 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1818 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1819 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1820 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000042 1821 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1822 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1823 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\vrkcyber.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1824 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLSESSION" ) 1 0.0000087 1825 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Internet Explorer\iexplore.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1826 4:53:27.611 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000064 1827 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000042 1828 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1829 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 1830 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1831 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000042 1832 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1833 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1834 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1835 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1836 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000042 1837 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1838 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1839 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\zfvza.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1840 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLSESSION" ) 1 0.0000042 1841 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\msimn.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1842 4:53:27.611 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 1843 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000042 1844 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1845 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1846 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1847 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000042 1848 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1849 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1850 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1851 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1852 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000042 1853 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1854 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1855 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\epvzyol.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1856 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLSESSION" ) 1 0.0000042 1857 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rcimlby.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1858 4:53:27.611 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000047 1859 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000045 1860 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1861 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1862 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1863 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000042 1864 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1865 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1866 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1867 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1868 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000042 1869 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1870 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000142 1871 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Bhgybbx Rkcerff\jno.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1872 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLSESSION" ) 1 0.0000042 1873 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Outlook Express\wab.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1874 4:53:27.611 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 1875 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000042 1876 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1877 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000187 1878 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000103 1879 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000042 1880 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1881 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1882 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000042 1883 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1884 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000148 1885 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pzq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000064 1886 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLSESSION" ) 1 0.0000042 1887 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cmd.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1888 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000042 1889 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1890 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000184 1891 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000098 1892 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000045 1893 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1894 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1895 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000042 1896 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1897 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000154 1898 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\abgrcnq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000067 1899 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLSESSION" ) 1 0.0000042 1900 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\notepad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1901 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000045 1902 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1903 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1904 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1905 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000045 1906 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1907 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1908 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1909 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1910 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000042 1911 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1912 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1913 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zntavsl.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1914 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLSESSION" ) 1 0.0000042 1915 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\magnify.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1916 4:53:27.611 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 1917 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000042 1918 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1919 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1920 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1921 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000042 1922 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1923 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1924 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1925 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000047 1926 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000045 1927 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1928 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1929 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\aneengbe.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1930 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLSESSION" ) 1 0.0000042 1931 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\narrator.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1932 4:53:27.611 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 1933 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000045 1934 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1935 4:53:27.611 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1936 4:53:27.611 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1937 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000042 1938 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1939 4:53:27.611 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 1940 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 1941 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1942 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000042 1943 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1944 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 1945 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bfx.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1946 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLSESSION" ) 1 0.0000042 1947 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\osk.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1948 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 1949 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000045 1950 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1951 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 1952 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1953 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000042 1954 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1955 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1956 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1957 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1958 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000042 1959 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1960 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 1961 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\hgvyzna.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1962 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLSESSION" ) 1 0.0000045 1963 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\utilman.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1964 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000047 1965 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000045 1966 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1967 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 1968 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1969 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000042 1970 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 1971 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 1972 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1973 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 1974 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000045 1975 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1976 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1977 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf Zrqvn Cynlre\jzcynlre.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1978 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLSESSION" ) 1 0.0000042 1979 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows Media Player\wmplayer.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1980 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 1981 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 1982 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1983 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1984 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1985 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 1986 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1987 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 1988 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 1989 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 1990 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 1991 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1992 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 1993 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\jhcqzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1994 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 1995 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\wupdmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1996 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 1997 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000045 1998 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 1999 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2000 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2001 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000045 2002 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2003 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2004 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2005 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2006 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000042 2007 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2008 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2009 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pnyp.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2010 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLSESSION" ) 1 0.0000042 2011 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\calc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2012 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2013 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000042 2014 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2015 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2016 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2017 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000042 2018 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2019 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2020 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2021 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2022 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000042 2023 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2024 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2025 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfcnvag.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2026 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLSESSION" ) 1 0.0000042 2027 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mspaint.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2028 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000042 2029 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000045 2030 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2031 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000609 2032 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000517 2033 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000042 2034 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2035 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2036 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2037 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2038 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000042 2039 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2040 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 2041 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Jvaqbjf AG\Npprffbevrf\jbeqcnq.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2042 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLSESSION" ) 1 0.0000042 2043 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Windows NT\Accessories\wordpad.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2044 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2045 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000045 2046 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2047 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2048 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2049 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000042 2050 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2051 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2052 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2053 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2054 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000042 2055 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2056 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2057 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\nppjvm.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2058 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLSESSION" ) 1 0.0000042 2059 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\accwiz.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2060 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2061 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000045 2062 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2063 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2064 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2065 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000045 2066 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000226 2067 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2068 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2069 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2070 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000056 2071 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2072 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000229 2073 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\zfgfp.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 2074 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLSESSION" ) 1 0.0000059 2075 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\mstsc.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2076 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000059 2077 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2078 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2079 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 2080 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 2081 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2082 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2083 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2084 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2085 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000056 2086 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2087 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2088 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2089 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\faqerp32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2090 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLSESSION" ) 1 0.0000056 2091 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\sndrec32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2092 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000056 2093 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000106 2094 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000061 2095 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000212 2096 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2097 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000056 2098 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2099 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2100 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2101 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2102 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000056 2103 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2104 4:53:27.621 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 2105 4:53:27.621 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\agonpxhc.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2106 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLSESSION" ) 1 0.0000056 2107 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\ntbackup.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2108 4:53:27.621 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000061 2109 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000056 2110 4:53:27.621 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000087 2111 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000288 2112 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 2113 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000059 2114 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2115 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2116 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000056 2117 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2118 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000056 2119 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2120 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 2121 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\puneznc.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2122 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLSESSION" ) 1 0.0000056 2123 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\charmap.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2124 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000064 2125 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2126 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2127 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 2128 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2129 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2130 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2131 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000056 2132 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000053 2133 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000053 2134 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000056 2135 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000056 2136 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000229 2137 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pyrnazte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 2138 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLSESSION" ) 1 0.0000067 2139 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cleanmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000061 2140 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000067 2141 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000070 2142 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000067 2143 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 2144 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2145 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000045 2146 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2147 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2148 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2149 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2150 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000045 2151 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2152 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2153 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qset.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2154 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLSESSION" ) 1 0.0000042 2155 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfrg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2156 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2157 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2158 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2159 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 2160 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2161 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2162 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2163 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2164 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2165 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2166 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2167 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2168 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000170 2169 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\Pbzzba Svyrf\Zvpebfbsg Funerq\ZFVasb\zfvasb32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2170 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLSESSION" ) 1 0.0000045 2171 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2172 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2173 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000042 2174 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2175 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2176 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2177 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000042 2178 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2179 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2180 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2181 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2182 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000045 2183 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2184 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2185 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pregfei.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2186 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLSESSION" ) 1 0.0000042 2187 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\certsrv.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2188 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2189 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000045 2190 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2191 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 2192 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2193 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 2194 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2195 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2196 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2197 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2198 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000045 2199 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2200 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2201 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Pyhfgre\PyhNqzva.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2202 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLSESSION" ) 1 0.0000089 2203 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Cluster\CluAdmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2204 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2205 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000042 2206 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2207 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2208 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2209 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000045 2210 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2211 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2212 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2213 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2214 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000042 2215 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2216 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2217 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\Pbz\pbzrkc.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2218 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLSESSION" ) 1 0.0000045 2219 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\Com\comexp.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2220 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2221 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2222 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2223 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2224 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2225 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2226 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2227 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2228 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2229 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2230 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2231 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2232 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2233 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\pbzcztzg.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2234 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2235 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\compmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2236 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2237 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000047 2238 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2239 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2240 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2241 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000042 2242 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2243 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2244 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2245 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2246 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000045 2247 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2248 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2249 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\plf.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2250 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLSESSION" ) 1 0.0000045 2251 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\cys.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2252 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000047 2253 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000045 2254 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2255 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2256 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2257 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2258 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2259 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2260 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2261 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2262 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2263 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2264 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2265 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\bqopnq32.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2266 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLSESSION" ) 1 0.0000042 2267 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\odbcad32.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2268 4:53:27.631 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000042 2269 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000042 2270 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2271 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2272 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2273 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000045 2274 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2275 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2276 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2277 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2278 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000042 2279 4:53:27.631 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2280 4:53:27.631 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 2281 4:53:27.631 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\qsfthv.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 2282 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLSESSION" ) 1 0.0000050 2283 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\dfsgui.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2284 4:53:27.641 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000050 2285 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000042 2286 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2287 4:53:27.641 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 2288 4:53:27.641 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2289 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000045 2290 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2291 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2292 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2293 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2294 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000042 2295 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2296 4:53:27.641 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2297 4:53:27.641 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\riragije.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2298 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLSESSION" ) 1 0.0000042 2299 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\eventvwr.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2300 4:53:27.641 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2301 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2302 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2303 4:53:27.641 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 2304 4:53:27.641 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2305 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2306 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2307 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2308 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2309 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2310 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2311 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2312 4:53:27.641 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2313 4:53:27.641 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yyfzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2314 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2315 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\llsmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2316 4:53:27.641 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2317 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000042 2318 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2319 4:53:27.641 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2320 4:53:27.641 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2321 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000045 2322 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2323 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2324 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2325 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2326 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000042 2327 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2328 4:53:27.641 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2329 4:53:27.641 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\frpcby.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2330 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLSESSION" ) 1 0.0000045 2331 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\secpol.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2332 4:53:27.641 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000042 2333 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000045 2334 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2335 4:53:27.641 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2336 4:53:27.641 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2337 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000045 2338 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2339 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2340 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2341 4:53:27.641 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2342 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000117 2343 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000064 2344 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000399 2345 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\zfpbepst.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 2346 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLSESSION" ) 1 0.0000067 2347 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2348 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000084 2349 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000056 2350 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000059 2351 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000237 2352 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000117 2353 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000061 2354 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2355 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2356 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2357 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2358 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000045 2359 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2360 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2361 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\Zvpebfbsg.ARG\Senzrjbex\i1.1.4322\PbasvtJvmneqf.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2362 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLSESSION" ) 1 0.0000042 2363 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2364 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2365 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2366 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2367 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2368 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2369 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2370 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2371 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2372 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2373 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2374 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2375 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2376 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2377 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\ayozte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2378 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2379 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\nlbmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2380 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000042 2381 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000042 2382 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2383 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2384 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2385 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000042 2386 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2387 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000045 2388 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2389 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000047 2390 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000042 2391 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2392 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 2393 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\creszba.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2394 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLSESSION" ) 1 0.0000045 2395 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\perfmon.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2396 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000047 2397 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2398 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2399 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2400 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2401 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2402 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2403 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2404 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2405 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2406 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2407 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2408 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2409 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfzzp.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2410 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2411 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsmmc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2412 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000042 2413 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2414 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2415 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2416 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2417 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2418 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2419 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2420 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2421 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2422 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000042 2423 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2424 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000159 2425 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\eenfztzg.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2426 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLSESSION" ) 1 0.0000045 2427 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\rrasmgmt.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2428 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2429 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000042 2430 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2431 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2432 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2433 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000045 2434 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2435 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2436 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2437 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2438 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000042 2439 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2440 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2441 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\freivprf.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2442 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLSESSION" ) 1 0.0000042 2443 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\services.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2444 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000042 2445 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2446 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2447 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2448 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2449 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2450 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2451 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2452 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2453 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2454 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000042 2455 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2456 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000296 2457 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\yvpzte.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000212 2458 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLSESSION" ) 1 0.0000045 2459 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\licmgr.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2460 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2461 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2462 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2463 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 2464 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2465 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000045 2466 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2467 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2468 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000045 2469 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2470 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000045 2471 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2472 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2473 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfpp.zfp", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2474 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLSESSION" ) 1 0.0000042 2475 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tscc.msc", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2476 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000042 2477 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 2478 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2479 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2480 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2481 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 2482 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2483 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2484 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000042 2485 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2486 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 2487 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2488 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2489 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\flfgrz32\gfnqzva.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2490 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLSESSION" ) 1 0.0000042 2491 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\system32\tsadmin.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2492 4:53:27.651 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000070 2493 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000045 2494 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2495 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000212 2496 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_SUCCESS 0.0000123 2497 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000045 2498 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2499 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000042 2500 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000042 2501 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2502 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000154 2503 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\Cebtenz Svyrf\ebuvgno.pbz\NCV Zbavgbe\ncvzbavgbe-k86.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_SUCCESS 0.0000070 2504 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLSESSION" ) 1 0.0000042 2505 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\Program Files\rohitab.com\API Monitor\apimonitor-x86.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2506 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000042 2507 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2508 4:53:27.651 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2509 4:53:27.651 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x01dbdbd0, 0x01dbec8c, 0x01dbec3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2510 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000042 2511 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000045 2512 4:53:27.651 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLSESSION" ) -1 0.0000042 2513 4:53:27.662 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLCUACount:ctor", "UEME_CTLCUACount:ctor" ) 0 0.0000047 2514 4:53:27.662 AM 1 BROWSEUI.dll StrCmpW ( "UEME_CTLSESSION", "UEME_CTLSESSION" ) 0 0.0000045 2515 4:53:27.662 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000045 2516 4:53:27.662 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2517 4:53:27.662 AM 1 BROWSEUI.dll SHQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 2518 4:53:27.662 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000002ec, "HRZR_EHACNGU:P:\JVAQBJF\uu.rkr", NULL, 0x01dbdc0c, 0x01dbec98, 0x01dbec78 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2519 4:53:27.662 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLSESSION" ) 1 0.0000045 2520 4:53:27.662 AM 1 BROWSEUI.dll StrCmpW ( "UEME_RUNPATH:C:\WINDOWS\hh.exe", "UEME_CTLCUACount:ctor" ) 1 0.0000042 2521 4:53:27.662 AM 1 Explorer.EXE IsOS ( 38 ) FALSE 0.0000045 2522 4:53:32.739 AM 2 SHELL32.dll PathBuildRootW ( 0x001236d0, 2 ) 0x001236d0 0.0000059